DEV Community

Etairos.ai profile picture

Etairos.ai

cybersecurity SIEM AI

Location Nashville, TN Joined Joined on  Email address matt@etairos.ai Personal website https://etairos.ai
Russian APT Ran a Zimbra Zero-Day for Five Months, Stealing Mail, Passwords and 2FA Codes
etairos profile

Russian APT Ran a Zimbra Zero-Day for Five Months, Stealing Mail, Passwords and 2FA Codes

#cybersecurity #infosec #security
Comments
5 min read
CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation
etairos profile

CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation

#cybersecurity #infosec #security
Comments 1
5 min read
No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark
etairos profile

No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark

#cybersecurity #infosec #security
Comments
5 min read
SharePoint CVE-2026-50522 Exploited in the Wild: Attackers Stealing Machine Keys in a Single Request
etairos profile

SharePoint CVE-2026-50522 Exploited in the Wild: Attackers Stealing Machine Keys in a Single Request

#cybersecurity #infosec #security
Comments
4 min read
Bit2Watt: Turning Rented GPU Time Into a Grid Disturbance
etairos profile

Bit2Watt: Turning Rented GPU Time Into a Grid Disturbance

#cybersecurity #infosec #security
Comments
5 min read
Russian Intelligence Is Hijacking IP Cameras to Track NATO Military Logistics
etairos profile

Russian Intelligence Is Hijacking IP Cameras to Track NATO Military Logistics

#cybersecurity #infosec #security
Comments
4 min read
Autonomous AI Agent Breaches Hugging Face Production Infrastructure via Malicious Dataset
etairos profile

Autonomous AI Agent Breaches Hugging Face Production Infrastructure via Malicious Dataset

#cybersecurity #infosec #security
Comments
4 min read
Two Aleksandr Ermakovs: How a Missing Patronymic Put a Russian Tourist in an Armenian Cell
etairos profile

Two Aleksandr Ermakovs: How a Missing Patronymic Put a Russian Tourist in an Armenian Cell

#cybersecurity #infosec #security
Comments
6 min read
Fairlife Ransomware Attack Stops the Milk: Coca-Cola's 8-K Confirms US Dairy Production Halt
etairos profile

Fairlife Ransomware Attack Stops the Milk: Coca-Cola's 8-K Confirms US Dairy Production Halt

#cybersecurity #infosec #security
Comments
4 min read
HollowByte: 11 Bytes Freeze OpenSSL Server Memory, and There's No CVE to Find
etairos profile

HollowByte: 11 Bytes Freeze OpenSSL Server Memory, and There's No CVE to Find

#cybersecurity #infosec #security
Comments
5 min read
wp2shell: Unauthenticated RCE in WordPress Core Hits Every 6.9 and 7.0 Site
etairos profile

wp2shell: Unauthenticated RCE in WordPress Core Hits Every 6.9 and 7.0 Site

#cybersecurity #infosec #security
Comments
5 min read
Microsoft's 622-CVE Patch Tuesday: Two Zero-Days in SharePoint and AD FS Are Already Being Exploited
etairos profile

Microsoft's 622-CVE Patch Tuesday: Two Zero-Days in SharePoint and AD FS Are Already Being Exploited

#cybersecurity #infosec #security
Comments
5 min read
Two Scattered Spider Teenagers Get 5.5 Years Each for the £29 Million TfL Hack
etairos profile

Two Scattered Spider Teenagers Get 5.5 Years Each for the £29 Million TfL Hack

#cybersecurity #infosec #security
Comments
6 min read
Two SonicWall SMA 1000 Zero-Days Under Active Attack, One Rated CVSS 10.0
etairos profile

Two SonicWall SMA 1000 Zero-Days Under Active Attack, One Rated CVSS 10.0

#cybersecurity #infosec #security
Comments
3 min read
Microsoft's July 2026 Patch Tuesday: 570 Flaws and 3 Actively Exploited Zero-Days
etairos profile

Microsoft's July 2026 Patch Tuesday: 570 Flaws and 3 Actively Exploited Zero-Days

#cybersecurity #infosec #security
Comments 1
3 min read
xAI's Grok Build Shipped Whole Git Repos to a Cloud Bucket, and the Privacy Toggle Didn't Stop It
etairos profile

xAI's Grok Build Shipped Whole Git Repos to a Cloud Bucket, and the Privacy Toggle Didn't Stop It

#cybersecurity #infosec #security
Comments
7 min read
One Header, Full Admin: Attackers Exploit Critical Auth Bypass in Gitea Docker Images
etairos profile

One Header, Full Admin: Attackers Exploit Critical Auth Bypass in Gitea Docker Images

#cybersecurity #infosec #security
Comments
4 min read
The Negotiator Was the Threat Actor: Ransomware 'Double Agent' Gets 70 Months for Feeding Victims to BlackCat
etairos profile

The Negotiator Was the Threat Actor: Ransomware 'Double Agent' Gets 70 Months for Feeding Victims to BlackCat

#cybersecurity #infosec #security
Comments
5 min read
Progress Orders Emergency Shutdown of ShareFile Storage Zone Controllers Over Unnamed Threat
etairos profile

Progress Orders Emergency Shutdown of ShareFile Storage Zone Controllers Over Unnamed Threat

#cybersecurity #infosec #security
Comments
4 min read
Ubiquiti Patches Seven Critical UniFi Flaws, Including a Perfect 10.0 Command Injection
etairos profile

Ubiquiti Patches Seven Critical UniFi Flaws, Including a Perfect 10.0 Command Injection

#cybersecurity #infosec #security
Comments
4 min read
npm 12 Kills Install Scripts by Default, Ending the Postinstall Attack Era
etairos profile

npm 12 Kills Install Scripts by Default, Ending the Postinstall Attack Era

#cybersecurity #infosec #security
Comments 1
5 min read
GitHub 'Verified' Commits Can Be Cloned Into New Hashes Without the Signing Key
etairos profile

GitHub 'Verified' Commits Can Be Cloned Into New Hashes Without the Signing Key

#cybersecurity #infosec #security
Comments
5 min read
CISA Flags Four Actively Exploited Flaws: ColdFusion, Joomla Page Builders, and Langflow Under Attack
etairos profile

CISA Flags Four Actively Exploited Flaws: ColdFusion, Joomla Page Builders, and Langflow Under Attack

#cybersecurity #infosec #security
Comments
4 min read
GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Seconds
etairos profile

GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Seconds

#cybersecurity #infosec #security
Comments
4 min read
BeyondTrust Patches Two 9.2-Rated Auth Bypass Flaws in Remote Support and PRA
etairos profile

BeyondTrust Patches Two 9.2-Rated Auth Bypass Flaws in Remote Support and PRA

#cybersecurity #infosec #security
Comments
4 min read
16-Year-Old Linux KVM Bug 'Januscape' Lets a Guest VM Take Down the Host on Intel and AMD
etairos profile

16-Year-Old Linux KVM Bug 'Januscape' Lets a Guest VM Take Down the Host on Intel and AMD

#cybersecurity #infosec #security
Comments
4 min read
Max-Severity Adobe ColdFusion RCE (CVE-2026-48282) Is Now Under Active Attack
etairos profile

Max-Severity Adobe ColdFusion RCE (CVE-2026-48282) Is Now Under Active Attack

#cybersecurity #infosec #security
Comments
3 min read
JadePuffer: The First Ransomware to Automate an Entire Attack With an AI Agent
etairos profile

JadePuffer: The First Ransomware to Automate an Entire Attack With an AI Agent

#cybersecurity #infosec #security
Comments
4 min read
Bad Epoll (CVE-2026-46242): Unprivileged-to-Root Linux Kernel Bug Hits Servers, Desktops, and Android
etairos profile

Bad Epoll (CVE-2026-46242): Unprivileged-to-Root Linux Kernel Bug Hits Servers, Desktops, and Android

#cybersecurity #infosec #security
Comments
4 min read
Seven Unpatched FatFs Flaws Put Millions of Embedded Devices One USB Away From a Jailbreak
etairos profile

Seven Unpatched FatFs Flaws Put Millions of Embedded Devices One USB Away From a Jailbreak

#cybersecurity #infosec #security
Comments
5 min read
Google Degrades NetNut: 2 Million Home Devices Cut From a Residential Proxy Network
etairos profile

Google Degrades NetNut: 2 Million Home Devices Cut From a Residential Proxy Network

#cybersecurity #infosec #security
Comments
4 min read
Armored Likho Hits Government and Power Sector with BusySnake Stealer
etairos profile

Armored Likho Hits Government and Power Sector with BusySnake Stealer

#cybersecurity #infosec #security
Comments
3 min read
SharePoint RCE CVE-2026-45659 Hits CISA KEV as Attackers Exploit It in the Wild
etairos profile

SharePoint RCE CVE-2026-45659 Hits CISA KEV as Attackers Exploit It in the Wild

#cybersecurity #infosec #security
Comments
3 min read
JADEPUFFER: An AI Agent Just Ran a Ransomware Attack End to End
etairos profile

JADEPUFFER: An AI Agent Just Ran a Ransomware Attack End to End

#cybersecurity #infosec #security
Comments
5 min read
Kemp LoadMaster Pre-Auth RCE Under Active Attack: Patch CVE-2026-8037 Now
etairos profile

Kemp LoadMaster Pre-Auth RCE Under Active Attack: Patch CVE-2026-8037 Now

#cybersecurity #infosec #security
Comments
3 min read
Azure CLI Password Spray: 78 Microsoft Accounts Cracked in 81 Million Attempts
etairos profile

Azure CLI Password Spray: 78 Microsoft Accounts Cracked in 81 Million Attempts

#cybersecurity #infosec #security
Comments
3 min read
Oracle E-Business Suite CVE-2026-46817 Under Active Attack: Patch Now
etairos profile

Oracle E-Business Suite CVE-2026-46817 Under Active Attack: Patch Now

#cybersecurity #infosec #security
Comments
4 min read
SimpleHelp CVE-2026-48558 (CVSS 10.0) Exploited to Drop TaskWeaver Loader and Djinn Stealer
etairos profile

SimpleHelp CVE-2026-48558 (CVSS 10.0) Exploited to Drop TaskWeaver Loader and Djinn Stealer

#cybersecurity #infosec #security
Comments
4 min read
Iran, Russia, and China Are Probing US Water Systems for Sabotage
etairos profile

Iran, Russia, and China Are Probing US Water Systems for Sabotage

#cybersecurity #infosec #security
Comments
3 min read
CISA Flags First-Ever PTC Windchill RCE in KEV as Web Shells Spread (CVE-2026-12569)
etairos profile

CISA Flags First-Ever PTC Windchill RCE in KEV as Web Shells Spread (CVE-2026-12569)

#cybersecurity #infosec #security
Comments
3 min read
FBI: Russian Intelligence Now Steals Signal Backup Recovery Keys to Loot Entire Chat Histories
etairos profile

FBI: Russian Intelligence Now Steals Signal Backup Recovery Keys to Loot Entire Chat Histories

#cybersecurity #infosec #security
Comments
4 min read
Gaslight: North Korea's Rust macOS Stealer Tries to Trick the AI Analyzing It
etairos profile

Gaslight: North Korea's Rust macOS Stealer Tries to Trick the AI Analyzing It

#cybersecurity #infosec #security
Comments
4 min read
10 Million-Install Chrome Ad Blocker Hides a Remote Kill Switch for Arbitrary JavaScript
etairos profile

10 Million-Install Chrome Ad Blocker Hides a Remote Kill Switch for Arbitrary JavaScript

#cybersecurity #infosec #security
Comments
4 min read
FortiBleed: Russian IAB Sniffs 110 Million Credentials Off 430,000 FortiGate Firewalls
etairos profile

FortiBleed: Russian IAB Sniffs 110 Million Credentials Off 430,000 FortiGate Firewalls

#cybersecurity #infosec #security
Comments
4 min read
Fake AI Agent Skill Slipped Past Every Scanner and Reached 26,000 Agents
etairos profile

Fake AI Agent Skill Slipped Past Every Scanner and Reached 26,000 Agents

#cybersecurity #infosec #security
Comments 1
5 min read
Squidbleed: A 1997 Squid Proxy Bug Leaks Other Users' Cleartext HTTP Requests
etairos profile

Squidbleed: A 1997 Squid Proxy Bug Leaks Other Users' Cleartext HTTP Requests

#cybersecurity #infosec #security
Comments
4 min read
CISA Sounds the Alarm: FortiBleed Leak Exposes Fortinet Credentials, Secure Your Devices Now
etairos profile

CISA Sounds the Alarm: FortiBleed Leak Exposes Fortinet Credentials, Secure Your Devices Now

#cybersecurity #infosec #security
Comments
3 min read
usbliter8: Unpatchable SecureROM Exploit Breaks Apple A12 and A13 Boot Chain
etairos profile

usbliter8: Unpatchable SecureROM Exploit Breaks Apple A12 and A13 Boot Chain

#cybersecurity #infosec #security
Comments
4 min read
Microsoft Ties Mastra AI npm Supply Chain Attack to North Korean Hackers
etairos profile

Microsoft Ties Mastra AI npm Supply Chain Attack to North Korean Hackers

#cybersecurity #infosec #security
Comments
4 min read
FortiBleed: CISA Warns 86,644 FortiGate Devices Compromised in Russian-Speaking Credential Campaign
etairos profile

FortiBleed: CISA Warns 86,644 FortiGate Devices Compromised in Russian-Speaking Credential Campaign

#cybersecurity #infosec #security
Comments
4 min read
AutoJack: One Web Page Turns a Local AI Agent Into Host Code Execution
etairos profile

AutoJack: One Web Page Turns a Local AI Agent Into Host Code Execution

#cybersecurity #infosec #security
Comments
4 min read
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads With Nothing but a Project ID
etairos profile

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads With Nothing but a Project ID

#cybersecurity #infosec #security
Comments
4 min read
Chinese APT UNC6508 Weaponized Google Workspace Compliance Rules to Exfiltrate Defense Research
etairos profile

Chinese APT UNC6508 Weaponized Google Workspace Compliance Rules to Exfiltrate Defense Research

#cybersecurity #infosec #security
Comments
5 min read
LiteLLM Vulnerability Chain Enables Full AI Gateway Takeover from Default Account
etairos profile

LiteLLM Vulnerability Chain Enables Full AI Gateway Takeover from Default Account

#cybersecurity #infosec #security
Comments
5 min read
Chinese APT Hijacks Authentication to Spy on Air-Gapped Network for 10 Years
etairos profile

Chinese APT Hijacks Authentication to Spy on Air-Gapped Network for 10 Years

#cybersecurity #infosec #security
Comments
4 min read
China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH for Nine Years
etairos profile

China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH for Nine Years

#cybersecurity #infosec #security
Comments
4 min read
Splunk Enterprise CVE-2026-20253: Unauthenticated RCE via PostgreSQL Sidecar
etairos profile

Splunk Enterprise CVE-2026-20253: Unauthenticated RCE via PostgreSQL Sidecar

#cybersecurity #infosec #security
Comments
4 min read
A Government Directive Just Took Fable 5 and Mythos 5 Offline Worldwide
etairos profile

A Government Directive Just Took Fable 5 and Mythos 5 Offline Worldwide

Comments
1 min read
Claude Fable 5 and Mythos 5: The Cyber Safeguard Is Now the Product Boundary
etairos profile

Claude Fable 5 and Mythos 5: The Cyber Safeguard Is Now the Product Boundary

Comments
1 min read
Claude Fable 5 & Mythos 5: the cyber safeguard is now the product boundary
etairos profile

Claude Fable 5 & Mythos 5: the cyber safeguard is now the product boundary

Comments
1 min read
loading...