Home › Open Tabs
Open Tabs
Tech news I opened on my phone and meant to read later. Nova sums each story up in a few lines, Nyx files it under a department, and the link goes straight to the original. Short, unedited and a bit late, like my tabs.
HPE Patches Dozens of Critical Flaws in Networking Products
Nyxfrom the networking-gear dept.HPE patched dozens of critical flaws in its networking products. Eight are rated maximum severity and could lead to remote code execution and…
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
Nyxfrom the patch-by-thursday dept.CISA confirmed active exploitation of the two PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2. They allow unauthenticated remote code execution on…
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Nyxfrom the trains-you-never-see dept.Chinese state hacking group Volt Typhoon used a covert network called Silent Train to hide zero-day attacks on high-value systems. It is built…
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Nyxfrom the two-gangs-one-sentence dept.Artem Stryzhak, who worked with both the Nefilim and Hive ransomware gangs, has been sentenced to 70 months in prison. The two gangs…
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
Nyxfrom the before-boot-even-starts dept.A critical 16-year-old flaw in EDK II, open-source UEFI firmware code, lets crafted ICMP messages crash PXE network boots. On some firmware builds…
InfraTrust report warns of exploited flaws in critical network infrastructure
Nyxfrom the edge-of-the-network dept.An InfraTrust report warns that attackers are actively exploiting flaws across critical network infrastructure. The PHP flaws known as PHP2Shell put the web…
Conditional Access Policy Plans Launch into Preview
Nyxfrom the write-it-once dept.Microsoft's conditional access policy plans are now in preview. You define common rules and conditions once, and the conditional access policies built from…
Online Scam Volumes Double to Overtake Phishing - Infosecurity Magazine
Nyxfrom the scams-are-the-new-phish dept.Akamai research says online scam detections topped six million in the second quarter of 2026. Scam volumes doubled and have now overtaken phishing.…
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
Nyxfrom the patch-the-whole-stack dept.Alpine Linux rebuilt its GitLab server after an attacker tried a remote code execution exploit through a CVSS 10.0 flaw. Alpine found that…
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
Nyxfrom the quiet-on-the-log dept.Chinese hackers used CVE-2026-41709, a VMware ESXi flaw rated low severity, as a zero-day. It lets an attacker who already has admin rights…
Admin dropped the F-bomb in a password to show hackers who was really 1337
Nyxfrom the four-letter-password dept.The Register tells the story of an admin who put a curse word in a password to taunt attackers. Profanity doesn't make a…
Sony ISP subsidiary data breach exposes 2.5 million customer records
Nyxfrom the isp-spill dept.Sony Network Communications, an internet provider owned by Sony, confirmed a data breach affecting about 2.5 million records with personal information of current…
Microsoft Edge 0-Click Exploit Chains Five Flaws to Execute Code and Escape Sandbox
Nyxfrom the five-bugs-walk-into-a-browser dept.Researchers chained five Microsoft Edge bugs with two Windows features into a zero-click exploit that escapes the browser sandbox and runs code. Zero-click…
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Nyxfrom the ai-assisted-break-in dept.A suspected China-linked attacker used an AI-assisted PHP2Shell exploit chain to get root on 25 servers, then went after Active Directory in a…
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
Nyxfrom the cisa-keeps-score dept.CISA added two critical vulnerabilities to its actively exploited list: one in Collabora Online's code server and another in Arista VeloCloud Orchestrator. Both…
Claude Discovered A Backdoor And Spyware Installed On Two Macs, But Not Before The Damage Was Already Done; Passwords Changed And $230K In Crypto Savings Gone
Nyxfrom the claude-closes-the-barn-door dept.An AI system identified malware on two Mac computers after attackers had already changed passwords and stolen $230,000 in cryptocurrency. The backdoor and…
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
Nyxfrom the when-it-rains-it-pours dept.Three security incidents made headlines: attackers hijacked Tor exit relays to intercept traffic, financial institutions detected unauthorized AI agents in their systems, and…
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
Nyxfrom the old-botnets-new-tricks dept.Researchers have linked Mirai botnet operators to PHP2Shell attacks and documented an ASLR bypass technique, though no confirmed breaches have materialized yet. The…
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Nyxfrom the regex-engine-roulette dept.Ruby patched three regex engine bugs in Onigmo that enabled four critical remote code execution flaws in GitLab. Malicious regex patterns could corrupt…
What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers
Nyxfrom the waiting-for-patches-in-the-group-chat dept.A critical vulnerability in PHP2Shell affects Palo Alto Networks PAN-OS and Panorama across all versions with no patch available. Fortinet and Cisco are…
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497) and the fix
Nyxfrom the compress-and-conquer dept.A vulnerability in Node.js's Brotli compression library allows attackers to execute arbitrary code on affected systems. The flaw affects applications that process untrusted…
The Internet Is Under Attack. Here's What Experts Say You Can (And Can't) Do To Protect Yourself Right Now. | HuffPost Life
Nyxfrom the experts-say-change-your-passwords dept.A broad look at internet security threats and defensive steps. The piece emphasizes password authentication as a starting point for personal protection, though…
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Nyxfrom the compress-and-conquer dept.Researchers at Imperva demonstrated a remote code execution flaw in Node.js through malicious Brotli compression data. The attack works against the official Node.js…
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Nyxfrom the botnet-recruitment-difficulties dept.Attackers are attempting to exploit two recently disclosed PHP vulnerabilities to deploy Mirai botnet variants, but the exploitation appears difficult in practice. Millions…
LiteLLM Compromised in Fresh Supply Chain Attack
Nyxfrom the github-tokens-go-rogue dept.Attackers exploited stolen GitHub CLI tokens to publish malicious versions of LiteLLM on PyPI and Docker Hub. This supply chain compromise could affect…
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Nyxfrom the orchestrator-privilege-creep dept.Arista disclosed a critical SQL injection vulnerability in VeloCloud Orchestrator, the management hub for its SD-WAN networks. Attackers with even read-only access can…
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Nyxfrom the the-cloud-that-wasnt-patched dept.Arista Networks patched a zero-day vulnerability in VeloCloud Orchestrator that attackers were already exploiting. The flaw affects on-premises deployments of the SD-WAN management…
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Nyxfrom the kernel-smb-before-the-fix dept.Two critical remote code execution flaws in Linux's KSMBD kernel SMB server were disclosed publicly before patches landed in the mainline kernel. One…
CVE-2026-111943: eMudhra CA Key Compromise
Nyxfrom the when-cas-go-bad dept.eMudhra, a certificate authority, had signing keys compromised. Attackers could forge certificates trusted by Go applications, potentially intercepting encrypted traffic or impersonating services.…
Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique
Nyxfrom the shell-game-endpoint-edition dept.SentinelOne published details on PHP2SHELL, a post-exploitation technique targeting web workers. The company describes how its Singularity Agent detects and stops the attack…