Crooked Bough News Round-up

— Chainalysis says hackers stole credentials and tokens for all of its customers

 

at 11/6/26 1:56pm

Company said a "multifront cyberattack" included AI agents and an on-path data snatch.

[Category: Biz & IT, Security, blockchain, breaches, chainalysis, hacking]

— Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

 

at 11/5/26 4:09pm

Certain configurations of Alpine are affected. Other distros may be as well.

[Category: Biz & IT, Security, alpine, Linux, SSH, vulnerabilities]

— Hackers exploited iOS and Android flaws to infect phones

 

at 11/4/26 3:26pm

Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.

[Category: Biz & IT, Security, adversary in the middle, kremlin, watering hole attack]

— VMware releases vSphere Express for virtualization on up to 128 cores

 

at 11/4/26 2:38pm

“We started listening to a lot of our lower-end customers," VMware exec says.

[Category: Biz & IT, Broadcom, vmware]

— Binance says hackers who stole billions in crypto spent months planning heist

 

at 11/4/26 9:06am

Techniques included laptop infections, compromised internal tooling, and fake job interviews.

[Category: Biz & IT, Security, cryptocurrency, hacking, tradertraitor]

— UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?

 

at 11/3/26 9:03am

UEFI bootkit BlackX exploits Microsoft's lack of clarity around Secure Boot protections.

[Category: Biz & IT, Security, microsoft, secure boot, uefi, Windows]

— Anthropic VS code extension on Cursor backdoored for nearly 12 hours

 

at 10/30/26 3:09pm

It's still unknown how attackers got access to Anthropic's verified Cursor account.

[Category: AI, Biz & IT, Security, Anthropic, Claude, cursor, supply chain attacks]

— Code-execution flaw in UEFI firmware affects most servers on planet Earth

 

at 10/27/26 2:25pm

Critical flaw in EDK2 allows attackers to execute code early in the boot process.

[Category: Biz & IT, Security, bootkits, buffer overflow, disclosure, uefi]

— Disgraced eMudhra drops out of TLS business after using cert private key of 4

 

at 10/22/26 2:17pm

Flubbed key signing "ceremony" allowed minting of web credentials for any site.

[Category: Biz & IT, Security, cerfificate authority, encryption, tls, transport layer security]

— 333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email

 

at 10/22/26 5:30am

For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.

[Category: Biz & IT, Security, exploit, hacking, the onion router, tor]

— Enterprises keep buying software upgrades that IT thinks will make things worse

 

at 10/21/26 3:48pm

Survey of 2,018 IT heads at big firms points to a lack of leverage.

[Category: Biz & IT, IT, software]

— PHP warns it plans to release 2 emergency patches imminently

 

at 10/20/26 8:12pm

Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.

[Category: Biz & IT, Security, exploits, patches, php, vulnerabilities]

— The Internet goes on high alert after discovery of 8 compromised TLS certs

 

at 10/20/26 1:47pm

Intermediate certs allow anyone to mint web credentials for any Internet server.

[Category: Biz & IT, Security, certificate authorities, private keys, tls, transport layer security]

— Meta Muse exposes users' personal and business secrets when they share conversations

 

at 10/20/26 6:33am

Meta is suspending the sharing feature while it investigates its privacy.

[Category: AI, Biz & IT, Security, meta, muse, privacy]

— PSA: Patch your Plex media server before someone hacks it

 

at 10/19/26 1:39pm

A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.

[Category: Biz & IT, Security, exploits, plex media server, vulnerabilities]

— ReactOS reaches major milestone with NTFS install support

 

at 10/19/26 12:30pm

ReactOS gains NTFS install support with new driver.

[Category: Biz & IT, Tech, NTFS, open source, ReactOS, Windows alternatives]

— OpenAI models hacked a crypto wallet and breached more websites

 

at 10/16/26 2:59pm

The actions could have resulted in criminal charges had humans been behind the keyboard.

[Category: AI, Biz & IT, Security, LLMs, models, openai, unalignment]

— Targeted ads delivered 0-click exploits to install mercenary malware

 

at 10/15/26 2:32pm

The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.

[Category: Biz & IT, Security, citizen lab, Discover-tech]

— Fridge hack costing millions and sparking fires stemmed from poor security

 

at 10/14/26 3:35pm

Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.

[Category: Biz & IT, Security, cybersecurity, hacking, vulnerabilities]

— Anthropic warns small AI models could self-replicate through IoT devices

 

at 10/14/26 6:55am

"Small weight-based replicators" could usher in a new generation of computer worms.

[Category: AI, Biz & IT, Security, computer worms, small models]

— Topgolf saved over $11.3 million after leaving VMware

 

at 10/13/26 3:33pm

Topgolf and VMware "ran deep" before the migration.

[Category: Biz & IT, Broadcom, topgolf, vmware]

As of 11/8/26 2:25am. Last new 11/6/26 2:29pm.