X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner

tomcat

@[email protected]

If olive oil comes from olives 🫒 where does baby oil come from? 🤔 🥸

Open remote profile ↗
Posts
tomcat@[email protected]

‼️ Critical VeloCloud SQL injection flaw exploited in the wild.

Tracked as CVE-2026-114625 (CVSS 9.9), the flaw lets even read-only users escalate to full operator privileges.

Arista confirms active attacks.

What admins need to know ↓ https://thehackernews.com/2026/10/arista-warns-of-critical-velocloud-sql.html

The Hacker NewsArista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in AttacksAttackers are exploiting CVE-2026-114625 in VeloCloud Orchestrator, allowing logged-in users to gain full operator privileges.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
tomcat@[email protected]

‼️ URGENT ‼️ Two CRITICAL, unpatched PHP flaws (CVSS 9.2 each) have triggered an emergency warning after alleged exploit details surfaced online.

Researchers report potential RCE.

CVE-2026-109618 and CVE-2026-109619.

Fixes scheduled for October 21, 14:00 UTC.

Details - https://thehackernews.com/2026/10/php2shell-two-unpatched-critical-php.html

The Hacker NewsPHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security AlertPHP2Shell involves two critical PHP RCE flaws rated CVSS 9.2, with emergency fixes scheduled following a disclosure leak.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
tomcat@[email protected]

‼️ Hackers used autonomous AI agents to breach company websites with minimal human input.

A Chinese-language campaign targeted over 1,200 sites, with confirmed compromises. Exposed AI control panels revealed the attacks and hundreds of leaked secrets.

Full story: https://thehackernews.com/2026/10/hackers-use-autonomous-ai-agents-to.html

The Hacker NewsHackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 SitesExposed Cairn panels reveal autonomous AI attacks on over 1,200 websites, with confirmed breaches and leaked credentials.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
tomcat@[email protected]

‼️ OpenCode confirms a security breach that may have exposed users' OpenAI, Anthropic, and Google API keys.

1.4% of Console users affected. Some report unauthorized AI usage charges.

OpenCode urges affected users to revoke their keys.

Read - https://thehackernews.com/2026/10/opencode-console-breach-may-have.html

The Hacker NewsOpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API KeysOpenCode says a Console breach may have exposed AI provider keys belonging to 1.4% of users, prompting revocation notices.
↩ Reply ♡ 0 · ↻ 0 ↗ Original