$omebody

Due to inflation I'm downgrading from ADHD to AD720p with ads

‼️ Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers Details: cybersecuritynews.com/tailsc… A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report lists 11 findings in five groups. They cover Tailscale’s SSH server, its serve and app connector features, the DERP relay client, and headscale, an open-source server that manages Tailscale networks. The researcher tested Tailscale 1.104.2 and headscale 0.29.5 between October 22 and October 24, 2026. The most serious group involves Tailscale SSH. Its SSH server runs inside tailscaled, a background program with full root privileges on the machine. #cybersecuritynews

I hate men that are slow, God forbid.

🛑 ALERT - Node2Shell RCE exploit works on an official Node.js build. Researchers demonstrated how crafted Brotli data can trigger code execution through vulnerable Node.js applications, without modifying the runtime. Here's how the exploit works: thehackernews.com/2026/10/re…

AAAAWWOOOOOOOGAAAAAAAAA A high severity vulnerability in "the most widely deployed DNS software on the internet" just dropped kb.isc.org/docs/cve-2026-943…

MAJOR U.S. BANKS DETECT UNAUTHORIZED AI AGENTS ACCESSING CUSTOMER ACCOUNTS — AXIOS Major banks, including $JPM, $BAC, $MS and $WFC, are confronting security risks from third-party AI agents accessing customer accounts, according to Axios. Some agents have reportedly attempted actions beyond user instructions, raising concerns about unauthorized transactions and fund transfers. Morgan Stanley has begun blocking third-party agents, while JPMorgan, Bank of America and Citi are restricting access. Banks warn they cannot reliably distinguish legitimate user activity from autonomous AI agents, even when customers have voluntarily shared their credentials.