This posting is here to collect cyber security news in October 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
This posting is here to collect cyber security news in October 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
505 Comments
Tomi Engdahl says:
Researchers say “North Korea’s elite hacking unit” is to blame. https://trib.al/s5nt3d8
Smoke Break
It Took Hackers Just 20 Minutes to Steal $6.3 Billion in Crypto from a Single Platform
Researchers say “North Korea’s elite hacking unit” is to blame.
https://futurism.com/future-society/hackers-20-minutes-crypto-binance?fbclid=IwdGRjcAVSlHxjbGNrBVKUYWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfb8jGeZrdfjYNvDrxV9ZdW8Y_wZcwCWCOyXRqNgfZX-19sF8IHz9xHw3OmFQ_aem_PNxxyJpBPCMySTreGqxRKQ
Crypto exchange Binance suspended withdrawals after elite hackers stole a staggering $6.3 billion in digital assets, marking what may be the biggest crypto heist of all time.
Researchers at the crypto research firm TRM Labs told the New York Times that they have “high confidence” in its assessment that the theft was the work of “North Korea’s elite hacking unit.” It reportedly took just 20 minutes to drain Binance of billions of dollars in crypto.
Tomi Engdahl says:
Money Managed
These Supposedly Super Secure Ledger Blockchain Wallets Are Secretly Draining User’s Crypto Holdings
Gone in a flash.
https://futurism.com/future-society/ledger-blockchain-wallet-crypto-hack?fbclid=IwVERDUAVSlNBleHRuA2FlbQIxMABwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABH4NLYOcQjNXNAzlUZ9p92Y52UBUiQ17NLOnNwVEnDbfiwJUSH0i7gmer3Z_W_aem_nJX3_VpKDBiWFvpulmJ8gw
Tomi Engdahl says:
Saitko viestin Viking Linelta? Yhtiö vahvistaa, että uutiset ovat huonoja
Joku on päässyt käsiksi Viking Linen asiakastietoihin.
https://www.iltalehti.fi/digiuutiset/a/3837392e-f857-4d09-bdc9-75d1ff145892
Yhtiö vahvistaa tietomurron Iltalehdelle. Christa Grönlund Viking Linen viestinnästä kertoo sähköpostitse, että tietomurto koskee arviolta 389 varausta.
Tietomurto on kohdistunut Viking Linen alihankkijaan. Se on tehty aikavälillä 23.10.–26.10.
Murtautuja on todennäköisesti saanut haltuunsa asiakkaiden nimiä, puhelinnumeroita, sähköpostiosoitteita ja varausnumeroita. Lisäksi mukana on ollut tietoja varatuista hotelleista tai tuotteista sekä matkojen ajankohdista ja hinnoista.
Tiedot on todennäköisesti kopioitu luvatta, ja niitä on saatettu myös julkaista luvatta netissä.
Tomi Engdahl says:
eMudhra Has Quit TLS. The Accountability Questions Haven’t
https://inc42.com/features/emudhra-has-quit-tls-the-accountability-questions-havent/
On October 27, Google removed eMudhra’s root certificate called emSign ECC Root CA – G3. Any website still relying on it began showing Chrome users a full-page security warning.
This action follows a series of events that unfolded in mid-October with Bengaluru-based eMudhra, India’s largest licensed certifying authority, at the centre of it all.
A researcher had shown that the private keys of eight certificate authorities under eMudhra’s global hierarchy were so weak that anyone could work them out. One of them was the number 4.
What followed was swift action, at least outside India. All major browser makers blocked the certificates within hours. Software maintainers shipped emergency patches and eMudhra revoked the certificates.
Within five days of the vulnerability being reported, eMudhra’s board decided to exit the global TLS certificate business altogether.
However, in India, the response to this security incident has been noticeably slower.
The IT ministry (MeitY) has formed a special team to investigate and CERT-In issued an advisory four days after the initial report of the vulnerability.
While eMudhra has walked away from a business that it says contributes 1% of its revenue, the question is who holds a certificate authority accountable in India? What rules may have been broken by eMudhra in the process of this still-developing situation, and what could the penalties be?
How The Browsers Shut The Door
The trouble began well before October. The eight keys were created at a single key ceremony, the formal process in which a certificate authority generates its keys, on April 30, 2025. Industry rules require such ceremonies to follow a written script, to be watched by a qualified auditor or recorded on video, and to be signed off in an auditor’s report.
eMudhra claims a flaw in its script created a second, weak set of keys, which were used by mistake because their labels looked similar. Each key should have been about 116 digits long; all eight were below 256. The flaw went undetected for about 18 months, across two audit cycles. “I don’t know. We went through two external audit cycles,” said Kaushik Srinivasan, cofounder, eMudhra, calling it “a one-off, a bad day.” An auditor’s report is due in two to three weeks.
Once a researcher flagged the weak keys on October 17, the response from browser makers was immediate.
Google was swift on its feet by reacting in an hour and 40 minutes later after it received the researcher’s report on October 17. Google’s Chrome had blocked the six website-securing certificates through CRLSet, a blocklist it pushes to browsers without needing an update or restart.
Mozilla moved almost as fast. It blocked the certificates in Mozilla Firefox within hours of receiving the report. It also released browser updates and is updating its wider certificate store to protect other applications. Apple followed on October 19
These companies — some of the biggest tech companies in the world — then went a step further.
Removing eMudhra’s root access is a heavier step than blocking a certificate.
Where TLS Fits In eMudhra’s Business
eMudhra was founded in 2008 and listed on the BSE and NSE in 2022. Among its customers, Government and defence account for 30% of its revenue, banking and financial services for 25%, and other enterprises for 45%. It operates mainly in two lines of business: enterprise software and trust services.
Enterprise software is now the core of the business. It sells platforms like emSigner, for digital document signing; SecurePass, for identity and access management; CertiNext, which helps organisations track and renew their certificates.
Trust services is the certificate business. eMudhra issues digital signature certificates, which are electronic identities used to legally sign digital documents, verify the signer’s identity, and file online forms. In India, the Controller of Certifying Authorities (CCA) regulates and permits CAs like eMudhra to issue digital signature certificates.
Users could buy a digital signature certificate either for themselves or for an established organisation on eMudhra Digital website. The company said it handled digital signatures for India’s income tax, GST, customs and company law filings.
Outside India, eMudhra issues digital signature certificates to individuals and organisations under its own emSign root brand, and is licensed or approved as a provider by governments including Kenya, UAE, and Mauritius. It is accredited by the independent audit and assurance program called WebTrust.
eMudhra’s trust services also include SSL/TLS certificates, the digital credentials that secure websites, sold under the same emSign brand.
Following the distrust action, On October 22, eMudhra announced that it has decided to wind up this SSL/TLS certificate business, withdrawing not just the affected G3 root, but also G1 root.
The segment accounts for around 1% of this publicly listed company’s global revenue.
The Question Of Accountability
That distinction matters for accountability. As a licensed certifying authority, under the IT Act, the company is obliged to use secure procedures, disclose facts that may affect its reliability. Additionally, Information Technology (Certifying Authorities) Rules, 2000, requires the certifying authority’s operations to be audited every year, with each audit report sent to the CCA within four weeks. IFF argues these duties still reach the emSign business, because eMudhra’s own staff ran the failed ceremony.
CERT-In’s role raises its own questions. Its 2022 Directions require companies to report any of 15 listed types of cyber incidents, including the compromise of critical systems or information, within six hours of noticing them. CERT-In’s advisory says eMudhra reported the compromise, but not when.
“A weak or vulnerable key would not, by itself, establish that a personal-data breach occurred. However, it could allow malicious actors to create web pages or sites that appear legitimate and pass security checks,” said Nikhil Jhanji, principal product manager at IDfy, which runs the DPDP compliance platform Privy.
So far, the only penalty eMudhra has faced is the one the browsers imposed. Indian law offers several more, but most come with a catch. The heaviest Indian lever, licence revocation, would hit the DSC business that did not fail, rather than the TLS business that did. That mismatch is the core of the governance gap.
The magnitude of the incident complicates the picture too, even though eMudhra has consistently tried to play it down.
While no attack using the keys has been reported, the keys were effectively public for about 18 months, around 30,000 certificates were affected for a single US client, and software makers shipped emergency fixes. All of this suggests the situation is a lot more serious than what eMudhra has publicly stated.
Even the IT Ministry (MeitY) calls the Indian impact limited, despite the fact that many key government websites, including the Aadhaar issuer UIDAI and the income tax filing portal, use digital certificates or other technology from eMudhra.
India has been on the receiving end of browser enforcement before. In 2014, after the National Informatics Centre misissued certificates for Google domains, Google restricted the India CCA root to a handful of Indian domains such as gov.in and nic.in.
The bill for eMudhra is a small revenue line and a large reputational one. The bill for India may last longer.
eMudhra was a major Indian root certificate authority trusted by browsers worldwide. Once its exit is complete, Indian websites may have to depend largely on foreign certificate authorities for the padlock in the address bar.
“When news like this comes out about a company that supports our PKI infrastructure, it raises concerns about both the company’s reputation and the country’s reputation… People may start to question whether PKI infrastructure provided by Indian companies can be trusted,” said Abhijeet Zilpelwar, cofounder and CTO of pi-labs.
But what we have seen is a complete breakdown of the trust in a company whose entire business hinges on trust. Will eMudhra end up paying a bigger price for this mistake than it has so far?
Tomi Engdahl says:
So far, the DOE has identified over 830,000 potentially fraudulent federal student aid accounts created using the personally identifiable information of US citizens.
Thousands of “ghost students” use AI to steal millions in student loans, DOJ says
Applying for FAFSA may get messy as DOJ “ghost student” crackdown ramps up.
https://arstechnica.com/tech-policy/2026/10/doj-exposes-ghost-students-using-ai-to-complete-courses-steal-student-loans/?utm_source=facebook&utm_medium=social&utm_campaign=dhfacebook&utm_content=null&fbclid=IwdGRjcAVS3AlleHRuA2FlbQIxMQBwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABH0fXP2TnJFBYJQ1jibittgXtE_vw2GsVoOoG1vW8MjFjkfxkFBvcwpLvJMVx_aem_AnwqiR_-LAccxNEd7OTpqw
The US has charged five individuals as part of the first broad federal crackdown on “ghost students”—fraudsters who steal the identities of hundreds of Americans to pose as fake college students and steal student loans.
In a press release Thursday, the Department of Justice said it had uncovered a large-scale scheme relying partly on AI. The DOJ seized more than $750,000 in cryptocurrency from “a network associated with Kenyan nationals” after data analysis helped flag likely fraudsters. Assistant Attorney General Colin M. McDonald of the DOJ’s National Fraud Enforcement Division credited new fraud-detection measures implemented by the Trump administration for the arrests. He said that “this is the first international seizure of its kind in Kenya,” while warning fraudsters that the crackdown has only just begun.
Tomi Engdahl says:
Cloudflare saw millions of php2shell attacks, and its new WAF defense is free for everyone
https://www.makeuseof.com/cloudflare-stopped-millions-of-php2shell-attacks-and-turned-on-a-new-free-waf-for-everyone/?link_source=ta_first_comment&taid=6ada411a0c6cc100013ef86a&utm_campaign=trueanthem&utm_medium=social&utm_source=facebook&fbclid=Iwb21leAVH56RjbGNrBUfnl2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeYrx4RXXw3Xkp0hZug2D2G683y5WN-dVawerKfiFlArJDjMjYCUmlF2qNYho_aem_dUyANy-6hBttZbOCcb5jHg
Tomi Engdahl says:
EU-oikeus päätti: Pankkien pitää korvata huijauksissa menetetyt rahat ihmisille heti – Pankit puulla päähän lyötyjä
Yhä useampi menettää rahaa pankkihuijausten takia. Nyt tuli uusi tulkinta siitä, miten pankkien pitäisi korvata menetykset asiakkailleen.
https://www.tekniikkatalous.fi/uutiset/a/854b1587-e707-482e-8769-42181c6a40b6?ref=box%3A934e&utm_source=rap.iltalehti.fi&utm_medium=almainternal&utm_campaign=kiintea_talent_ohjausboksi
Tomi Engdahl says:
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
https://thehackernews.com/2026/10/cloudflare-reports-182-million-network.html?m=1
Tomi Engdahl says:
Google joins OpenAI and Anthropic in promising new scraping controls
The new robots.txt directive will prevent the companies from scraping content for generative AI training.
Read More: https://www.engadget.com/2303225/google-openai-anthropic-ai-crawling-controls/
Tomi Engdahl says:
https://github.com/yz9yt/vaivar
Tomi Engdahl says:
Euroopan kiristyvä kyberuhkakenttä kaventaa yritysten pelivaraa
Kyberuhat kehittyvät niin nopeasti, että mukana pysyminen on entistä haastavampaa. Yrityksille se tarkoittaa ennen kaikkea yhtä asiaa: reagointiaika on lyhentynyt merkittävästi. DNA:n turvallisuusjohtaja Seppo Pekonen kertoo, miltä Euroopan kyberuhkakenttä näyttää ja miten kaikenkokoisten yritysten tulisi varautua.
https://www.dna.fi/yrityksille/blogi/-/blogs/euroopan-kiristyva-kyberuhkakentta-kaventaa-yritysten-pelivaraa?utm_source=facebook&utm_medium=paid&utm_content=TEK-artikkeli-euroopan-kiristyva-kyberuhkakentta-kaventaa-yritysten-pelivaraa&utm_campaign=P_TEK_26-40-44_artikkelikampanja&fbclid=Iwb21leAVRzcRleHRuA2FlbQEwAHBkb2YFYWRpZAGrOSTNN-18c3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfdaVwCsLvsF7omZOhpHJvfuGMaYsol-L-sh7BmkBjVWwDnnjYmg0Z_9J0XEo_aem_1LvBjSAI6DsJ14EMb4GPBA&utm_id=120252645179340556&utm_term=120252645179330556
Tomi Engdahl says:
https://www.techpolicy.press/llms-are-still-making-election-deepfakes-just-days-before-the-us-midterms/
Tomi Engdahl says:
Zend PHP Long-Term Support
Get enterprise-grade PHP security fixes and EOL support for critical vulnerabilities including php2shell patches for CVE-2026-109618 and CVE-2026-109619.
https://www.zend.com/p/php-long-term-support/get-php-lts?utm_source=linkedin&utm_medium=paidsocial&utm_campaign=znd-glb-2023-cpc-gaw-phpltsvulnerabilityupdate&utm_content=long-term-support&li_fat_id=44989b23-1d64-46b0-99c2-ce633cc81516
Tomi Engdahl says:
https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html?m=1
Tomi Engdahl says:
https://www.bleepingcomputer.com/news/security/hackers-now-exploiting-max-severity-gitlab-flaw-in-attacks/
Tomi Engdahl says:
https://www.wiz.io/blog/php2shell-php-rce
Tomi Engdahl says:
https://jco.fi/fi/php-haavoittuvuus-21-10-yksi-viime-vuosien-merkittavimmista-tietoturvauhista/?fbclid=Iwb21leAVQmXZleHRuA2FlbQEwAHBkb2YFYWRpZAGrN70HAWzxc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfeY_TlXsdaOERsbgmLrhEI7VW04xFa-I90tizNSjkmM-hytklFGlO9kC-yrU_aem_HJ1jfjKsCn1yA2LJQNj2lQ&utm_medium=paid&utm_source=fb&utm_id=120251099797110673&utm_content=120251099797130673&utm_term=120251099797120673&utm_campaign=120251099797110673
Tomi Engdahl says:
https://thehackernews.com/2026/10/adobe-fixes-8-critical-campaign-classic.html?m=1
Tomi Engdahl says:
CISA confirms PHP2Shell under attack as researchers clock successful exploits
Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
https://www.theregister.com/cyber-crime/2026/10/27/cisa-confirms-php2shell-under-attack-as-researchers-clock-successful-exploits/5305681
Tomi Engdahl says:
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
https://thehackernews.com/2026/10/critical-16-year-old-uefi-flaw-can-run.html?m=1
Tomi Engdahl says:
HS:n evästevalikkoa muokattiin palautteen takia – käyttäjä voikin kieltäytyä kolmansien osapuolten evästeistä maksutta
Sanoman omista evästeistä ei edelleenkään voi kieltäytyä ilman lisämaksua.
https://yle.fi/a/74-20253823
Tomi Engdahl says:
AI companies could gain wider access to Europeans’ personal data under EU plan
The EU wants to loosen data protection rules to please AI companies
https://cybernews.com/news/ai-eu-data-access/?utm_source=cn_facebook&utm_medium=social&utm_campaign=cybernews&utm_content=post&source=cn_facebook&medium=social&campaign=cybernews&content=post&fbclid=IwT01FWAVO3p9leHRuA2FlbQIxMABwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABHs8W-tjWr6au9oc23XN_D4lzS1EqB8hzHizDysJ-EzS0VVpvUGfCyPyMq4oq_aem_I93sbjWtS8IpuJqAVzvJgg
Tomi Engdahl says:
PHP2Shell: What OT and IoT Teams Need to Know About CVE-2026-109618 and CVE-2026-109619
https://www.nozominetworks.com/blog/php2shell-what-ot-and-iot-teams-need-to-know-about-cve-2026-109618-and-cve-2026-109619?utm_source=linkedin&utm_medium=social&utm_term=nozomi%20networks&utm_content=a13a6edc-aa58-4b47-ac31-9da966cf68f8
Tomi Engdahl says:
Firefox 159 Released With AMD Linux Graphics Fix For Excessive Memory Use
https://www.phoronix.com/news/Firefox-159-Released
Tomi Engdahl says:
How one man became the unsung hero of the internet during a cyber-security scramble
https://www.bbc.com/news/articles/cw30ejqljl43o
For more than 20 years, Ondřej Surý has been quietly helping to keep websites around the world running securely, largely in his spare time.
He voluntarily maintains software for two of the most popular versions of Linux, a free operating system similar to Windows, which are often used on web servers.
Typically, this involves keeping them up-to-date with the latest version of PHP, a programming language which underpins a significant number of the world’s websites.
This week, he became very busy indeed.
With the help of AI, two major cyber-security flaws were identified in the programming language, leading the PHP Foundation to release fixes.
Tomi Engdahl says:
https://www.theregister.com/security/2026/10/26/microsoft-releases-emergency-net-security-fixes-for-google-brotli-bug/5305515
Tomi Engdahl says:
https://thehackernews.com/2026/10/php-issues-second-windows-security.html?m=1
Tomi Engdahl says:
https://thehackernews.com/2026/10/hackers-infect-953-online-stores-with.html?m=1
Tomi Engdahl says:
https://www.verkkouutiset.fi/a/sanoma-myontaa-vulle-muutimme-evastekaytantoa-kielteisen-palautteen-takia/#2dfbbf73
Tomi Engdahl says:
https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html?m=1
Tomi Engdahl says:
https://www.reuters.com/world/us/anthropics-claude-accessed-public-us-state-georgia-voter-information-axios-2026-10-25/
Tomi Engdahl says:
https://strobes.co/blog/http2shell-brotli-rce-cve-2026-111497/
Tomi Engdahl says:
https://thehackernews.com/2026/10/ruby-fixes-three-regex-engine-bugs.html?m=1
Tomi Engdahl says:
OpenAI’s isolated red-team AI agents built a hidden CPU cache channel to talk with no network or shared files — exploited CPU cache timing to bypass microVM sandboxes
https://www.tomshardware.com/tech-industry/artificial-intelligence/openais-isolated-red-team-ai-agents-built-a-hidden-cpu-cache-channel-to-talk-with-no-network-or-shared-files-exploited-cpu-cache-timing-to-bypass-microvm-sandboxes
Tomi Engdahl says:
https://thehackernews.com/2026/10/openai-ai-agents-demonstrate-vm-escapes.html?m=1
Tomi Engdahl says:
https://newsthump.com/2026/10/22/kids-to-dress-as-php-in-most-terrifying-halloween-ever/?fbclid=Iwb21leAVIKrRjbGNrBUgqrmV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeiAIlh6mQ1sHaflE56nh0P2Ee1ZNZ32wFg9q3ieuZm4gMHh8dzwrABP9uFWg_aem_icRgep0fGYgdmzEWFPjejw
Tomi Engdahl says:
https://www.akamai.com/blog/security-research/understanding-php2shell-everything-you-need-to-know
Tomi Engdahl says:
https://thehackernews.com/2026/10/critical-flaw-in-pythons-popular-pillow.html?m=1
Tomi Engdahl says:
https://www.infoq.com/news/2026/10/cloudflare-cpu-memory-profiling/
Tomi Engdahl says:
https://www.cgi.com/fi/fi/tapahtumat/tietoturva-ja-kyberturvallisuus/euroopan-kyberturvallisuuskuukausi-2026?utm_source=facebook&utm_medium=paidsocial&utm_campaign=fi_ci_cybersecurity&fbclid=Iwb21leAVIpUVleHRuA2FlbQEwAHBkb2YFYWRpZAAABlq3L0xSc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeBJ17w1yO1bL2_5jvLWvTEishrWj-Alo6HMb5o7mvpPUihMM4awBMXYxS1nY_aem_rDKuSMQKttYwSIW7FPBAWg&utm_id=6845907158754&utm_content=6986689272554&utm_term=6940213035954
Tomi Engdahl says:
https://thehackernews.com/2026/10/blackx-uefi-bootkit-bypasses-secure.html?m=1
Tomi Engdahl says:
https://www.bleepingcomputer.com/news/security/php-shares-mitigation-for-new-and-unpatched-rce-vulnerability/?fbclid=Iwb21leAVIqf9jbGNrBUip_GV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeKQNDMteH3NYcHlwX9bqb8EUqBRsxIwXn_LZgQUM6hoqPHGZaWU1zWyq7XGc_aem_CojsUJnqm9MEOR1arTr9nw
Tomi Engdahl says:
https://www.verkkouutiset.fi/a/osa-matkailijoista-kaarii-passinsa-folioon-tasta-syysta/#2dfbbf73
Tomi Engdahl says:
https://www.techradar.com/computing/the-fcc-has-started-to-ban-gadgets-with-foreign-surveillance-chips-inside-but-grants-intel-a-waiver-for-its-foreign-made-factory-robots
Tomi Engdahl says:
https://www.vr.fi/junat-kartalla?fbclid=Iwb21leAVS8EtjbGNrBVLwDWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEf0Qk7Ha-4SB62tDZpPAMVzE946_paee32Xu_mh8QUge8V3xr3LKVf50No1UM_aem_KbWeFjvA_45ygGiu4SEqYg
Tomi Engdahl says:
Wi Spi
Random Standard Wi-Fi Routers Can Scan Your Body to Identify Exactly Who You Are, Alarming New Research Finds
“With this hardware making its way into millions of homes, the privacy concerns are severe.”
https://futurism.com/future-society/wifi-routers-scan-body-identify-research?fbclid=Iwb21leAVP8NJjbGNrBU_w0GV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEf_a9dbvmo4FGmcJV7HNBAWd9_xH1rPVboJfCCf4iLmA65vMz2DS0JG6uI-po_aem_TBbZF8HKNlL3hzp7Ngam6Q
Tomi Engdahl says:
Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines.
A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines.
https://www.wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems/?utm_brand=wired&utm_campaign=aud-dev&utm_medium=social&utm_social-type=owned&utm_source=facebook&fbclid=IwdGRjcAVTZuBleHRuA2FlbQIxMQBwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABH6N1Dm3oxTr0e2NDt2XCTXvX7uYq7P_6h3mW7rzptQUhvnz5NCGGd1B2kf4y_aem_aVQWCdyFgq6hqg1fValjKA
Tomi Engdahl says:
Cue the world’s tiniest violins. https://trib.al/qXdG7zn
Watch The Watchers
Cops Not Happy When Man Creates Flock-Style Camera That Only Collects Police Plates
“Two police officers walked up my driveway and knocked on my door to question me about it.”
https://futurism.com/future-society/police-upset-flock-camera-alpr-surveillance-canada?fbclid=IwdGRjcAVTZxVjbGNrBVNnAWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfn5psNeCB7H9L2IOy7EO88sl52RfcVbwyPKYaXiBhiIwtNYGAW1KPXi7v4jU_aem_rX81OhdAAaJ4mF0nrPGZ4Q
Tomi Engdahl says:
Intelligence agency misplaced ‘a very significant number’ of removable drives — storage media have been missing for years, but exact number of lost devices remain unknown
https://www.tomshardware.com/pc-components/usb-flash-drives/intelligence-agency-misplaced-a-very-significant-number-of-removable-drives-storage-media-have-been-missing-for-years-but-exact-number-of-lost-devices-remain-unknown?fbclid=IwVERDUAVTaLlleHRuA2FlbQIxMABwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABHzPvnFOZ73JYssNHMEjNRWYJFh-AaguVzOAxFFZ1JT9JJtnktZYtNRh133oN_aem_TckeM2_5aWAIev7TRG6-sQ
Tomi Engdahl says:
In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware.
https://www.securityweek.com/in-other-news-anthropic-breach-dispute-uefi-flaw-hits-most-servers-cloudflare-ai-data-leak/