DEV Community

Etairos.ai profile picture

Etairos.ai

cybersecurity SIEM AI

Location Nashville, TN Joined Joined on  Email address [email protected] Personal website https://etairos.ai
WeChat Zero-Click Worm Hijacked Accounts on iPhone and Android Through Incoming Calls
etairos profile

WeChat Zero-Click Worm Hijacked Accounts on iPhone and Android Through Incoming Calls

#cybersecurity #infosec #security
Comments
5 min read
StyleSmuggler: Magento Zero-Day CVE-2026-75650 Drops a Rust Backdoor and a PHP Web Shell
etairos profile

StyleSmuggler: Magento Zero-Day CVE-2026-75650 Drops a Rust Backdoor and a PHP Web Shell

#cybersecurity #infosec #security
Comments
5 min read
OpenAI Left a Dead German Wiki Off the Incident Report: 18,000 Agent Posts, Zero Disclosure
etairos profile

OpenAI Left a Dead German Wiki Off the Incident Report: 18,000 Agent Posts, Zero Disclosure

#cybersecurity #infosec #security
Comments
5 min read
Citrix NetScaler Auth Bypass CVE-2026-19490 Is Now Under Attack: Patch Window Was 15 Days
etairos profile

Citrix NetScaler Auth Bypass CVE-2026-19490 Is Now Under Attack: Patch Window Was 15 Days

#cybersecurity #infosec #security
Comments
5 min read
StyleSmuggler: Unpatched Magento Zero-Day Is Backdooring Stores Right Now
etairos profile

StyleSmuggler: Unpatched Magento Zero-Day Is Backdooring Stores Right Now

#cybersecurity #infosec #security
Comments
5 min read
GPT-6 Astra Hits 100% on ExploitBench: What Saturated Exploit Generation Means for Your Patch Window
etairos profile

GPT-6 Astra Hits 100% on ExploitBench: What Saturated Exploit Generation Means for Your Patch Window

#cybersecurity #infosec #security
Comments
5 min read
Malicious .git Configs Turn Claude Code, Codex, and Cursor Into Attacker Shells
etairos profile

Malicious .git Configs Turn Claude Code, Codex, and Cursor Into Attacker Shells

#cybersecurity #infosec #security
Comments
6 min read
BGP Hijack Delivered a Backdoored Virtualizor Update to VPS Hosts
etairos profile

BGP Hijack Delivered a Backdoored Virtualizor Update to VPS Hosts

#cybersecurity #infosec #security
Comments
5 min read
Fire Ant Turns Cisco IOS XR Routers Into Credential Traps and Kills the Logs
etairos profile

Fire Ant Turns Cisco IOS XR Routers Into Credential Traps and Kills the Logs

#cybersecurity #infosec #security
Comments
5 min read
TerminalFix: Fake Cloudflare CAPTCHAs Push Victims Into PowerShell, Then Open a Reverse Tunnel Into the Network
etairos profile

TerminalFix: Fake Cloudflare CAPTCHAs Push Victims Into PowerShell, Then Open a Reverse Tunnel Into the Network

#cybersecurity #infosec #security
1
Comments
5 min read
Three CVSS 10.0 ServiceNow Flaws: Unauthenticated Code Execution and SQL Injection
etairos profile

Three CVSS 10.0 ServiceNow Flaws: Unauthenticated Code Execution and SQL Injection

#cybersecurity #infosec #security
Comments
5 min read
McKesson Breached by Phone: ShinyHunters Claims 284 Million Records From a Vishing Campaign
etairos profile

McKesson Breached by Phone: ShinyHunters Claims 284 Million Records From a Vishing Campaign

#cybersecurity #infosec #security
Comments
6 min read
ownCloud Auth Bypass CVE-2023-49105 Used to Exfiltrate 372 MB of Philippine Nuclear Records
etairos profile

ownCloud Auth Bypass CVE-2023-49105 Used to Exfiltrate 372 MB of Philippine Nuclear Records

#cybersecurity #infosec #security
Comments
5 min read
PaperCut Zero-Day Under Active Exploitation Hits Every NG and MF Version
etairos profile

PaperCut Zero-Day Under Active Exploitation Hits Every NG and MF Version

#cybersecurity #infosec #security
Comments
5 min read
Next.js Ships Two Unauthenticated RCE Fixes: Windows Path Traversal and an AVIF Heap Overflow
etairos profile

Next.js Ships Two Unauthenticated RCE Fixes: Windows Path Traversal and an AVIF Heap Overflow

#cybersecurity #infosec #security
Comments
5 min read
CISA Red Teamed Two Critical Infrastructure Orgs at Once: One SOC Saw Nothing
etairos profile

CISA Red Teamed Two Critical Infrastructure Orgs at Once: One SOC Saw Nothing

#cybersecurity #infosec #security
Comments
1 min read
FBI Pulls the Plug on QTFY: Eight Years of Chinese Contractor Espionage Hidden Behind Your Routers
etairos profile

FBI Pulls the Plug on QTFY: Eight Years of Chinese Contractor Espionage Hidden Behind Your Routers

#cybersecurity #infosec #security
Comments
5 min read
Critical Gitea RCE Under Active Exploitation: CVE-2026-60004 Turns a Signup Form Into Shell Access
etairos profile

Critical Gitea RCE Under Active Exploitation: CVE-2026-60004 Turns a Signup Form Into Shell Access

#cybersecurity #infosec #security
Comments
5 min read
Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February
etairos profile

Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February

#cybersecurity #infosec #security
Comments
5 min read
miniOrange SAML SSO Auth Bypass Chained in Live WordPress Attacks
etairos profile

miniOrange SAML SSO Auth Bypass Chained in Live WordPress Attacks

#cybersecurity #infosec #security
Comments
5 min read
Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins
etairos profile

Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins

#cybersecurity #infosec #security
Comments
5 min read
Hundreds of Live AWS Keys Found in Public Sources, Most Grant Full Account Control
etairos profile

Hundreds of Live AWS Keys Found in Public Sources, Most Grant Full Account Control

#cybersecurity #infosec #security
Comments
5 min read
Three Russian Clusters Are Phishing Auth Flows, Not Passwords: OAuth, App Passwords, and WhatsApp Device Linking
etairos profile

Three Russian Clusters Are Phishing Auth Flows, Not Passwords: OAuth, App Passwords, and WhatsApp Device Linking

#cybersecurity #infosec #security
Comments
5 min read
GitLab CVE-2026-19478 Exploited in the Wild Days After Disclosure
etairos profile

GitLab CVE-2026-19478 Exploited in the Wild Days After Disclosure

#cybersecurity #infosec #security
Comments
4 min read
Rust Build Scripts Executed Malware From a Crate With 245 Million Downloads
etairos profile

Rust Build Scripts Executed Malware From a Crate With 245 Million Downloads

#cybersecurity #infosec #security
Comments
5 min read
Defender's Own BTR.sys Driver Can Delete Your EDR During Boot
etairos profile

Defender's Own BTR.sys Driver Can Delete Your EDR During Boot

#cybersecurity #infosec #security
Comments
5 min read
Entra ID RCE at CVSS 10.0 Was Exploited Before Anyone Outside Microsoft Knew It Existed
etairos profile

Entra ID RCE at CVSS 10.0 Was Exploited Before Anyone Outside Microsoft Knew It Existed

#cybersecurity #infosec #security
Comments
5 min read
Unauthenticated RCE in Zimbra: CVE-2026-73570 Is Being Exploited Through SMTP
etairos profile

Unauthenticated RCE in Zimbra: CVE-2026-73570 Is Being Exploited Through SMTP

#cybersecurity #infosec #security
Comments
5 min read
Five US Agencies Warn: AI-Generated Python Scripts Are Probing Siemens S7 PLCs
etairos profile

Five US Agencies Warn: AI-Generated Python Scripts Are Probing Siemens S7 PLCs

#cybersecurity #infosec #security
Comments
5 min read
Four CVEs, One Deadline: CISA Flags macOS, SharePoint, vCenter, and IKE Bugs Under Active Attack
etairos profile

Four CVEs, One Deadline: CISA Flags macOS, SharePoint, vCenter, and IKE Bugs Under Active Attack

#cybersecurity #infosec #security
Comments
4 min read
MLflow SSRF Bug Is Being Exploited to Loot Cloud Metadata Credentials Hours After Disclosure
etairos profile

MLflow SSRF Bug Is Being Exploited to Loot Cloud Metadata Credentials Hours After Disclosure

#cybersecurity #infosec #security
Comments
5 min read
Anthropic and EPFL Show AI Agents Can Infect Each Other Through SOUL.md
etairos profile

Anthropic and EPFL Show AI Agents Can Infect Each Other Through SOUL.md

#cybersecurity #infosec #security
Comments
6 min read
China-Nexus APT Turns vCenter CVE-2026-59310 Into 361 Ransomware Footholds in 47 Countries
etairos profile

China-Nexus APT Turns vCenter CVE-2026-59310 Into 361 Ransomware Footholds in 47 Countries

#cybersecurity #infosec #security
Comments
5 min read
The Contract Ended December 10. The Extortion Emails Started December 11.
etairos profile

The Contract Ended December 10. The Extortion Emails Started December 11.

#cybersecurity #infosec #security
Comments
5 min read
Encrypted Reasoning Was Never Private: Weaker Models Decoded 315,320 Hidden Thinking Blocks
etairos profile

Encrypted Reasoning Was Never Private: Weaker Models Decoded 315,320 Hidden Thinking Blocks

#cybersecurity #infosec #security
Comments
5 min read
Attackers Shut a Polish CHP Turbine by Pivoting Through a Private Cellular APN
etairos profile

Attackers Shut a Polish CHP Turbine by Pivoting Through a Private Cellular APN

#cybersecurity #infosec #security
Comments
5 min read
CSS in Email Is Now an Exploit Primitive: Six Webmail Clients Broken at Black Hat 2026
etairos profile

CSS in Email Is Now an Exploit Primitive: Six Webmail Clients Broken at Black Hat 2026

#cybersecurity #infosec #security
Comments
5 min read
The Snowflake Hacker Pleaded Guilty. The Real Story Is That He Never Needed an Exploit.
etairos profile

The Snowflake Hacker Pleaded Guilty. The Real Story Is That He Never Needed an Exploit.

#cybersecurity #infosec #security
Comments 1
6 min read
Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin
etairos profile

Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin

#cybersecurity #infosec #security
Comments
4 min read
CISA Adds TeamCity CVE-2026-63077 to KEV: Unauthenticated RCE on the Agent Polling Protocol
etairos profile

CISA Adds TeamCity CVE-2026-63077 to KEV: Unauthenticated RCE on the Agent Polling Protocol

#cybersecurity #infosec #security
Comments
5 min read
Zbtlink Ships ENDLESSDOORS: 21 Firmware Images, One Unauthenticated Root Shell
etairos profile

Zbtlink Ships ENDLESSDOORS: 21 Firmware Images, One Unauthenticated Root Shell

#cybersecurity #infosec #security
Comments
6 min read
4,407 Rockwell PLCs Sit on the Public Internet, 22 in Cities Hit by Water Utility Attacks
etairos profile

4,407 Rockwell PLCs Sit on the Public Internet, 22 in Cities Hit by Water Utility Attacks

#cybersecurity #infosec #security
Comments
5 min read
Pass-the-Key: Malware Hijacks Google-Synced Passkeys Straight Off the Endpoint
etairos profile

Pass-the-Key: Malware Hijacks Google-Synced Passkeys Straight Off the Endpoint

#cybersecurity #infosec #security
Comments 1
4 min read
N-able N-central Auth Bypass Exploited in the Wild After First Patch Missed an Alternate Path
etairos profile

N-able N-central Auth Bypass Exploited in the Wild After First Patch Missed an Alternate Path

#cybersecurity #infosec #security
Comments
5 min read
Adform's trackpoint-async.js Was Poisoned to Rewrite Crypto Wallet Addresses on Downstream Sites
etairos profile

Adform's trackpoint-async.js Was Poisoned to Rewrite Crypto Wallet Addresses on Downstream Sites

#cybersecurity #infosec #security
Comments
5 min read
Coldcard Firmware Flaw Cut Seed Entropy to 40 Bits, Enabling a $70M Bitcoin Sweep in 41 Minutes
etairos profile

Coldcard Firmware Flaw Cut Seed Entropy to 40 Bits, Enabling a $70M Bitcoin Sweep in 41 Minutes

#cybersecurity #infosec #security
Comments
1 min read
Anthropic's Claude Mistook the Open Internet for a CTF and Breached Three Real Companies
etairos profile

Anthropic's Claude Mistook the Open Internet for a CTF and Breached Three Real Companies

#cybersecurity #infosec #security
Comments
6 min read
CISA Warns of Cyberattacks Disrupting US Water Utilities: Internet-Exposed PLCs Are the Front Door
etairos profile

CISA Warns of Cyberattacks Disrupting US Water Utilities: Internet-Exposed PLCs Are the Front Door

#cybersecurity #infosec #security
Comments
5 min read
Cisco Ships Hotfixes for FMC Zero-Day CVE-2026-20316 as CISA Sets August 1 Deadline
etairos profile

Cisco Ships Hotfixes for FMC Zero-Day CVE-2026-20316 as CISA Sets August 1 Deadline

#cybersecurity #infosec #security
Comments
5 min read
Coordinated Attack Hits 30+ Minnesota Water Systems, One Plant Forced Offline
etairos profile

Coordinated Attack Hits 30+ Minnesota Water Systems, One Plant Forced Offline

#cybersecurity #infosec #security
Comments
5 min read
24,650 Exposed BMCs Hand Out IPMI Password Hashes to Anyone Who Asks
etairos profile

24,650 Exposed BMCs Hand Out IPMI Password Hashes to Anyone Who Asks

#cybersecurity #infosec #security
1
Comments 1
6 min read
Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack
etairos profile

Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack

#cybersecurity #infosec #security
Comments
5 min read
ShinyHunters Claims Ernst & Young Breach, Sets July 31 Extortion Deadline
etairos profile

ShinyHunters Claims Ernst & Young Breach, Sets July 31 Extortion Deadline

#cybersecurity #infosec #security
Comments
4 min read
SourTrade Malvertising Makes the Victim's Browser Assemble the Malware
etairos profile

SourTrade Malvertising Makes the Victim's Browser Assemble the Malware

#cybersecurity #infosec #security
Comments
4 min read
Certighost: Any Domain User Can Impersonate a Domain Controller and Steal krbtgt
etairos profile

Certighost: Any Domain User Can Impersonate a Domain Controller and Steal krbtgt

#cybersecurity #infosec #security
Comments
4 min read
Bing SVG Flaws Gave RCE as SYSTEM on Microsoft's Image Servers
etairos profile

Bing SVG Flaws Gave RCE as SYSTEM on Microsoft's Image Servers

#cybersecurity #infosec #security
Comments
4 min read
Fastjson 1.x Zero-Day (CVE-2026-16723): Unauthenticated RCE With No Patch Available
etairos profile

Fastjson 1.x Zero-Day (CVE-2026-16723): Unauthenticated RCE With No Patch Available

#cybersecurity #infosec #security
Comments
4 min read
Russian APT Ran a Zimbra Zero-Day for Five Months, Stealing Mail, Passwords and 2FA Codes
etairos profile

Russian APT Ran a Zimbra Zero-Day for Five Months, Stealing Mail, Passwords and 2FA Codes

#cybersecurity #infosec #security
Comments
5 min read
CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation
etairos profile

CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation

#cybersecurity #infosec #security
Comments 1
5 min read
No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark
etairos profile

No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark

#cybersecurity #infosec #security
Comments
5 min read
loading...