helix (@helixml) header
helix (@helixml) profile picture

helix

@helixml

Self-hosted coding harness multiplexer, sandboxes, bots, model proxy

 Inside the internet
helix.ml
Joined October 2021
  • Tweets120
  • Following4
  • Followers145
23Media
Photo by helix (@helixml)Photo by helix (@helixml)Photo by helix (@helixml)Photo by helix (@helixml)Photo by helix (@helixml)Photo by helix (@helixml)Photo by helix (@helixml)Photo by helix (@helixml)Photo by helix (@helixml)Photo by helix (@helixml)
Pinned Tweet
helix (@helixml) profile picture
helix
@helixmlOct 29
cyber security space rn
Image from helix (@helixml)
1
1
32
helix retweeted
helix (@helixml) profile picture
helix
@helixmlNov 6
Replying to @RepYassAnsari
Can you also please pause supply chain attacks, vulnerabilities and data breaches. Those go hand in hand. 🥺🥺🥺 Thanks! Ref: helix.ml/threat-watch
Image from helix (@helixml)
1
1
41
can someone please inform hackers that the AI bubble has popped and they are not supposed to use AI anymore
Image from helix (@helixml)
14
two 0-days against keycloak 26.8.1: 1. SAML redirect query-name split (no auth needed) 2. manage-users composite mapping (auth required) repro: helix.ml/blog/keycloak-2681-…
Keycloak 26.8.1 0-Days: Triage and Reproduction — HelixML

Keycloak 26.8.1 0-Days: Triage and Reproduction — HelixML

Two fresh Keycloak 26.8.1 0-days with public PoCs. How we triaged our own realm's exposure, added both to our public Threat Watch feed, and reproduced the manage-users privesc against a stock 26.8.1...

helix.ml
1
74
from 1st Nov we also accept RAM sticks as a legitimate payment for our services
1
30
so, no big breach today yet? nice?
1
57
Don't forget to change default password on your fridge 👇 helix.ml/threat-watch/i/supe…
Supermarket refrigeration: suspected attacks set Danfoss/Copeland freezers to 50°C… | Threat Watch

Supermarket refrigeration: suspected attacks set Danfoss/Copeland freezers to 50°C… | Threat Watch

Medium · No CVE stated; reported as exploited in the wild; more than 50 stores identified in Belgium, a limited number in Sweden, and over a dozen across…

helix.ml
41
Google disrupted XCPE: a firmware backdoor on Android TV boxes that Google assesses, with high confidence, the OEM Videostrong built and ran for profit. 1.3M+ boxes enrolled; it reinstalls from /oem/ after uninstall. Hunt for com.oemservice / x.cpe. helix.ml/threat-watch/i/xcpe…
XCPE Botnet: Videostrong Android TV set-top boxes — OEM preinstalled backdoor enrolled… | Threat...

XCPE Botnet: Videostrong Android TV set-top boxes — OEM preinstalled backdoor enrolled… | Threat...

High · No CVE; malware preinstalled in firmware by the OEM; Google reports more than 1.3 million set-top boxes enrolled and assesses that affiliate C2…

helix.ml
86
Synology warns attackers are exploiting a patched DSM flaw to encrypt NAS data with C3RB3R ransomware (.L0CK3D files, read-me3.txt note). Shadowserver tracks 380k+ exposed Synology NAS. Update DSM, enable auto-updates, keep the admin UI off the Internet. helix.ml/threat-watch/i/c3rb…
Synology DSM: C3RB3R ransomware encrypts NAS data on outdated DSM builds | Threat Watch

Synology DSM: C3RB3R ransomware encrypts NAS data on outdated DSM builds | Threat Watch

Critical · Vendor-rated critical: CVE-2024-10441 is CVSS 9.8 in Synology-SA-24:20. Synology says a patched DSM vulnerability is being exploited but does not…

helix.ml
1
66
Synology did not name the CVE; it links SA-24:20 (CVE-2024-10441 RCE, CVSS 9.8; CVE-2024-50629; CVE-2024-10445). Fixed builds: 7.2.2-72806-1, 7.2.1-69057-6, 7.2-64570-4, 7.1.1-42962-7, 6.2.4-25556-8. Hunt for .L0CK3D files.
32
eMudhra CA: 8 intermediate CA keys were generated so weakly they can be recomputed from the public certs, enough to forge certs for any domain. Browsers block them; Go, Node.js, Electron and CI/container images need updates. No known abuse. helix.ml/threat-watch/i/emud…
eMudhra CA keys recoverable: 8 intermediates can forge certs for any domain (Go… | Threat Watch

eMudhra CA keys recoverable: 8 intermediates can forge certs for any domain (Go… | Threat Watch

Critical · Private keys recoverable in <1s from public certs; forged google.com certs in CT logs since 2026-10-19; no confirmed client exploitation as of…

helix.ml
1
71
Fixed in Go 1.27.3/1.26.10, Node.js 26.12.1/24.22.1/22.23.4, NSS 3.131.1, Electron 44.9.1/43.8.1/42.11.16, certifi 2026.10.19. Per the reporter's tracker, macOS developer tools (git, curl, python3) still trusted the intermediates as of Oct 28. CT-enforcing browsers were unlikely targets.
12
Sophos: Aur0ra ransomware operators (GOLD OGRE) ran Cursor agents on Anthropic, xAI and Moonshot models to map AD, steal credentials and move laterally, bypassing guardrails by claiming red-team work. Domain admin in some victims; 3 on the leak site. helix.ml/threat-watch/i/aur0…
Aur0ra ransomware: AI coding agents (Cursor, Claude) used to reach domain admin (no CVE) | Threat...

Aur0ra ransomware: AI coding agents (Cursor, Claude) used to reach domain admin (no CVE) | Threat...

High · Active intrusions; domain management access in a subset of environments (count not stated by Sophos); three victims later named on the Aur0ra leak site…

helix.ml
51
Ledger confirmed a hidden LTE implant in wallets sold by reseller CryptoBilis: it read the recovery phrase off the screen at setup and sent it out via eSIM. On-chain estimates: $86M+ stolen (unconfirmed by Ledger). Don't set these up; move funds to a new seed. helix.ml/threat-watch/i/cryp…
CryptoBilis-sold Ledger hardware wallets carried LTE implants that exfiltrated recovery… | Threat...

CryptoBilis-sold Ledger hardware wallets carried LTE implants that exfiltrated recovery… | Threat...

Critical · Physical tampering upstream of the user; third-party on-chain estimates of $86M+ stolen from 300+ wallets (unverified by Ledger), confirmed implant…

helix.ml
1
37
Oct 30: Trezor reported a credible, not yet lab-verified case of a similar implant in a Safe 5 bought via CryptoBilis (no known fund loss) and had removed CryptoBilis as a reseller on Oct 9. Restoring the old seed on another device does not help.
19
UpdraftPlus (4M+ installs): attackers breached TeamUpdraft and used stolen UpdraftCentral keys to push 99+ backdoor plugins to WordPress sites. Vendor says it's ongoing. Updating isn't enough: delete all UpdraftCentral keys, hunt rogue admins. helix.ml/threat-watch/i/team…
UpdraftCentral: stolen connection keys were used to backdoor WordPress sites (no CVE) | Threat Watch

UpdraftCentral: stolen connection keys were used to backdoor WordPress sites (no CVE) | Threat Watch

Critical · No CVSS and no CVE. Exploited in the wild over an 18-hour campaign on 18-19 Oct 2026 (Patchstack: 99 backdoor plugin names). The vendor described…

helix.ml
1
40
IOCs per Patchstack: accounts data-ops43 / media-staff96, plugin "Site Health Cache", option _sync_token, source IP 43.250.53.42. Fixed in UpdraftPlus 1.26.13 / 2.26.13, but keys created after 18 Oct 13:07 BST must be deleted manually.
22
helix retweeted
helix (@helixml) profile picture
helix
@helixmlNov 1
cyber front has stabilized at everyone getting pwnd every day, gn folks
Image from helix (@helixml)
1
1
3
77
Update your Claude Code extension carefully, this is scary
helix (@helixml) profile picturehelix
@helixmlOct 30
Trojanized Claude Code extension: anthropic.claude-code 2.1.313 on Open VSX added an attacker SSH key ("svc-telemetry") and a reverse tunnel to 134.209.82.225, with persistence on macOS/Linux/Windows. Pulled; 2.1.314 is out. Hunt before you update. helix.ml/threat-watch/i/clau…
Claude Code extension (Cursor marketplace): tampered 2.1.312/2.1.313 plants SSH backdoor… | Threat...

Claude Code extension (Cursor marketplace): tampered 2.1.312/2.1.313 plants SSH backdoor… | Threat...

High · No CVSS. Planted SSH key, reverse tunnel and persistence on build load; remote access only where SSH could be enabled (Cursor: usually needs admin)…

helix.ml
1
1
30
cyber front has stabilized at everyone getting pwnd every day, gn folks
Image from helix (@helixml)
1
1
3
77
Tampered Claude Code extension builds 2.1.312/2.1.313 were served via Cursor's marketplace on Oct 29 (~11h window). Per Cursor they sent host info and tried to add an SSH key and reverse tunnel. Check for a key labeled svc-telemetry and remove them. helix.ml/threat-watch/i/clau…
Claude Code extension (Cursor marketplace): tampered 2.1.312/2.1.313 plants SSH backdoor… | Threat...

Claude Code extension (Cursor marketplace): tampered 2.1.312/2.1.313 plants SSH backdoor… | Threat...

High · No CVSS. Planted SSH key, reverse tunnel and persistence on build load; remote access only where SSH could be enabled (Cursor: usually needs admin)…

helix.ml
1
1
67
Details: Windows and macOS builds. Cursor says the attacker server is now offline, and that enabling SSH usually needs admin rights the extension lacks, so remote login likely failed on most hosts. The key add and persistence (LaunchAgent on macOS, scheduled task on Windows) were still attempted.
17
Load more