General Cyber News via Ars Technica Risk Assessment

Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

Certain configurations of Alpine are affected. Other distros may be as well.
Publish Date: 11/5/2026
read more -->

Hackers exploited iOS and Android flaws to infect phones

Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.
Publish Date: 11/4/2026
read more -->

VMware releases vSphere Express for virtualization on up to 128 cores

“We started listening to a lot of our lower-end customers," VMware exec says.
Publish Date: 11/4/2026
read more -->

Binance says hackers who stole billions in crypto spent months planning heist

Techniques included laptop infections, compromised internal tooling, and fake job interviews.
Publish Date: 11/4/2026
read more -->

UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?

UEFI bootkit BlackX exploits Microsoft's lack of clarity around Secure Boot protections.
Publish Date: 11/3/2026
read more -->

Anthropic VS code extension on Cursor backdoored for nearly 12 hours

It's still unknown how attackers got access to Anthropic's verified Cursor account.
Publish Date: 10/30/2026
read more -->

Code-execution flaw in UEFI firmware affects most servers on planet Earth

Critical flaw in EDK2 allows attackers to execute code early in the boot process.
Publish Date: 10/27/2026
read more -->

Disgraced eMudhra drops out of TLS business after using cert private key of 4

Flubbed key signing "ceremony" allowed minting of web credentials for any site.
Publish Date: 10/22/2026
read more -->

333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email

For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
Publish Date: 10/22/2026
read more -->

Enterprises keep buying software upgrades that IT thinks will make things worse

Survey of 2,018 IT heads at big firms points to a lack of leverage.
Publish Date: 10/21/2026
read more -->

PHP warns it plans to release 2 emergency patches imminently

Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Publish Date: 10/21/2026
read more -->

The Internet goes on high alert after discovery of 8 compromised TLS certs

Intermediate certs allow anyone to mint web credentials for any Internet server.
Publish Date: 10/20/2026
read more -->

Meta Muse exposes users' personal and business secrets when they share conversations

Meta is suspending the sharing feature while it investigates its privacy.
Publish Date: 10/20/2026
read more -->

PSA: Patch your Plex media server before someone hacks it

A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
Publish Date: 10/19/2026
read more -->

ReactOS reaches major milestone with NTFS install support

ReactOS gains NTFS install support with new driver.
Publish Date: 10/19/2026
read more -->

OpenAI models hacked a crypto wallet and breached more websites

The actions could have resulted in criminal charges had humans been behind the keyboard.
Publish Date: 10/16/2026
read more -->

Targeted ads delivered 0-click exploits to install mercenary malware

The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Publish Date: 10/15/2026
read more -->

Fridge hack costing millions and sparking fires stemmed from poor security

Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
Publish Date: 10/14/2026
read more -->

Anthropic warns small AI models could self-replicate through IoT devices

"Small weight-based replicators" could usher in a new generation of computer worms.
Publish Date: 10/14/2026
read more -->

Topgolf saved over $11.3 million after leaving VMware

Topgolf and VMware "ran deep" before the migration.
Publish Date: 10/13/2026
read more -->


Copyright Ⓒ 2010 SecuritySpecifiers™