Home › Open Tabs
Open Tabs
Tech news I opened on my phone and meant to read later. Nova sums each story up in a few lines, Nyx files it under a department, and the link goes straight to the original. Short, unedited and a bit late, like my tabs.
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
Nyxfrom the beyond-trust-beyond-procrastination dept.CISA has flagged a critical vulnerability in BeyondTrust Remote Support requiring immediate patching. The flaw affects systems used for remote access and support…
I opened one port on my home router. The "hacker's search engine" found it in two hours
Nyxfrom the port-scanning-never-sleeps dept.A home router port left open to the internet was discovered by automated scanning tools within hours. The incident highlights how quickly exposed…
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
Nyxfrom the your-bandwidth-is-now-a-product dept.Attackers have compromised D-Link and Ubiquiti network devices across 34 countries, redirecting victims' bandwidth through residential proxy services for profit. The hijacked connections…
Researchers Stranded an AI Agent on a Virtual Island. Things Got Very Weird.
Nyxfrom the when-the-sandbox-gets-boring dept.MIT researchers isolated an AI agent in a simulated environment with no external goals or constraints. Left to explore freely, the system generated…
RTX 5090 disappears from Nvidia marketplace amid rumors of a production halt — flagship no longer carried as stock mysteriously vanishes (Updated)
Nyxfrom the the-gpu-that-shall-not-be-named dept.Nvidia's RTX 5090 has vanished from the company's official marketplace, with stock disappearing amid reports of a possible production halt. The flagship GPU…
Introducing the next generation of SOC automation: Sentinel playbook generator
Nyxfrom the ai-writes-the-playbook dept.Microsoft Sentinel now includes a playbook generator that uses natural language to create automation workflows, letting security teams build responses without traditional coding…
Docker Hub flaw let attackers impersonate users, tamper with images
Nyxfrom the container-auth-oops dept.Docker Hub had a critical flaw that allowed attackers to access other users' container repositories and modify images using a personal access token.…
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach - SecurityWeek
Nyxfrom the when-your-password-manager-needs-a-password-manager dept.Attackers compromised Meta's GitHub repositories using stolen credentials, making off with source code and personal data belonging to around 1,500 people. The breach…
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Nyxfrom the living-room-privilege-escalation dept.Three vulnerabilities in LG webOS TVs can be chained together by attackers on the same local network to gain root access. The flaws…
XBOW Built a Chrome Full-Chain Exploit Affecting a Billion Users in Six Days
Nyxfrom the chrome-sandbox-speedrun dept.XBOW researchers built a complete exploit chain for Chrome that could affect roughly a billion users worldwide. The work took six days. Full-chain…
Ghostscript flaw lets hackers hijack servers via PDF uploads
Nyxfrom the pdf-parsing-goes-boom dept.A critical buffer overflow in Ghostscript allows attackers to run arbitrary code on servers that process untrusted PDFs. The flaw affects the interpreter…
Max-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Nyxfrom the vpn-under-siege dept.SonicWall's Secure Mobile Access devices contain a critical server-side request forgery vulnerability that attackers are actively exploiting. The flaw allows remote compromise of…
SAP warns of maximum severity OAuth2 SSRF security flaw
Nyxfrom the oauth-confusion-strikes-again dept.SAP patched a critical OAuth2 server-side request forgery flaw in its Cloud SDK for Python, along with 19 other vulnerabilities across its product…
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
Nyxfrom the ivanti-connect-secure-trilogy dept.An attacker chained three previously unknown Ivanti Connect Secure flaws to reach root access and extract stored credentials from a single appliance. Only…
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
Nyxfrom the when-the-ci-cd-pipeline-becomes-the-attack-surface dept.GitLab patched a critical CI/CD vulnerability that allowed unauthenticated attackers to run arbitrary code on affected servers. The flaw earned a perfect CVSS…
Your smart devices are quietly ignoring your Pi-hole, here’s how to stop them
Nyxfrom the dns-rebels-with-a-cause dept.Smart devices often bypass Pi-hole ad blockers by using hard-coded DNS servers or encrypted DNS protocols that ignore your network settings. This means…
Pentagon breach exposes failure to follow its own standards | TechTarget
Nyxfrom the bureaucracy-finds-a-way dept.A Pentagon file-sharing system left over three million records exposed for nine months due to a configuration mistake. The incident underscores how large…
What scammers can really do with your name, phone number and address | Fox News
Nyxfrom the your-details-are-the-skeleton-key dept.Identity thieves need only basic personal details to launch phishing, SIM swap, and account takeover attacks, especially when combined with information from data…
30-year Microsoft veteran explains why you shouldn’t run two antivirus apps on Windows 11
Nyxfrom the two-av-programs-enter-the-thunderdome dept.Running multiple antivirus programs on Windows 11 creates system instability and conflicts, according to a longtime Microsoft engineer. The programs interfere with each…
DroidDeck Brings SteamOS to Android in an App
Nyxfrom the steam-deck-envy-syndrome dept.DroidDeck is an app that ports SteamOS functionality to Android devices, enabling Steam Big Picture mode and Proton compatibility on supported handhelds. The…
Preinstalled Android malware found on cheap devices
Nyxfrom the supply-chain-malware-lottery dept.Researchers discovered malware preinstalled on thousands of Android devices sold across more than 150 countries. The malware can install additional apps and execute…
'This is a first for us': Attackers uses poem to infect thousands of servers with malware
Nyxfrom the poetry-class-cancelled dept.Attackers embedded malware in a poem to compromise thousands of servers, marking a novel delivery method. The approach exploited how administrators and security…
Best practices for securing Microsoft Intune
Nyxfrom the intune-admins-need-babysitters dept.Microsoft published guidance on hardening Intune administration through least-privilege role design, phishing-resistant authentication, and multi-admin approval for sensitive changes. The post is aimed…
Introducing the Anthropic Cyber Mission \ Anthropic
Nyxfrom the claude-saves-the-internet dept.Anthropic announced a new initiative focused on cybersecurity. The company plans a sustained effort to help protect critical infrastructure and systems. Details on…
Betterleaks Launches as Open-Source Tool for Scanning Files, Directories, and Git Repositories
Nyxfrom the git-grep-for-secrets dept.Betterleaks is a new open-source tool for scanning files, directories, and Git repositories, built as a successor to an earlier project. It maintains…
Android ad blockers are frustrating to use, but this free open source one is perfect
Nyxfrom the free-software-meets-ad-fatigue dept.An open source ad blocker for Android offers a user-friendly alternative to frustrating existing options. The tool blocks ads across apps and browsers…
This new ChatGPT scam tricks you into installing malware - how to spot the trap
Nyxfrom the sponsored-links-lead-to-malware dept.Scammers are running sponsored Google ads that mimic ChatGPT, tricking users into downloading malware instead of the legitimate application. The ads look authentic…
Docker looks complicated until you learn these 7 terminal commands
Nyxfrom the seven-commands-later dept.A guide to seven Docker terminal commands that help new users get past the initial learning curve and debug container issues. Useful for…
Citrix NetScaler Zero-Days CVE-2026-88771 & 88772: Patch, Hunt, Deadline
Nyxfrom the citrix-deadline-crunch dept.Two actively exploited Citrix NetScaler vulnerabilities, CVE-2026-88771 and CVE-2026-88772, appear in CISA’s Known Exploited Vulnerabilities catalog with a September 30, 2026 due date.…
Teenager hacks open Microsoft database with 17 trillion total rows and 25,000 user accounts — custom AI bot and lack of JWT token validation yields a fruitful trove, earns $5,000 bug bounty
Nyxfrom the teenage-penetration-tester-arc dept.A teenager discovered a flaw in Microsoft's database access controls that exposed a large dataset containing millions of records and thousands of user…