DEV Community

Etairos.ai profile picture

Etairos.ai

cybersecurity SIEM AI

Location Nashville, TN Joined Joined on  Email address matt@etairos.ai Personal website https://etairos.ai
Pass-the-Key: Malware Hijacks Google-Synced Passkeys Straight Off the Endpoint
etairos profile

Pass-the-Key: Malware Hijacks Google-Synced Passkeys Straight Off the Endpoint

#cybersecurity #infosec #security
Comments 1
4 min read
N-able N-central Auth Bypass Exploited in the Wild After First Patch Missed an Alternate Path
etairos profile

N-able N-central Auth Bypass Exploited in the Wild After First Patch Missed an Alternate Path

#cybersecurity #infosec #security
Comments
5 min read
Adform's trackpoint-async.js Was Poisoned to Rewrite Crypto Wallet Addresses on Downstream Sites
etairos profile

Adform's trackpoint-async.js Was Poisoned to Rewrite Crypto Wallet Addresses on Downstream Sites

#cybersecurity #infosec #security
Comments
5 min read
Coldcard Firmware Flaw Cut Seed Entropy to 40 Bits, Enabling a $70M Bitcoin Sweep in 41 Minutes
etairos profile

Coldcard Firmware Flaw Cut Seed Entropy to 40 Bits, Enabling a $70M Bitcoin Sweep in 41 Minutes

#cybersecurity #infosec #security
Comments
1 min read
Anthropic's Claude Mistook the Open Internet for a CTF and Breached Three Real Companies
etairos profile

Anthropic's Claude Mistook the Open Internet for a CTF and Breached Three Real Companies

#cybersecurity #infosec #security
Comments
6 min read
CISA Warns of Cyberattacks Disrupting US Water Utilities: Internet-Exposed PLCs Are the Front Door
etairos profile

CISA Warns of Cyberattacks Disrupting US Water Utilities: Internet-Exposed PLCs Are the Front Door

#cybersecurity #infosec #security
Comments
5 min read
Cisco Ships Hotfixes for FMC Zero-Day CVE-2026-20316 as CISA Sets August 1 Deadline
etairos profile

Cisco Ships Hotfixes for FMC Zero-Day CVE-2026-20316 as CISA Sets August 1 Deadline

#cybersecurity #infosec #security
Comments
5 min read
Coordinated Attack Hits 30+ Minnesota Water Systems, One Plant Forced Offline
etairos profile

Coordinated Attack Hits 30+ Minnesota Water Systems, One Plant Forced Offline

#cybersecurity #infosec #security
Comments
5 min read
24,650 Exposed BMCs Hand Out IPMI Password Hashes to Anyone Who Asks
etairos profile

24,650 Exposed BMCs Hand Out IPMI Password Hashes to Anyone Who Asks

#cybersecurity #infosec #security
1
Comments 1
6 min read
Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack
etairos profile

Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack

#cybersecurity #infosec #security
Comments
5 min read
ShinyHunters Claims Ernst & Young Breach, Sets July 31 Extortion Deadline
etairos profile

ShinyHunters Claims Ernst & Young Breach, Sets July 31 Extortion Deadline

#cybersecurity #infosec #security
Comments
4 min read
SourTrade Malvertising Makes the Victim's Browser Assemble the Malware
etairos profile

SourTrade Malvertising Makes the Victim's Browser Assemble the Malware

#cybersecurity #infosec #security
Comments
4 min read
Certighost: Any Domain User Can Impersonate a Domain Controller and Steal krbtgt
etairos profile

Certighost: Any Domain User Can Impersonate a Domain Controller and Steal krbtgt

#cybersecurity #infosec #security
Comments
4 min read
Bing SVG Flaws Gave RCE as SYSTEM on Microsoft's Image Servers
etairos profile

Bing SVG Flaws Gave RCE as SYSTEM on Microsoft's Image Servers

#cybersecurity #infosec #security
Comments
4 min read
Fastjson 1.x Zero-Day (CVE-2026-16723): Unauthenticated RCE With No Patch Available
etairos profile

Fastjson 1.x Zero-Day (CVE-2026-16723): Unauthenticated RCE With No Patch Available

#cybersecurity #infosec #security
Comments
4 min read
Russian APT Ran a Zimbra Zero-Day for Five Months, Stealing Mail, Passwords and 2FA Codes
etairos profile

Russian APT Ran a Zimbra Zero-Day for Five Months, Stealing Mail, Passwords and 2FA Codes

#cybersecurity #infosec #security
Comments
5 min read
CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation
etairos profile

CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation

#cybersecurity #infosec #security
Comments 1
5 min read
No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark
etairos profile

No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark

#cybersecurity #infosec #security
Comments
5 min read
SharePoint CVE-2026-50522 Exploited in the Wild: Attackers Stealing Machine Keys in a Single Request
etairos profile

SharePoint CVE-2026-50522 Exploited in the Wild: Attackers Stealing Machine Keys in a Single Request

#cybersecurity #infosec #security
Comments
4 min read
Bit2Watt: Turning Rented GPU Time Into a Grid Disturbance
etairos profile

Bit2Watt: Turning Rented GPU Time Into a Grid Disturbance

#cybersecurity #infosec #security
Comments
5 min read
Russian Intelligence Is Hijacking IP Cameras to Track NATO Military Logistics
etairos profile

Russian Intelligence Is Hijacking IP Cameras to Track NATO Military Logistics

#cybersecurity #infosec #security
Comments
4 min read
Autonomous AI Agent Breaches Hugging Face Production Infrastructure via Malicious Dataset
etairos profile

Autonomous AI Agent Breaches Hugging Face Production Infrastructure via Malicious Dataset

#cybersecurity #infosec #security
Comments
4 min read
Two Aleksandr Ermakovs: How a Missing Patronymic Put a Russian Tourist in an Armenian Cell
etairos profile

Two Aleksandr Ermakovs: How a Missing Patronymic Put a Russian Tourist in an Armenian Cell

#cybersecurity #infosec #security
Comments
6 min read
Fairlife Ransomware Attack Stops the Milk: Coca-Cola's 8-K Confirms US Dairy Production Halt
etairos profile

Fairlife Ransomware Attack Stops the Milk: Coca-Cola's 8-K Confirms US Dairy Production Halt

#cybersecurity #infosec #security
Comments
4 min read
HollowByte: 11 Bytes Freeze OpenSSL Server Memory, and There's No CVE to Find
etairos profile

HollowByte: 11 Bytes Freeze OpenSSL Server Memory, and There's No CVE to Find

#cybersecurity #infosec #security
Comments
5 min read
wp2shell: Unauthenticated RCE in WordPress Core Hits Every 6.9 and 7.0 Site
etairos profile

wp2shell: Unauthenticated RCE in WordPress Core Hits Every 6.9 and 7.0 Site

#cybersecurity #infosec #security
Comments
5 min read
Microsoft's 622-CVE Patch Tuesday: Two Zero-Days in SharePoint and AD FS Are Already Being Exploited
etairos profile

Microsoft's 622-CVE Patch Tuesday: Two Zero-Days in SharePoint and AD FS Are Already Being Exploited

#cybersecurity #infosec #security
Comments
5 min read
Two Scattered Spider Teenagers Get 5.5 Years Each for the £29 Million TfL Hack
etairos profile

Two Scattered Spider Teenagers Get 5.5 Years Each for the £29 Million TfL Hack

#cybersecurity #infosec #security
Comments
6 min read
Two SonicWall SMA 1000 Zero-Days Under Active Attack, One Rated CVSS 10.0
etairos profile

Two SonicWall SMA 1000 Zero-Days Under Active Attack, One Rated CVSS 10.0

#cybersecurity #infosec #security
Comments
3 min read
Microsoft's July 2026 Patch Tuesday: 570 Flaws and 3 Actively Exploited Zero-Days
etairos profile

Microsoft's July 2026 Patch Tuesday: 570 Flaws and 3 Actively Exploited Zero-Days

#cybersecurity #infosec #security
Comments 1
3 min read
xAI's Grok Build Shipped Whole Git Repos to a Cloud Bucket, and the Privacy Toggle Didn't Stop It
etairos profile

xAI's Grok Build Shipped Whole Git Repos to a Cloud Bucket, and the Privacy Toggle Didn't Stop It

#cybersecurity #infosec #security
Comments
7 min read
One Header, Full Admin: Attackers Exploit Critical Auth Bypass in Gitea Docker Images
etairos profile

One Header, Full Admin: Attackers Exploit Critical Auth Bypass in Gitea Docker Images

#cybersecurity #infosec #security
Comments
4 min read
The Negotiator Was the Threat Actor: Ransomware 'Double Agent' Gets 70 Months for Feeding Victims to BlackCat
etairos profile

The Negotiator Was the Threat Actor: Ransomware 'Double Agent' Gets 70 Months for Feeding Victims to BlackCat

#cybersecurity #infosec #security
Comments
5 min read
Progress Orders Emergency Shutdown of ShareFile Storage Zone Controllers Over Unnamed Threat
etairos profile

Progress Orders Emergency Shutdown of ShareFile Storage Zone Controllers Over Unnamed Threat

#cybersecurity #infosec #security
Comments
4 min read
Ubiquiti Patches Seven Critical UniFi Flaws, Including a Perfect 10.0 Command Injection
etairos profile

Ubiquiti Patches Seven Critical UniFi Flaws, Including a Perfect 10.0 Command Injection

#cybersecurity #infosec #security
Comments
4 min read
npm 12 Kills Install Scripts by Default, Ending the Postinstall Attack Era
etairos profile

npm 12 Kills Install Scripts by Default, Ending the Postinstall Attack Era

#cybersecurity #infosec #security
Comments 1
5 min read
GitHub 'Verified' Commits Can Be Cloned Into New Hashes Without the Signing Key
etairos profile

GitHub 'Verified' Commits Can Be Cloned Into New Hashes Without the Signing Key

#cybersecurity #infosec #security
Comments
5 min read
CISA Flags Four Actively Exploited Flaws: ColdFusion, Joomla Page Builders, and Langflow Under Attack
etairos profile

CISA Flags Four Actively Exploited Flaws: ColdFusion, Joomla Page Builders, and Langflow Under Attack

#cybersecurity #infosec #security
Comments
4 min read
GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Seconds
etairos profile

GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Seconds

#cybersecurity #infosec #security
Comments
4 min read
BeyondTrust Patches Two 9.2-Rated Auth Bypass Flaws in Remote Support and PRA
etairos profile

BeyondTrust Patches Two 9.2-Rated Auth Bypass Flaws in Remote Support and PRA

#cybersecurity #infosec #security
Comments
4 min read
16-Year-Old Linux KVM Bug 'Januscape' Lets a Guest VM Take Down the Host on Intel and AMD
etairos profile

16-Year-Old Linux KVM Bug 'Januscape' Lets a Guest VM Take Down the Host on Intel and AMD

#cybersecurity #infosec #security
Comments
4 min read
Max-Severity Adobe ColdFusion RCE (CVE-2026-48282) Is Now Under Active Attack
etairos profile

Max-Severity Adobe ColdFusion RCE (CVE-2026-48282) Is Now Under Active Attack

#cybersecurity #infosec #security
Comments
3 min read
JadePuffer: The First Ransomware to Automate an Entire Attack With an AI Agent
etairos profile

JadePuffer: The First Ransomware to Automate an Entire Attack With an AI Agent

#cybersecurity #infosec #security
Comments
4 min read
Bad Epoll (CVE-2026-46242): Unprivileged-to-Root Linux Kernel Bug Hits Servers, Desktops, and Android
etairos profile

Bad Epoll (CVE-2026-46242): Unprivileged-to-Root Linux Kernel Bug Hits Servers, Desktops, and Android

#cybersecurity #infosec #security
Comments
4 min read
Seven Unpatched FatFs Flaws Put Millions of Embedded Devices One USB Away From a Jailbreak
etairos profile

Seven Unpatched FatFs Flaws Put Millions of Embedded Devices One USB Away From a Jailbreak

#cybersecurity #infosec #security
Comments
5 min read
Google Degrades NetNut: 2 Million Home Devices Cut From a Residential Proxy Network
etairos profile

Google Degrades NetNut: 2 Million Home Devices Cut From a Residential Proxy Network

#cybersecurity #infosec #security
Comments
4 min read
Armored Likho Hits Government and Power Sector with BusySnake Stealer
etairos profile

Armored Likho Hits Government and Power Sector with BusySnake Stealer

#cybersecurity #infosec #security
Comments
3 min read
SharePoint RCE CVE-2026-45659 Hits CISA KEV as Attackers Exploit It in the Wild
etairos profile

SharePoint RCE CVE-2026-45659 Hits CISA KEV as Attackers Exploit It in the Wild

#cybersecurity #infosec #security
Comments
3 min read
JADEPUFFER: An AI Agent Just Ran a Ransomware Attack End to End
etairos profile

JADEPUFFER: An AI Agent Just Ran a Ransomware Attack End to End

#cybersecurity #infosec #security
Comments
5 min read
Kemp LoadMaster Pre-Auth RCE Under Active Attack: Patch CVE-2026-8037 Now
etairos profile

Kemp LoadMaster Pre-Auth RCE Under Active Attack: Patch CVE-2026-8037 Now

#cybersecurity #infosec #security
Comments
3 min read
Azure CLI Password Spray: 78 Microsoft Accounts Cracked in 81 Million Attempts
etairos profile

Azure CLI Password Spray: 78 Microsoft Accounts Cracked in 81 Million Attempts

#cybersecurity #infosec #security
Comments
3 min read
Oracle E-Business Suite CVE-2026-46817 Under Active Attack: Patch Now
etairos profile

Oracle E-Business Suite CVE-2026-46817 Under Active Attack: Patch Now

#cybersecurity #infosec #security
Comments
4 min read
SimpleHelp CVE-2026-48558 (CVSS 10.0) Exploited to Drop TaskWeaver Loader and Djinn Stealer
etairos profile

SimpleHelp CVE-2026-48558 (CVSS 10.0) Exploited to Drop TaskWeaver Loader and Djinn Stealer

#cybersecurity #infosec #security
Comments
4 min read
Iran, Russia, and China Are Probing US Water Systems for Sabotage
etairos profile

Iran, Russia, and China Are Probing US Water Systems for Sabotage

#cybersecurity #infosec #security
Comments
3 min read
CISA Flags First-Ever PTC Windchill RCE in KEV as Web Shells Spread (CVE-2026-12569)
etairos profile

CISA Flags First-Ever PTC Windchill RCE in KEV as Web Shells Spread (CVE-2026-12569)

#cybersecurity #infosec #security
Comments
3 min read
FBI: Russian Intelligence Now Steals Signal Backup Recovery Keys to Loot Entire Chat Histories
etairos profile

FBI: Russian Intelligence Now Steals Signal Backup Recovery Keys to Loot Entire Chat Histories

#cybersecurity #infosec #security
Comments
4 min read
Gaslight: North Korea's Rust macOS Stealer Tries to Trick the AI Analyzing It
etairos profile

Gaslight: North Korea's Rust macOS Stealer Tries to Trick the AI Analyzing It

#cybersecurity #infosec #security
Comments
4 min read
10 Million-Install Chrome Ad Blocker Hides a Remote Kill Switch for Arbitrary JavaScript
etairos profile

10 Million-Install Chrome Ad Blocker Hides a Remote Kill Switch for Arbitrary JavaScript

#cybersecurity #infosec #security
Comments
4 min read
FortiBleed: Russian IAB Sniffs 110 Million Credentials Off 430,000 FortiGate Firewalls
etairos profile

FortiBleed: Russian IAB Sniffs 110 Million Credentials Off 430,000 FortiGate Firewalls

#cybersecurity #infosec #security
Comments
4 min read
Fake AI Agent Skill Slipped Past Every Scanner and Reached 26,000 Agents
etairos profile

Fake AI Agent Skill Slipped Past Every Scanner and Reached 26,000 Agents

#cybersecurity #infosec #security
Comments 1
5 min read
loading...