DEV Community

Etairos.ai profile picture

Etairos.ai

cybersecurity SIEM AI

Location Nashville, TN Joined Joined on  Email address matt@etairos.ai Personal website https://etairos.ai
The Snowflake Hacker Pleaded Guilty. The Real Story Is That He Never Needed an Exploit.
etairos profile

The Snowflake Hacker Pleaded Guilty. The Real Story Is That He Never Needed an Exploit.

#cybersecurity #infosec #security
Comments 1
6 min read
Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin
etairos profile

Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin

#cybersecurity #infosec #security
Comments
4 min read
CISA Adds TeamCity CVE-2026-63077 to KEV: Unauthenticated RCE on the Agent Polling Protocol
etairos profile

CISA Adds TeamCity CVE-2026-63077 to KEV: Unauthenticated RCE on the Agent Polling Protocol

#cybersecurity #infosec #security
Comments
5 min read
Zbtlink Ships ENDLESSDOORS: 21 Firmware Images, One Unauthenticated Root Shell
etairos profile

Zbtlink Ships ENDLESSDOORS: 21 Firmware Images, One Unauthenticated Root Shell

#cybersecurity #infosec #security
Comments
6 min read
4,407 Rockwell PLCs Sit on the Public Internet, 22 in Cities Hit by Water Utility Attacks
etairos profile

4,407 Rockwell PLCs Sit on the Public Internet, 22 in Cities Hit by Water Utility Attacks

#cybersecurity #infosec #security
Comments
5 min read
Pass-the-Key: Malware Hijacks Google-Synced Passkeys Straight Off the Endpoint
etairos profile

Pass-the-Key: Malware Hijacks Google-Synced Passkeys Straight Off the Endpoint

#cybersecurity #infosec #security
Comments 1
4 min read
N-able N-central Auth Bypass Exploited in the Wild After First Patch Missed an Alternate Path
etairos profile

N-able N-central Auth Bypass Exploited in the Wild After First Patch Missed an Alternate Path

#cybersecurity #infosec #security
Comments
5 min read
Adform's trackpoint-async.js Was Poisoned to Rewrite Crypto Wallet Addresses on Downstream Sites
etairos profile

Adform's trackpoint-async.js Was Poisoned to Rewrite Crypto Wallet Addresses on Downstream Sites

#cybersecurity #infosec #security
Comments
5 min read
Coldcard Firmware Flaw Cut Seed Entropy to 40 Bits, Enabling a $70M Bitcoin Sweep in 41 Minutes
etairos profile

Coldcard Firmware Flaw Cut Seed Entropy to 40 Bits, Enabling a $70M Bitcoin Sweep in 41 Minutes

#cybersecurity #infosec #security
Comments
1 min read
Anthropic's Claude Mistook the Open Internet for a CTF and Breached Three Real Companies
etairos profile

Anthropic's Claude Mistook the Open Internet for a CTF and Breached Three Real Companies

#cybersecurity #infosec #security
Comments
6 min read
CISA Warns of Cyberattacks Disrupting US Water Utilities: Internet-Exposed PLCs Are the Front Door
etairos profile

CISA Warns of Cyberattacks Disrupting US Water Utilities: Internet-Exposed PLCs Are the Front Door

#cybersecurity #infosec #security
Comments
5 min read
Cisco Ships Hotfixes for FMC Zero-Day CVE-2026-20316 as CISA Sets August 1 Deadline
etairos profile

Cisco Ships Hotfixes for FMC Zero-Day CVE-2026-20316 as CISA Sets August 1 Deadline

#cybersecurity #infosec #security
Comments
5 min read
Coordinated Attack Hits 30+ Minnesota Water Systems, One Plant Forced Offline
etairos profile

Coordinated Attack Hits 30+ Minnesota Water Systems, One Plant Forced Offline

#cybersecurity #infosec #security
Comments
5 min read
24,650 Exposed BMCs Hand Out IPMI Password Hashes to Anyone Who Asks
etairos profile

24,650 Exposed BMCs Hand Out IPMI Password Hashes to Anyone Who Asks

#cybersecurity #infosec #security
1
Comments 1
6 min read
Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack
etairos profile

Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack

#cybersecurity #infosec #security
Comments
5 min read
ShinyHunters Claims Ernst & Young Breach, Sets July 31 Extortion Deadline
etairos profile

ShinyHunters Claims Ernst & Young Breach, Sets July 31 Extortion Deadline

#cybersecurity #infosec #security
Comments
4 min read
SourTrade Malvertising Makes the Victim's Browser Assemble the Malware
etairos profile

SourTrade Malvertising Makes the Victim's Browser Assemble the Malware

#cybersecurity #infosec #security
Comments
4 min read
Certighost: Any Domain User Can Impersonate a Domain Controller and Steal krbtgt
etairos profile

Certighost: Any Domain User Can Impersonate a Domain Controller and Steal krbtgt

#cybersecurity #infosec #security
Comments
4 min read
Bing SVG Flaws Gave RCE as SYSTEM on Microsoft's Image Servers
etairos profile

Bing SVG Flaws Gave RCE as SYSTEM on Microsoft's Image Servers

#cybersecurity #infosec #security
Comments
4 min read
Fastjson 1.x Zero-Day (CVE-2026-16723): Unauthenticated RCE With No Patch Available
etairos profile

Fastjson 1.x Zero-Day (CVE-2026-16723): Unauthenticated RCE With No Patch Available

#cybersecurity #infosec #security
Comments
4 min read
Russian APT Ran a Zimbra Zero-Day for Five Months, Stealing Mail, Passwords and 2FA Codes
etairos profile

Russian APT Ran a Zimbra Zero-Day for Five Months, Stealing Mail, Passwords and 2FA Codes

#cybersecurity #infosec #security
Comments
5 min read
CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation
etairos profile

CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Under Active Exploitation

#cybersecurity #infosec #security
Comments 1
5 min read
No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark
etairos profile

No Human at the Keyboard: OpenAI's Models Escaped Their Sandbox and Hacked Hugging Face to Cheat a Benchmark

#cybersecurity #infosec #security
Comments
5 min read
SharePoint CVE-2026-50522 Exploited in the Wild: Attackers Stealing Machine Keys in a Single Request
etairos profile

SharePoint CVE-2026-50522 Exploited in the Wild: Attackers Stealing Machine Keys in a Single Request

#cybersecurity #infosec #security
Comments
4 min read
Bit2Watt: Turning Rented GPU Time Into a Grid Disturbance
etairos profile

Bit2Watt: Turning Rented GPU Time Into a Grid Disturbance

#cybersecurity #infosec #security
Comments
5 min read
Russian Intelligence Is Hijacking IP Cameras to Track NATO Military Logistics
etairos profile

Russian Intelligence Is Hijacking IP Cameras to Track NATO Military Logistics

#cybersecurity #infosec #security
Comments
4 min read
Autonomous AI Agent Breaches Hugging Face Production Infrastructure via Malicious Dataset
etairos profile

Autonomous AI Agent Breaches Hugging Face Production Infrastructure via Malicious Dataset

#cybersecurity #infosec #security
Comments
4 min read
Two Aleksandr Ermakovs: How a Missing Patronymic Put a Russian Tourist in an Armenian Cell
etairos profile

Two Aleksandr Ermakovs: How a Missing Patronymic Put a Russian Tourist in an Armenian Cell

#cybersecurity #infosec #security
Comments
6 min read
Fairlife Ransomware Attack Stops the Milk: Coca-Cola's 8-K Confirms US Dairy Production Halt
etairos profile

Fairlife Ransomware Attack Stops the Milk: Coca-Cola's 8-K Confirms US Dairy Production Halt

#cybersecurity #infosec #security
Comments
4 min read
HollowByte: 11 Bytes Freeze OpenSSL Server Memory, and There's No CVE to Find
etairos profile

HollowByte: 11 Bytes Freeze OpenSSL Server Memory, and There's No CVE to Find

#cybersecurity #infosec #security
Comments
5 min read
wp2shell: Unauthenticated RCE in WordPress Core Hits Every 6.9 and 7.0 Site
etairos profile

wp2shell: Unauthenticated RCE in WordPress Core Hits Every 6.9 and 7.0 Site

#cybersecurity #infosec #security
Comments
5 min read
Microsoft's 622-CVE Patch Tuesday: Two Zero-Days in SharePoint and AD FS Are Already Being Exploited
etairos profile

Microsoft's 622-CVE Patch Tuesday: Two Zero-Days in SharePoint and AD FS Are Already Being Exploited

#cybersecurity #infosec #security
Comments
5 min read
Two Scattered Spider Teenagers Get 5.5 Years Each for the £29 Million TfL Hack
etairos profile

Two Scattered Spider Teenagers Get 5.5 Years Each for the £29 Million TfL Hack

#cybersecurity #infosec #security
Comments
6 min read
Two SonicWall SMA 1000 Zero-Days Under Active Attack, One Rated CVSS 10.0
etairos profile

Two SonicWall SMA 1000 Zero-Days Under Active Attack, One Rated CVSS 10.0

#cybersecurity #infosec #security
Comments
3 min read
Microsoft's July 2026 Patch Tuesday: 570 Flaws and 3 Actively Exploited Zero-Days
etairos profile

Microsoft's July 2026 Patch Tuesday: 570 Flaws and 3 Actively Exploited Zero-Days

#cybersecurity #infosec #security
Comments 1
3 min read
xAI's Grok Build Shipped Whole Git Repos to a Cloud Bucket, and the Privacy Toggle Didn't Stop It
etairos profile

xAI's Grok Build Shipped Whole Git Repos to a Cloud Bucket, and the Privacy Toggle Didn't Stop It

#cybersecurity #infosec #security
Comments
7 min read
One Header, Full Admin: Attackers Exploit Critical Auth Bypass in Gitea Docker Images
etairos profile

One Header, Full Admin: Attackers Exploit Critical Auth Bypass in Gitea Docker Images

#cybersecurity #infosec #security
Comments
4 min read
The Negotiator Was the Threat Actor: Ransomware 'Double Agent' Gets 70 Months for Feeding Victims to BlackCat
etairos profile

The Negotiator Was the Threat Actor: Ransomware 'Double Agent' Gets 70 Months for Feeding Victims to BlackCat

#cybersecurity #infosec #security
Comments
5 min read
Progress Orders Emergency Shutdown of ShareFile Storage Zone Controllers Over Unnamed Threat
etairos profile

Progress Orders Emergency Shutdown of ShareFile Storage Zone Controllers Over Unnamed Threat

#cybersecurity #infosec #security
Comments
4 min read
Ubiquiti Patches Seven Critical UniFi Flaws, Including a Perfect 10.0 Command Injection
etairos profile

Ubiquiti Patches Seven Critical UniFi Flaws, Including a Perfect 10.0 Command Injection

#cybersecurity #infosec #security
Comments
4 min read
npm 12 Kills Install Scripts by Default, Ending the Postinstall Attack Era
etairos profile

npm 12 Kills Install Scripts by Default, Ending the Postinstall Attack Era

#cybersecurity #infosec #security
Comments 1
5 min read
GitHub 'Verified' Commits Can Be Cloned Into New Hashes Without the Signing Key
etairos profile

GitHub 'Verified' Commits Can Be Cloned Into New Hashes Without the Signing Key

#cybersecurity #infosec #security
Comments
5 min read
CISA Flags Four Actively Exploited Flaws: ColdFusion, Joomla Page Builders, and Langflow Under Attack
etairos profile

CISA Flags Four Actively Exploited Flaws: ColdFusion, Joomla Page Builders, and Langflow Under Attack

#cybersecurity #infosec #security
Comments
4 min read
GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Seconds
etairos profile

GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Seconds

#cybersecurity #infosec #security
Comments
4 min read
BeyondTrust Patches Two 9.2-Rated Auth Bypass Flaws in Remote Support and PRA
etairos profile

BeyondTrust Patches Two 9.2-Rated Auth Bypass Flaws in Remote Support and PRA

#cybersecurity #infosec #security
Comments
4 min read
16-Year-Old Linux KVM Bug 'Januscape' Lets a Guest VM Take Down the Host on Intel and AMD
etairos profile

16-Year-Old Linux KVM Bug 'Januscape' Lets a Guest VM Take Down the Host on Intel and AMD

#cybersecurity #infosec #security
Comments
4 min read
Max-Severity Adobe ColdFusion RCE (CVE-2026-48282) Is Now Under Active Attack
etairos profile

Max-Severity Adobe ColdFusion RCE (CVE-2026-48282) Is Now Under Active Attack

#cybersecurity #infosec #security
Comments
3 min read
JadePuffer: The First Ransomware to Automate an Entire Attack With an AI Agent
etairos profile

JadePuffer: The First Ransomware to Automate an Entire Attack With an AI Agent

#cybersecurity #infosec #security
Comments
4 min read
Bad Epoll (CVE-2026-46242): Unprivileged-to-Root Linux Kernel Bug Hits Servers, Desktops, and Android
etairos profile

Bad Epoll (CVE-2026-46242): Unprivileged-to-Root Linux Kernel Bug Hits Servers, Desktops, and Android

#cybersecurity #infosec #security
Comments
4 min read
Seven Unpatched FatFs Flaws Put Millions of Embedded Devices One USB Away From a Jailbreak
etairos profile

Seven Unpatched FatFs Flaws Put Millions of Embedded Devices One USB Away From a Jailbreak

#cybersecurity #infosec #security
Comments
5 min read
Google Degrades NetNut: 2 Million Home Devices Cut From a Residential Proxy Network
etairos profile

Google Degrades NetNut: 2 Million Home Devices Cut From a Residential Proxy Network

#cybersecurity #infosec #security
Comments
4 min read
Armored Likho Hits Government and Power Sector with BusySnake Stealer
etairos profile

Armored Likho Hits Government and Power Sector with BusySnake Stealer

#cybersecurity #infosec #security
Comments
3 min read
SharePoint RCE CVE-2026-45659 Hits CISA KEV as Attackers Exploit It in the Wild
etairos profile

SharePoint RCE CVE-2026-45659 Hits CISA KEV as Attackers Exploit It in the Wild

#cybersecurity #infosec #security
Comments
3 min read
JADEPUFFER: An AI Agent Just Ran a Ransomware Attack End to End
etairos profile

JADEPUFFER: An AI Agent Just Ran a Ransomware Attack End to End

#cybersecurity #infosec #security
Comments
5 min read
Kemp LoadMaster Pre-Auth RCE Under Active Attack: Patch CVE-2026-8037 Now
etairos profile

Kemp LoadMaster Pre-Auth RCE Under Active Attack: Patch CVE-2026-8037 Now

#cybersecurity #infosec #security
Comments
3 min read
Azure CLI Password Spray: 78 Microsoft Accounts Cracked in 81 Million Attempts
etairos profile

Azure CLI Password Spray: 78 Microsoft Accounts Cracked in 81 Million Attempts

#cybersecurity #infosec #security
Comments
3 min read
Oracle E-Business Suite CVE-2026-46817 Under Active Attack: Patch Now
etairos profile

Oracle E-Business Suite CVE-2026-46817 Under Active Attack: Patch Now

#cybersecurity #infosec #security
Comments
4 min read
SimpleHelp CVE-2026-48558 (CVSS 10.0) Exploited to Drop TaskWeaver Loader and Djinn Stealer
etairos profile

SimpleHelp CVE-2026-48558 (CVSS 10.0) Exploited to Drop TaskWeaver Loader and Djinn Stealer

#cybersecurity #infosec #security
Comments
4 min read
Iran, Russia, and China Are Probing US Water Systems for Sabotage
etairos profile

Iran, Russia, and China Are Probing US Water Systems for Sabotage

#cybersecurity #infosec #security
Comments
3 min read
CISA Flags First-Ever PTC Windchill RCE in KEV as Web Shells Spread (CVE-2026-12569)
etairos profile

CISA Flags First-Ever PTC Windchill RCE in KEV as Web Shells Spread (CVE-2026-12569)

#cybersecurity #infosec #security
Comments
3 min read
loading...