close

DEV Community

Etairos.ai profile picture

Etairos.ai

cybersecurity SIEM AI

Location Nashville, TN Joined Joined on  Email address matt@etairos.ai Personal website https://etairos.ai
FBI Pulls the Plug on QTFY: Eight Years of Chinese Contractor Espionage Hidden Behind Your Routers
etairos profile

FBI Pulls the Plug on QTFY: Eight Years of Chinese Contractor Espionage Hidden Behind Your Routers

#cybersecurity #infosec #security
Comments
5 min read
Critical Gitea RCE Under Active Exploitation: CVE-2026-60004 Turns a Signup Form Into Shell Access
etairos profile

Critical Gitea RCE Under Active Exploitation: CVE-2026-60004 Turns a Signup Form Into Shell Access

#cybersecurity #infosec #security
Comments
5 min read
Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February
etairos profile

Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February

#cybersecurity #infosec #security
Comments
5 min read
miniOrange SAML SSO Auth Bypass Chained in Live WordPress Attacks
etairos profile

miniOrange SAML SSO Auth Bypass Chained in Live WordPress Attacks

#cybersecurity #infosec #security
Comments
5 min read
Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins
etairos profile

Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins

#cybersecurity #infosec #security
Comments
5 min read
Hundreds of Live AWS Keys Found in Public Sources, Most Grant Full Account Control
etairos profile

Hundreds of Live AWS Keys Found in Public Sources, Most Grant Full Account Control

#cybersecurity #infosec #security
Comments
5 min read
Three Russian Clusters Are Phishing Auth Flows, Not Passwords: OAuth, App Passwords, and WhatsApp Device Linking
etairos profile

Three Russian Clusters Are Phishing Auth Flows, Not Passwords: OAuth, App Passwords, and WhatsApp Device Linking

#cybersecurity #infosec #security
Comments
5 min read
GitLab CVE-2026-19478 Exploited in the Wild Days After Disclosure
etairos profile

GitLab CVE-2026-19478 Exploited in the Wild Days After Disclosure

#cybersecurity #infosec #security
Comments
4 min read
Rust Build Scripts Executed Malware From a Crate With 245 Million Downloads
etairos profile

Rust Build Scripts Executed Malware From a Crate With 245 Million Downloads

#cybersecurity #infosec #security
Comments
5 min read
Defender's Own BTR.sys Driver Can Delete Your EDR During Boot
etairos profile

Defender's Own BTR.sys Driver Can Delete Your EDR During Boot

#cybersecurity #infosec #security
Comments
5 min read
Entra ID RCE at CVSS 10.0 Was Exploited Before Anyone Outside Microsoft Knew It Existed
etairos profile

Entra ID RCE at CVSS 10.0 Was Exploited Before Anyone Outside Microsoft Knew It Existed

#cybersecurity #infosec #security
Comments
5 min read
Unauthenticated RCE in Zimbra: CVE-2026-73570 Is Being Exploited Through SMTP
etairos profile

Unauthenticated RCE in Zimbra: CVE-2026-73570 Is Being Exploited Through SMTP

#cybersecurity #infosec #security
Comments
5 min read
Five US Agencies Warn: AI-Generated Python Scripts Are Probing Siemens S7 PLCs
etairos profile

Five US Agencies Warn: AI-Generated Python Scripts Are Probing Siemens S7 PLCs

#cybersecurity #infosec #security
Comments
5 min read
Four CVEs, One Deadline: CISA Flags macOS, SharePoint, vCenter, and IKE Bugs Under Active Attack
etairos profile

Four CVEs, One Deadline: CISA Flags macOS, SharePoint, vCenter, and IKE Bugs Under Active Attack

#cybersecurity #infosec #security
Comments
4 min read
MLflow SSRF Bug Is Being Exploited to Loot Cloud Metadata Credentials Hours After Disclosure
etairos profile

MLflow SSRF Bug Is Being Exploited to Loot Cloud Metadata Credentials Hours After Disclosure

#cybersecurity #infosec #security
Comments
5 min read
Anthropic and EPFL Show AI Agents Can Infect Each Other Through SOUL.md
etairos profile

Anthropic and EPFL Show AI Agents Can Infect Each Other Through SOUL.md

#cybersecurity #infosec #security
Comments
6 min read
China-Nexus APT Turns vCenter CVE-2026-59310 Into 361 Ransomware Footholds in 47 Countries
etairos profile

China-Nexus APT Turns vCenter CVE-2026-59310 Into 361 Ransomware Footholds in 47 Countries

#cybersecurity #infosec #security
Comments
5 min read
The Contract Ended December 10. The Extortion Emails Started December 11.
etairos profile

The Contract Ended December 10. The Extortion Emails Started December 11.

#cybersecurity #infosec #security
Comments
5 min read
Encrypted Reasoning Was Never Private: Weaker Models Decoded 315,320 Hidden Thinking Blocks
etairos profile

Encrypted Reasoning Was Never Private: Weaker Models Decoded 315,320 Hidden Thinking Blocks

#cybersecurity #infosec #security
Comments
5 min read
Attackers Shut a Polish CHP Turbine by Pivoting Through a Private Cellular APN
etairos profile

Attackers Shut a Polish CHP Turbine by Pivoting Through a Private Cellular APN

#cybersecurity #infosec #security
Comments
5 min read
CSS in Email Is Now an Exploit Primitive: Six Webmail Clients Broken at Black Hat 2026
etairos profile

CSS in Email Is Now an Exploit Primitive: Six Webmail Clients Broken at Black Hat 2026

#cybersecurity #infosec #security
Comments
5 min read
The Snowflake Hacker Pleaded Guilty. The Real Story Is That He Never Needed an Exploit.
etairos profile

The Snowflake Hacker Pleaded Guilty. The Real Story Is That He Never Needed an Exploit.

#cybersecurity #infosec #security
Comments 1
6 min read
Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin
etairos profile

Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin

#cybersecurity #infosec #security
Comments
4 min read
CISA Adds TeamCity CVE-2026-63077 to KEV: Unauthenticated RCE on the Agent Polling Protocol
etairos profile

CISA Adds TeamCity CVE-2026-63077 to KEV: Unauthenticated RCE on the Agent Polling Protocol

#cybersecurity #infosec #security
Comments
5 min read
Zbtlink Ships ENDLESSDOORS: 21 Firmware Images, One Unauthenticated Root Shell
etairos profile

Zbtlink Ships ENDLESSDOORS: 21 Firmware Images, One Unauthenticated Root Shell

#cybersecurity #infosec #security
Comments
6 min read
4,407 Rockwell PLCs Sit on the Public Internet, 22 in Cities Hit by Water Utility Attacks
etairos profile

4,407 Rockwell PLCs Sit on the Public Internet, 22 in Cities Hit by Water Utility Attacks

#cybersecurity #infosec #security
Comments
5 min read
Pass-the-Key: Malware Hijacks Google-Synced Passkeys Straight Off the Endpoint
etairos profile

Pass-the-Key: Malware Hijacks Google-Synced Passkeys Straight Off the Endpoint

#cybersecurity #infosec #security
Comments 1
4 min read
N-able N-central Auth Bypass Exploited in the Wild After First Patch Missed an Alternate Path
etairos profile

N-able N-central Auth Bypass Exploited in the Wild After First Patch Missed an Alternate Path

#cybersecurity #infosec #security
Comments
5 min read
Adform's trackpoint-async.js Was Poisoned to Rewrite Crypto Wallet Addresses on Downstream Sites
etairos profile

Adform's trackpoint-async.js Was Poisoned to Rewrite Crypto Wallet Addresses on Downstream Sites

#cybersecurity #infosec #security
Comments
5 min read
Coldcard Firmware Flaw Cut Seed Entropy to 40 Bits, Enabling a $70M Bitcoin Sweep in 41 Minutes
etairos profile

Coldcard Firmware Flaw Cut Seed Entropy to 40 Bits, Enabling a $70M Bitcoin Sweep in 41 Minutes

#cybersecurity #infosec #security
Comments
1 min read
Anthropic's Claude Mistook the Open Internet for a CTF and Breached Three Real Companies
etairos profile

Anthropic's Claude Mistook the Open Internet for a CTF and Breached Three Real Companies

#cybersecurity #infosec #security
Comments
6 min read
CISA Warns of Cyberattacks Disrupting US Water Utilities: Internet-Exposed PLCs Are the Front Door
etairos profile

CISA Warns of Cyberattacks Disrupting US Water Utilities: Internet-Exposed PLCs Are the Front Door

#cybersecurity #infosec #security
Comments
5 min read
Cisco Ships Hotfixes for FMC Zero-Day CVE-2026-20316 as CISA Sets August 1 Deadline
etairos profile

Cisco Ships Hotfixes for FMC Zero-Day CVE-2026-20316 as CISA Sets August 1 Deadline

#cybersecurity #infosec #security
Comments
5 min read
Coordinated Attack Hits 30+ Minnesota Water Systems, One Plant Forced Offline
etairos profile

Coordinated Attack Hits 30+ Minnesota Water Systems, One Plant Forced Offline

#cybersecurity #infosec #security
Comments
5 min read
24,650 Exposed BMCs Hand Out IPMI Password Hashes to Anyone Who Asks
etairos profile

24,650 Exposed BMCs Hand Out IPMI Password Hashes to Anyone Who Asks

#cybersecurity #infosec #security
1
Comments 1
6 min read
Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack
etairos profile

Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack

#cybersecurity #infosec #security
Comments
5 min read
ShinyHunters Claims Ernst & Young Breach, Sets July 31 Extortion Deadline
etairos profile

ShinyHunters Claims Ernst & Young Breach, Sets July 31 Extortion Deadline

#cybersecurity #infosec #security
Comments
4 min read
SourTrade Malvertising Makes the Victim's Browser Assemble the Malware
etairos profile

SourTrade Malvertising Makes the Victim's Browser Assemble the Malware

#cybersecurity #infosec #security
Comments
4 min read
Certighost: Any Domain User Can Impersonate a Domain Controller and Steal krbtgt
etairos profile

Certighost: Any Domain User Can Impersonate a Domain Controller and Steal krbtgt

#cybersecurity #infosec #security
Comments
4 min read
Bing SVG Flaws Gave RCE as SYSTEM on Microsoft's Image Servers
etairos profile

Bing SVG Flaws Gave RCE as SYSTEM on Microsoft's Image Servers

#cybersecurity #infosec #security
Comments
4 min read
Fastjson 1.x Zero-Day (CVE-2026-16723): Unauthenticated RCE With No Patch Available
etairos profile

Fastjson 1.x Zero-Day (CVE-2026-16723): Unauthenticated RCE With No Patch Available

#cybersecurity #infosec #security
Comments
4 min read
Russian APT Ran a Zimbra Zero-Day for Five Months, Stealing Mail, Passwords and 2FA Codes
etairos profile

Russian APT Ran a Zimbra Zero-Day for Five Months, Stealing Mail, Passwords and 2FA Codes

#cybersecurity #infosec #security
Comments
5 min read
CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation
etairos profile

CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation

#cybersecurity #infosec #security
Comments 1
5 min read
No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark
etairos profile

No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark

#cybersecurity #infosec #security
Comments
5 min read
SharePoint CVE-2026-50522 Exploited in the Wild: Attackers Stealing Machine Keys in a Single Request
etairos profile

SharePoint CVE-2026-50522 Exploited in the Wild: Attackers Stealing Machine Keys in a Single Request

#cybersecurity #infosec #security
Comments
4 min read
Bit2Watt: Turning Rented GPU Time Into a Grid Disturbance
etairos profile

Bit2Watt: Turning Rented GPU Time Into a Grid Disturbance

#cybersecurity #infosec #security
Comments
5 min read
Russian Intelligence Is Hijacking IP Cameras to Track NATO Military Logistics
etairos profile

Russian Intelligence Is Hijacking IP Cameras to Track NATO Military Logistics

#cybersecurity #infosec #security
Comments
4 min read
Autonomous AI Agent Breaches Hugging Face Production Infrastructure via Malicious Dataset
etairos profile

Autonomous AI Agent Breaches Hugging Face Production Infrastructure via Malicious Dataset

#cybersecurity #infosec #security
Comments
4 min read
Two Aleksandr Ermakovs: How a Missing Patronymic Put a Russian Tourist in an Armenian Cell
etairos profile

Two Aleksandr Ermakovs: How a Missing Patronymic Put a Russian Tourist in an Armenian Cell

#cybersecurity #infosec #security
Comments
6 min read
Fairlife Ransomware Attack Stops the Milk: Coca-Cola's 8-K Confirms US Dairy Production Halt
etairos profile

Fairlife Ransomware Attack Stops the Milk: Coca-Cola's 8-K Confirms US Dairy Production Halt

#cybersecurity #infosec #security
Comments
4 min read
HollowByte: 11 Bytes Freeze OpenSSL Server Memory, and There's No CVE to Find
etairos profile

HollowByte: 11 Bytes Freeze OpenSSL Server Memory, and There's No CVE to Find

#cybersecurity #infosec #security
Comments
5 min read
wp2shell: Unauthenticated RCE in WordPress Core Hits Every 6.9 and 7.0 Site
etairos profile

wp2shell: Unauthenticated RCE in WordPress Core Hits Every 6.9 and 7.0 Site

#cybersecurity #infosec #security
Comments
5 min read
Microsoft's 622-CVE Patch Tuesday: Two Zero-Days in SharePoint and AD FS Are Already Being Exploited
etairos profile

Microsoft's 622-CVE Patch Tuesday: Two Zero-Days in SharePoint and AD FS Are Already Being Exploited

#cybersecurity #infosec #security
Comments
5 min read
Two Scattered Spider Teenagers Get 5.5 Years Each for the £29 Million TfL Hack
etairos profile

Two Scattered Spider Teenagers Get 5.5 Years Each for the £29 Million TfL Hack

#cybersecurity #infosec #security
Comments
6 min read
Two SonicWall SMA 1000 Zero-Days Under Active Attack, One Rated CVSS 10.0
etairos profile

Two SonicWall SMA 1000 Zero-Days Under Active Attack, One Rated CVSS 10.0

#cybersecurity #infosec #security
Comments
3 min read
Microsoft's July 2026 Patch Tuesday: 570 Flaws and 3 Actively Exploited Zero-Days
etairos profile

Microsoft's July 2026 Patch Tuesday: 570 Flaws and 3 Actively Exploited Zero-Days

#cybersecurity #infosec #security
Comments 1
3 min read
xAI's Grok Build Shipped Whole Git Repos to a Cloud Bucket, and the Privacy Toggle Didn't Stop It
etairos profile

xAI's Grok Build Shipped Whole Git Repos to a Cloud Bucket, and the Privacy Toggle Didn't Stop It

#cybersecurity #infosec #security
Comments
7 min read
One Header, Full Admin: Attackers Exploit Critical Auth Bypass in Gitea Docker Images
etairos profile

One Header, Full Admin: Attackers Exploit Critical Auth Bypass in Gitea Docker Images

#cybersecurity #infosec #security
Comments
4 min read
The Negotiator Was the Threat Actor: Ransomware 'Double Agent' Gets 70 Months for Feeding Victims to BlackCat
etairos profile

The Negotiator Was the Threat Actor: Ransomware 'Double Agent' Gets 70 Months for Feeding Victims to BlackCat

#cybersecurity #infosec #security
Comments
5 min read
Progress Orders Emergency Shutdown of ShareFile Storage Zone Controllers Over Unnamed Threat
etairos profile

Progress Orders Emergency Shutdown of ShareFile Storage Zone Controllers Over Unnamed Threat

#cybersecurity #infosec #security
Comments
4 min read
loading...