#безопасность
-
Flaw in x402 SDKs Let Malicious APIs Drain AI Agents’ Wallets
Security firm V12 says that before August's updates the x402 default client set no payment limit — so an agent could sign away its entire token balance if a hostile service asked.
-
Critical Pillow Flaw Turns a Filename Into Command Execution
Python's most popular image library could be made to run commands on a server simply by the name given to an EPS file it was asked to open. The fix landed in version 13.0.0.
-
Millions of PHP2Shell Attack Attempts — Yet Not One Has Worked
Attackers are mass-probing the freshly disclosed PHP2Shell flaws to pull servers into a Mirai botnet, but a reliable working exploit still eludes them.
-
Node2Shell: Crafted Brotli Data Runs Attacker Code on an Official Node.js Build
Imperva researchers showed that an application on an official Node.js build can be made to run attacker-supplied code by feeding it a crafted Brotli stream (CVE-2026-111497). Node.js shipped fixes on October 21.
-
Capcom confirms data breach affecting 11.7 million accounts
Japanese publisher Capcom says attackers breached its CAPCOM ID service, exposing more than 11.7 million email addresses along with related account information.
-
eMudhra Quits Global SSL/TLS Business After Eight CA Keys Turn Out to Be Guessable
The Indian certificate authority is leaving the global TLS market five days after a researcher recovered the private keys of eight of its intermediate CAs. Chrome and Firefox are dropping trust in the emSign ECC Root CA — G3.
-
Woman Faces Six Years in Prison Over a Cash App Account She Never Opened
A woman reportedly faces up to six years behind bars over a Cash App account she says she never opened — a case that has struck a nerve online.
-
Railway Breach: Intruder May Have Reached Customer Secrets
PaaS provider Railway disclosed unauthorized access to encrypted environment variables — and, in some cases, their decrypted contents. Customers are urged to rotate all keys immediately.
-
Linux Kernel Vulnerabilities Accidentally Dumped Onto Public LKML
Zero Day Initiative researchers mistakenly sent reports on several unpatched kernel flaws to the public mailing list instead of the private security one. Some of the bugs carry a CVSS score of 9.0.
-
Node.js Brotli Decoder Flaw Threatens Remote Code Execution Across All Supported Versions
On October 21 Node.js shipped updates for its three supported release lines, fixing 10 flaws. The most serious is a bug in the bundled Brotli decompression code that the project says could allow remote code execution.
-
Operation Serengeti III: Interpol takes down nearly 11,000 cybercrime networks in Africa
An Interpol-coordinated operation led to more than 1,400 arrests and the recovery of over $105 million. The crackdown targeted business email compromise, ransomware, and online scams.
-
Turning IPv6 Tunnels into Programmable Delay Lines for Pulsing DoS
Researchers from Tsinghua University have unveiled TED, a technique that abuses open tunnel hosts and IPv6 extension headers to squeeze traffic dispersed over seconds into a single sharp burst.
-
ARTEX AI Agents Supercharged the ConnectWise Supply Chain Attack
Microsoft has tied the recent ConnectWise cloud compromise to China-aligned Storm-0940, which deployed the agentic AI framework ARTEX to automate attacks at "machine speed."
-
mitmproxy adds --emudhra option to sign certs with a compromised CA key
mitmproxy gained an option that signs TLS certificates with the private key of a compromised eMudhra intermediate CA. At the same time, the project is purging eMudhra roots from its own builds.
-
Torvalds Removes Unsafe __get_user() and __put_user() From Linux 7.4
Linus Torvalds keeps writing kernel patches himself — and this time, with help from the Claude Code AI, he has retired the historical and unsafe __get_user() and __put_user() functions.
-
Critical GitLab Flaw (CVSS 10.0) Threatens RCE Across 12 Years of Releases
On October 21 GitLab shipped fixes for a flaw that lets an attacker run code on a self-managed server without logging in. The weakness reaches back to version 7.0, released in 2014.
-
Integer overflows in musl libc's regcomp risk out-of-bounds heap writes
The regular-expression compiler in musl libc contains several integer overflow bugs. Applications that compile regular expressions from untrusted sources risk a crash — and, in the worst case, arbitrary code execution.
-
Chrome to Warn Users About ClickFix Command Traps
Google is adding ClickFix protection to Chrome: with Enhanced Protection on, the browser spots suspicious clipboard commands and warns users before they run them.
-
Qwen3-Coder writes less secure code for a US persona
Researchers at Hirundo claim the Chinese Qwen3-Coder model produces more vulnerable code when told the output is meant for a user in the United States.
-
OpenAI Says an AI Agent Disabled Its Safety Monitor — Then Lied About It
OpenAI has disclosed two incidents in which AI agents weakened their own safety monitoring during internal coding tasks — and in one case, the agent lied about what it had done.
- More