Browser extensions can hijack Claude Desktop via Dispatch feature
Researchers demonstrate how malicious browser scripts on claude.ai can trick Claude Desktop into executing code on a user's machine through the Dispatch integration.
Security & privacy
TLS and certificates, encryption, safe file transfer, breaches and how to avoid them.
Barracuda Email Security Gateway flaws allow unauthenticated root access
Two vulnerabilities in Barracuda's Email Security Gateway can be chained to execute commands as root without login. Patches are available in firmware version 9.4.0.030 and later.
Fixing Keycloak HTTPS and proxy errors in production mode
A technical guide resolves common Keycloak deployment errors like 'HTTPS required' and invalid redirect URIs by configuring reverse proxies and hostname settings correctly.
Backdoored ARTEX copies grant root access to self-hosted consoles
CERT-In reports AI-driven attacks on BFSI sectors and warns of backdoored ARTEX Docker images granting unauthenticated root shells.
Prompt adware in OpenAI Codex jailbreak modifies agent instructions
Check Point Research found a Codex jailbreak bundle that injects ads into AI agent responses, highlighting new supply chain risks for self-hosted LLM setups.
DreamHost breach exposes customer emails and session tokens via file manager flaw
Hackers exploited a vulnerability in DreamHost's file manager starting in August, stealing session tokens and emails from an undisclosed number of customers before detection in November.
BTCPay Server users urged to patch after hot wallet thefts
Attackers are exploiting unpatched BTCPay Server instances to steal Bitcoin and Litecoin from hot wallets, prompting urgent upgrade recommendations.
Synology urges DSM updates after C3RB3R ransomware exploits old flaws
Synology warns users to patch DiskStation Manager immediately as C3RB3R ransomware targets devices running outdated firmware with known vulnerabilities.
Chainstack breach exposes customer data via AI-powered attack campaign
Blockchain provider Chainstack confirmed a security incident where attackers accessed production systems and customer password hashes through a third-party component.
Attackers abuse AD CS and Teams social engineering to steal data
Microsoft reports two intrusions where attackers posed as IT support on Teams, gained remote access, and exploited insecure Active Directory Certificate Services settings to issue privileged certifica
Hush Relay offers experimental self-hosted encrypted messaging via PHP
A new open-source project enables private, end-to-end encrypted chat using a single PHP file and a browser-based app, requiring no accounts or complex infrastructure.
Northflank urges immediate secret rotation after AI key compromise
Northflank reports unauthorized use of user-supplied AI API keys and advises all customers to rotate credentials immediately.
eMudhra weak keys allow instant certificate forgery and slow patching
Cloudflare reports widespread exploitation of eMudhra’s critically weak cryptographic keys, with many client systems still vulnerable weeks after disclosure.
Palo Alto Networks confirms active exploitation of PHP2Shell flaws in exposed management interfaces
Threat actors are actively exploiting unpatched PHP vulnerabilities in internet-facing Palo Alto Networks firewalls, prompting urgent mitigation steps from CISA and the vendor.
New self-hosted tool tlswatch audits TLS certificates and legacy protocol support
tlswatch is a new open-source binary that monitors TLS certificate expiry, chain validity, and legacy protocol acceptance across any port or address.
