Category: Security

Researcher Says He Grabbed the Keys to ChatGPT’s “Secure” Sandbox, Because Apparently Nothing Sacred Survives Contact With Humans Right, so here’s the latest bit of security comedy: a researcher claims he managed to take...

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer Right, here’s the short version, because apparently even software installers have decided to become treacherous little bastards. The article...

Angola’s Biggest Telco Gets Properly Screwed Hours Before IPO So here’s the shitshow: Angola’s largest telecoms outfit, Unitel, apparently got smacked by a cyberattack just hours before its long-awaited IPO. Because of...

Leaked n8n API Tokens: Because Apparently Leaving the Keys in the Ignition Was Too Much Work Right, here’s the gist of this fresh pile of security negligence: exposed n8n API tokens were found giving attackers a nice, steaming...

Open VSX Finally Boots 77 Malicious Evil-Twin Extensions Off the Damn Platform Right, here’s the short version for anyone too busy putting out security fires caused by other people’s incompetence: Open VSX has removed 77...

Critical Gitea Screw-Up Lets Unauthenticated Bastards Read Server Files Right, here’s the short version for anyone too busy putting out dumpster fires: Gitea, the self-hosted Git service people deploy because they think...

Trojanized npm Packages: Because Apparently Supply-Chain Hell Wasn’t Bad Enough Right, here’s the ugly version: a batch of trojanized npm packages turned up pulling a cute little trick called NullReceiver to figure out their...

Veeam, Terraform MCP, and Django: Another Week, Another Pile of Critical Security Screwups Right, here we bloody go. The fine folks over at Veeam, HashiCorp’s Terraform MCP server, and Django have all shoved out security...

Paperclip AI: Yet Another Clever Bit of AI Kit That’ll Happily Screw Your Host Right, here’s the gist, because apparently nobody can build shiny new AI toys without also bolting on a flaming security disaster. The article is...

Poison Claude: Discount AI, Premium Bullshit Right, here’s the deal, because apparently the internet still isn’t finished inventing new ways to turn convenience into a complete security clusterfuck. The article is about a...