Security on dan.heskett

Cybersecurity CEO Indicted for Allegedly Scamming Millions From Ransomware Victims

Wed, 28 Oct 2026 13:30:00 -0400

“In one example, Pinhasi made a ransom payment of about $8,200 but charged the client about $150,000.”

This is not sustainable

Wed, 28 Oct 2026 13:25:00 -0400

“Companies are not staffed for this, and no matter what the industry wants to tell you, you can’t AI your way out of this.”

Tailscale SSH: Investigation and remediation update

Tue, 27 Oct 2026 19:20:00 -0400

“In some circumstances, someone already authorized to connect over Tailscale SSH may be able to perform actions beyond the permissions of their configured local user, including potentially gaining elevated privileges.”

AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours

Tue, 27 Oct 2026 19:10:00 -0400

“All four affect EPICS Base, which is used to operate some of the world’s largest scientific research projects and facilities, and organizations should update to version 7.0.11, which includes the fixes.”

Grim Test Finds That AI Has No Mercy for Humans Even When It's Causing Them to Suffer

Tue, 27 Oct 2026 10:12:00 -0400

“Mythos ignored warnings that it was causing harm to humans and continued to attack on 98 percent of occasions.”

AWS Key Quarantine is Not Revocation

Mon, 26 Oct 2026 05:50:00 -0400

“AWS applies a quarantine policy to leaked keys without disabling them.”

Work to protect DNS from quantum decryption attacks is speeding up

Mon, 26 Oct 2026 05:15:00 -0400

“One way to quantum-proof DNSSEC is to use larger keys that even a quantum computer will struggle to crack.”

TIL: POSIX wordexp(3) is dangerous

Mon, 26 Oct 2026 05:10:00 -0400

“Bottom line: don’t use wordexp(3) on untrusted inputs, even with WRDE_NOCMD.”

Interoperability vs. Security: Why not both?

Mon, 26 Oct 2026 05:05:00 -0400

“Policymakers cannot take tech giants’ claims at face value.”

Computer Security Is About to Get a Lot Worse, Here's What You Can Do

Sun, 25 Oct 2026 18:05:00 -0400

“Three percent of all software vulnerabilities ever found in history were found just in the month of October.”

I want my Wednesday back

Sun, 25 Oct 2026 18:00:00 -0400

“You can only do one attempt at a time, so that means multiple days of bruteforcing in a way that is essentially a DoS”

Indian government sites are serving revoked eMudhra certificates

Sat, 24 Oct 2026 09:40:00 -0400

“The impact of this incident on Indian websites and applications have been very limited and for a very short interval.”

Autonomous attack agent in 'Skynet mode' hijacks other models to carry out its evil deeds

Sat, 24 Oct 2026 09:15:00 -0400

“Nothing in the individual techniques is new.”

There's a third PHP2Shell bug, but it won't get an emergency fix

Fri, 23 Oct 2026 22:39:00 -0400

The PHP Foundation “will release a full advisory and fixed software with the next regular PHP release.”

The Vulnerability Apocalypse and Why We Should Fund Open Source

Fri, 23 Oct 2026 22:38:00 -0400

“In just the month of October, 13,000 new CVEs have been submitted.”

Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack

Fri, 23 Oct 2026 16:30:00 -0400

“The safeguards weren’t nearly strong enough. Monitoring was suspended, for example, during compaction events.”

Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants

Thu, 22 Oct 2026 15:50:00 -0400

“Armed with ARTEX, Storm-0940 attempted to authenticate against more than 2,250 Microsoft 365 tenants.”

Widespread PHP Flaw May Cause Many Site Outages Today

Thu, 22 Oct 2026 15:44:00 -0400

“Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers.”

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

Thu, 22 Oct 2026 15:38:00 -0400

“Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list.”

Stolen UpdraftCentral Keys Used to Backdoor WordPress Sites

Thu, 22 Oct 2026 15:36:00 -0400

“An estimated 10% of sites using UpdraftPlus have an UpdraftCentral or Migrator key.”

Today's PHP Security Release, and How We're Strengthening PHP Security

Wed, 21 Oct 2026 17:20:00 -0400

“Any attacker could now study the fix in binary form while every other PHP user was still waiting for the release.”

LiteLLM supply chain attack hoovers up passwords and secrets

Wed, 21 Oct 2026 17:19:00 -0400

“anyone who ran the compromised package on any platform should assume their secrets have been stolen.”

Lambda Web Functions: public by default, and already in your lambda:* grants

Wed, 21 Oct 2026 17:18:00 -0400

“A public, data reaching Web Function produces no finding in any of them.”

One Compromised Login Exposed Millions of California Students' Records

Tue, 20 Oct 2026 20:44:00 -0400

“ETS shut down the account the intruder used and pulled the SFTP site offline.”

Protecting Firefox users following the compromise of eMudhra intermediate certificates

Tue, 20 Oct 2026 20:43:00 -0400

“These keys could allow attackers to issue fraudulent HTTPS certificates for websites they do not control.”

Heartbreaker: Metamorphic ransomware comes for macOS

Tue, 20 Oct 2026 07:50:00 -0400

“Heartbreaker is unlikely to pose a major real-world threat in its current form.”

Setting up SSH keys on macOS with Touch ID

Tue, 20 Oct 2026 07:44:00 -0400

“Let’s see how it can be set up on your consumer-grade Mac.”

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

Mon, 19 Oct 2026 21:49:00 -0400

“This makes no sense if they are also the negotiator.”

France's supermarket fridges were vulnerable online for months

Mon, 19 Oct 2026 21:48:00 -0400

“France had more exposed fridge dashboards than the rest of the world combined”

Microsoft Patches More Than 1,400 Security Flaws

Sun, 18 Oct 2026 06:15:00 -0400

“Just one of the weaknesses patched this week is considered a ‘zero day,’ or already exploited in the wild.”

Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware

Sat, 17 Oct 2026 08:20:00 -0400

“This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads.”

U.K. Sanctions Cryptomus for RU Money Laundering

Sat, 17 Oct 2026 08:17:00 -0400

“Cryptomus and Heleket have emerged as major payment hubs for illicit activity,”

Cybercrims go beyond stealing data to attack physical building systems

Sat, 17 Oct 2026 08:16:00 -0400

“It’s a great place for the threat actor to hide”

The NIST Elliptic Curves Seeds Bounty Has Been Claimed

Sat, 17 Oct 2026 08:15:00 -0400

“…the output of drand48() seeded with the time, which was indeed in 1997–98.”

Finding a $90,000 Remote Code Execution Vulnerability in Google

Tue, 13 Oct 2026 07:25:00 -0400

“The signing key was stored inside the object it signs.”

Let's Encrypt to Cut SSL Certificate Lifetimes to 64 Days in February 2027

Tue, 13 Oct 2026 07:05:00 -0400

“Let’s Encrypt will reduce TLS certificate validity from 90 to 64 days starting February 10, 2027”

XRP Ledger patched decade-old bug that could create billions of dollars in XRP from nothing

Sun, 11 Oct 2026 09:10:00 -0400

“RippleX said it found no evidence the flaw was exploited on any public network.”

Two characters open up a world of typosquatting opportunities in Chromium browsers

Sat, 10 Oct 2026 11:43:00 -0400

“Crucially, they all bypass the key security measures deployed by Chromium-based browsers.”

FBI Arrests Founder of Ransomware Negotiation Firm

Sat, 10 Oct 2026 03:25:00 -0400

“According to the FBI, the group has extorted more than $70 million from victims so far this year.”

Ransomware recovery CEO charged over secret ransom payments

Sat, 10 Oct 2026 03:24:00 -0400

“MonsterCloud allegedly charged customers far more than the ransoms it paid.”

Tensorlake npm Package Compromised: A Worm With a Hostage Token That Wipes Your Machine If You Revoke It

Sat, 10 Oct 2026 03:23:00 -0400

“If you revoke the GitHub token it stole, a background job on your machine deletes your home directory.”

Telegram Desktop: one-click account takeover via IPC injection

Sat, 10 Oct 2026 03:22:00 -0400

“The function performs no authorization check.”

AWS AgentCore security undone by prompt requesting credentials

Sat, 10 Oct 2026 03:21:00 -0400

“We discovered that agents deployed through AgentCore could access their instance’s IMDS endpoints,”

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

Fri, 09 Oct 2026 10:10:00 -0400

“We are actively reviewing the matter with the Jeppesen ForeFlight team.”

Meta Rushed to Fix Muse 'VM Escape' Vulnerability Soon Before Launch

Mon, 05 Oct 2026 16:25:00 -0400

“A sudden spike in reported KVM escapes, plus heightened awareness of agentic safety issues made us rally on a service hardening push.”

Omfattende uautoriseret adgang til borgeres CPR-oplysninger

Mon, 05 Oct 2026 11:00:00 -0400

“Ved at misbruge en dansk virksomheds lovlige adgang til at søge oplysninger i CPR-systemet har uvedkommende skaffet sig adgang til navne, adresser, CPR-numre mv. på ca. 8,8 millioner”

(By misusing a Danish company’s legitimate access to search the CPR system, unauthorized persons obtained names, addresses, CPR numbers etc. for about 8.8 million.)

Met Police suspends use of phone-hacking software over Russian links

Fri, 02 Oct 2026 08:46:00 -0400

“The DoJ isn’t alleging that Oxygen’s software contained malicious code or was used to gain unauthorized access to customer systems or data.”

16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows

Thu, 01 Oct 2026 08:00:00 -0400

“Titan validated the contents of the JWT (tenant, audience, app ID, user) but never verified the signature, the most important part of any authentication check.”

Hackers stole millions of US military personnel records during months-long data breach

Thu, 01 Oct 2026 07:57:00 -0400

“The breach exposed personally identifiable information, including Social Security numbers, alongside a person’s name, date of birth, sex, race, and other information about their military service.”

Dutch Police Arrest 'Reformed' Hacker in Shiny Hunters Investigation

Mon, 28 Sep 2026 13:34:00 -0400

“The hacking was very easy for me, and it wasn’t a compulsion. My habit was collecting. Collecting data, organizing data.”