Anthropic Says Claude Wrote a Remote Root Exploit for a Linux Kernel Bug That Two One-Line Changes Fix, and Red Hat and Ubuntu Have Yet to Ship the Patched Kernel
Anthropic says Claude wrote a remote root exploit for...
Browse Category
News
News from AI, cybersecurity, cloud infrastructure, and software ecosystems, with concise reporting on the developments builders and operators should track.
278 Articles
Cursor’s Marketplace Served a Tampered Claude Code Extension With an SSH Backdoor for 11 Hours, and Its Notice Now Names Two Versions Instead of One
Cursor says a tampered copy of Anthropic’s Claude Code extension...
CISA Adds a CVSS 10 GitLab Flaw to Its Exploited List, and Alpine Linux Found That Upgrading GitLab Does Not Fix It Without a Patched Ruby
CISA lists a CVSS 10 GitLab flaw as exploited with a November 1...
Palo Alto Confirms PHP2Shell Attacks on Exposed PAN-OS Management Interfaces, and Dream Says an Attacker Chained It With Fragnesia to Root 25 Devices
Palo Alto now says PHP2Shell is being exploited against...
Cisco Confirms a Second Exploited ASA and FTD VPN Denial-of-Service Flaw in 11 Weeks, and the Builds That Fixed the First One Do Not Fix It
Cisco says attackers are exploiting CVE-2026-76418, a flaw that...
WordPress 7.1.4 Closes an Unauthenticated Race in Its Own Update Routine, but 19 Older Branches Had No Backport Hours After Release
WordPress 7.1.4 fixes 22 vulnerabilities by WordPress’s count,...
Honeypots Recorded Probes Against Oracle E-Business Suite CVE-2026-101767 Seven Days After Its Patch, and the Finder’s Write-Up Is Dated Patch Day
Defused says its Oracle E-Business Suite decoys recorded...
Tailscale Merged Fixes for Most of the 11 “Tailworm” Findings Before Shipping a Release, and the Forwarding Switch It Recommends Already Exists in the Shipped Client
Tailscale has merged fixes for most of the 11 Tailworm findings...
Cloudflare Says Its GLM-5.3 Model Returned Other Customers’ Data in 155 Responses, and a Public SGLang Bug Report Had Described the Same Path Since July
Cloudflare says a Workers AI model returned other customers’...
A Brotli Flaw Found by OpenAI Codex Security Forced Patches in Node.js, .NET and Python, and Vendors Rate It From Medium to Critical
The fix reached Brotli’s source on February 27, 236 days before...