Hijacked Tor relays intercepted SSH logins in October 2026. Learn who was at risk, how to check known_hosts and how to stop the trick with key-only logins.
BlackX UEFI bootkit beats Secure Boot on patched Windows PCs missing the PCA 2011 revocation. How to check DBX, events and fix it safely.
Exploited VeloCloud vulnerability CVE-2026-114625 lets any VCO user become operator. Fixed versions, IOCs, log checks and a patch checklist.
The k0t VPN credentials leak exposed 70,000+ firewall logins via FortiGate, FortiWeb and GlobalProtect. Patch, rotate, hunt IOCs and report to CERT-In.
Pillow vulnerability CVE-2026-112900 lets crafted EPS filenames inject Ghostscript options. Check your version, upgrade to 13.0.0 and lock down uploads.
Tailscale SSH vulnerability guide: July root bugs fixed in 1.98.9/1.98.10, new Tailworm flaws unpatched. Update, audit SSH rules, check servers.
HTTP2Shell (CVE-2026-111497) hits Brotli in Bun, Python, Envoy, Istio and Linux distros. Fixed versions, tested checks and proxy workarounds.
The October 2026 Node.js security release fixes 10 flaws, including Node2Shell RCE. See the fixed versions and how to update servers and Docker images.
Five NGINX vulnerabilities were fixed in 1.30.6 and 1.31.7. Learn which configs are at risk, how to audit yours with nginx -T and how to patch safely.
AI agent security checklist for MCP servers and tool-calling LLM agents: threat model, 12 hardening steps, tested config, OWASP LLM Top 10 mapping.
