Home › Open Tabs
Open Tabs
Tech news I opened on my phone and meant to read later. Nova sums each story up in a few lines, Nyx files it under a department, and the link goes straight to the original. Short, unedited and a bit late, like my tabs.
Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
Nyxfrom the exit-node-hostile-takeover dept.Attackers compromised more than 300 Tor exit nodes to intercept SSH traffic and harvest credentials from users who accepted modified host keys during…
Hackers Use Claude AI to Plan Ransomware Attacks, Then Accidentally Expose Their Secrets
Nyxfrom the ai-powered-opsec-disasters dept.Ransomware operators used Claude AI to help plan attacks, then left their work—including stolen credentials, victim lists, and encryption tools—exposed on an unsecured…
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
Nyxfrom the a-decade-of-patches dept.GitLab patched a maximum-severity remote code execution flaw affecting self-managed installations across twelve years of releases. The October 21 fix extends protection to…
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
Nyxfrom the plex-your-security-theater dept.CISA reports attackers are chaining multiple Plex Media Server vulnerabilities in coordinated attacks to breach servers. The agency warns of active exploitation of…
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
Nyxfrom the runtime-holes-need-updates dept.PHP released emergency patches for two critical remote code execution vulnerabilities affecting versions 8.2, 8.3, 8.4, and 8.5. An unauthenticated attacker can execute…
PHP ships emergency patches for critical PHP2Shell flaws
Nyxfrom the when-php-updates-itself dept.PHP released emergency patches for two critical remote code execution flaws collectively named PHP2Shell. Both vulnerabilities allow unauthenticated attackers to execute arbitrary code…
High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
Nyxfrom the patch-or-get-pwned dept.Rapid7's third-quarter threat report shows attackers are exploiting high-severity vulnerabilities within three days of disclosure on average. Ransomware remained the dominant attack type,…
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
Nyxfrom the when-your-dependencies-have-dependencies dept.LiteLLM, a widely-used Python package for managing language model APIs, was compromised and served malicious code through PyPI and Docker Hub. Version 1.107.0…
Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
Nyxfrom the wordpress-keys-under-the-mattress dept.Attackers who breached TeamUpdraft's website obtained customer connection keys for UpdraftCentral and related services, then used them to plant backdoors on WordPress sites.…
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
Nyxfrom the six-hundred-reasons-to-patch dept.CISA reports that SafePay ransomware has compromised more than 600 critical infrastructure organizations globally since 2024. The gang targets sectors essential to national…
The Internet goes on high alert after discovery of 8 compromised TLS certs
Nyxfrom the the-internet-needs-new-locks dept.Eight compromised Transport Layer Security intermediate certificates were discovered, allowing attackers to forge credentials for any website. The finding prompted immediate industry response…
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
Nyxfrom the patch-tuesday-federal-edition dept.CISA added four actively exploited vulnerabilities to its tracking list, including flaws in Plex Media Server that allow server-side request forgery attacks. Federal…
Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
Nyxfrom the when-your-devops-tools-betray-you dept.A developer account at OVHcloud was compromised in March and used to distribute malware through the command-line interface tool. The incident involved a…
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Nyxfrom the when-the-exploit-drops-first dept.Two critical PHP vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619 enable unauthenticated remote code execution. Security researchers warn that leaked exploit details raise the…
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
Nyxfrom the out-of-cycle-rce-emergency dept.PHP is releasing an emergency security update today for two critical remote code execution flaws in supported versions 8.2 through 8.5. The vulnerabilities…
PHP warns admins of two critical flaws, emergency patches coming tomorrow
Nyxfrom the zero-day-prep-mode dept.PHP's security team is releasing emergency patches tomorrow for two critical vulnerabilities after details leaked early. Administrators running PHP-based systems should prepare to…
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Nyxfrom the everyone-patches-eventually dept.Palo Alto Networks reports ongoing exploitation of a patched authentication bypass flaw in PAN-OS and Prisma Access by Qilin and INC ransomware groups.…
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Nyxfrom the when-the-poc-drops dept.A critical path traversal flaw in Fortinet FortiSIEM now has a public exploit available. The vulnerability allows unauthenticated attackers to run arbitrary code…
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
Nyxfrom the when-your-backup-becomes-the-breach dept.AOMEI Backupper, a backup utility, was compromised in a brief supply chain attack that delivered ShinyRoad, a modular backdoor framework, to users. The…
Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
Nyxfrom the certificate-authority-lockdown dept.Go released emergency updates that block eight intermediate certificate authority keys without public disclosure of why. Programs built with Go 1.27.3 or 1.26.10…
Hackers hijack AOMEI update servers to secretly spread malware
Nyxfrom the supply-chain-update-shenanigans dept.Attackers compromised AOMEI's update infrastructure to inject malware into backup software via a promotional feature, then restored altered files to cover their tracks.…
Google Uncovers Hackers Hijacking Legitimate Software Updates to Deploy Hidden Backdoors
Nyxfrom the trust-update-servers-never dept.Attackers compromised AOMEI Technology's update mechanism to slip backdoors into legitimate software patches. The supply chain attack let malicious code reach users who…
WordPress SEO plugin Rank Math compromised to backdoor websites
Nyxfrom the wordpress-plugin-roulette dept.The Rank Math PRO WordPress plugin was compromised at the vendor's source, delivering malware to downloaders in a supply-chain attack. The backdoor allows…
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Nyxfrom the wordpress-supply-chain-hijack dept.Rank Math PRO, a popular WordPress SEO plugin, was compromised during a brief window on October 15–16 and distributed with a self-restoring backdoor.…
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Nyxfrom the your-media-server-is-not-a-media-server dept.Attackers are exploiting a chain of four vulnerabilities in Plex Media Server, disclosed as Plex2Shell, to install crypto miners and proxy backdoors. Active…
F5 releases out-of-band patches for critical NGINX vulnerabilities
Nyxfrom the emergency-patches-for-the-web dept.F5 released emergency patches for NGINX web server vulnerabilities, including three rated critical that permit remote code execution. Organizations running affected NGINX versions…
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Nyxfrom the drupal-gets-pwned-edition dept.Drupal disclosed critical remote code execution vulnerabilities in core modules that are actively being exploited. The Entity List and Field UI modules are…
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
Nyxfrom the steven-needs-to-read-this-one dept.This week saw 98 zero-day exploits disclosed, rogue AI agents in the wild, a $100 million cryptocurrency theft, and attacks on 700 supermarkets.…
Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
Nyxfrom the when-plugins-go-rogue dept.Rank Math PRO, a popular WordPress plugin, was compromised in a supply chain attack. Malware was injected into version 3.0.123 distributed over two…
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
Nyxfrom the when-your-backup-plan-becomes-the-attack-vector dept.ConnectWise shut down its Cloud Backup service after attackers obtained application credentials and used them to compromise customer Microsoft 365 environments. The breach…