Security
GNU Savannah Flaw Could Have Backdoored Bash
An AI-assisted audit turned a backtick-laden email address into code execution on GNU Savannah, root on the server, and push access to Bash's repo.
Cyber Kendra — Cybersecurity & Tech News
CATEGORY
Latest Posts
GNU Savannah Flaw Could Have Backdoored Bash
An AI-assisted audit turned a backtick-laden email address into code execution on GNU Savannah, root on the server,…
Chrome Flaw CVE-2026-106378 Let GPU Process Inject Keystrokes on Macs
The macOS-only Chrome bug let a hijacked GPU process type into Spotlight and launch apps; Google fixed it…
Steam Zero-Click RCE: 6 Flaws Let Attackers Hijack PCs
Atredis found six Steam bugs — a zero-click RCE between PCs on one account, plus four SYSTEM-level privilege…
Malicious Claude Code Cursor Extension Planted SSH Backdoor
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000…
Dark Souls 2 and 3 Servers Down on All Platforms
FromSoftware has taken Dark Souls II and Dark Souls III servers offline on all platforms, citing an unspecified…
Binance Hack: DevOps Laptop Compromise Suspected, $3B Frozen
Binance says the theft, estimated at up to $5.9 billion, likely began with a compromised engineer’s laptop. Deposits…
Accenture Claude Agent Exposed DOD Credentials: Report
Accenture contractor's personal Claude Code agent ran on a DOD network for two months and sent login credentials…
Polymarket Hacked via DebugBear Script, Vendor Confirms Breach
Polymarket froze trading after a compromised DebugBear script drained user accounts. One trader lost $800,000. Refunds promised.
CitySourced Data Exposure Leaks 42M Civic Records
A CitySourced database owned by Granicus exposed 42M records, including names, addresses and phone numbers from civic complaints.
Critical Linux Kernel TCP Flaw CVE-2026-98432 Still Unpatched on Ubuntu and RHEL
CVE-2026-98432 is a 9.8 CVSS Linux kernel TCP flaw. See which distros are patched, why Red Hat rates…
Researcher Breaks Microsoft Edge Without AI, Logic Bugs Only
Orange Tsai detailed a Microsoft Edge sandbox escape chaining five logic bugs with no memory corruption — patched…
Android ‘SMS of Death’ Zero-Click Flaw That Drops Emergency Calls Fixed in November Patch
SMS of Death: Google fixed the zero-click Android WAP Push bug in June despite calling it a non-security…
Handy Tech Tools
Quick browser-based utilities. Check IMEI numbers, create Wi-Fi QR codes, decode JWTs, generate hashes, run DNS lookups, and more without installing anything.