DEV Community

Etairos.ai profile picture

Etairos.ai

cybersecurity SIEM AI

Location Nashville, TN Joined Joined on  Email address matt@etairos.ai Personal website https://etairos.ai
k0t Edge Device Campaign Exposes 70,000+ Credentials Through FortiGate and GlobalProtect Appliances
etairos profile

k0t Edge Device Campaign Exposes 70,000+ Credentials Through FortiGate and GlobalProtect Appliances

#cybersecurity #infosec #security
Comments
5 min read
CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python
etairos profile

CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python

#cybersecurity #infosec #security
Comments
6 min read
Eye Security Pushed 2 Million Unrequested Updates to Kill an Abandoned Popcorn Time Updater. It Was the Right Call.
etairos profile

Eye Security Pushed 2 Million Unrequested Updates to Kill an Abandoned Popcorn Time Updater. It Was the Right Call.

#cybersecurity #infosec #security
Comments
6 min read
Leaked LiteLLM Master Key Sat Unrevoked for 136 Days, Then Shipped a Malicious 1.107.0 Release
etairos profile

Leaked LiteLLM Master Key Sat Unrevoked for 136 Days, Then Shipped a Malicious 1.107.0 Release

#cybersecurity #infosec #security
Comments
5 min read
BlackX UEFI Bootkit Revives Baton Drop on Patched Windows Hosts That Skipped DBX Revocation
etairos profile

BlackX UEFI Bootkit Revives Baton Drop on Patched Windows Hosts That Skipped DBX Revocation

#cybersecurity #infosec #security
Comments
5 min read
Sandworm Wiper Attack in Ukraine Used MythicRatatoskr, a New Backdoor With C2 Inside the Yggdrasil Mesh Network
etairos profile

Sandworm Wiper Attack in Ukraine Used MythicRatatoskr, a New Backdoor With C2 Inside the Yggdrasil Mesh Network

#cybersecurity #infosec #security
Comments
5 min read
CVE-2026-110264: Unauthenticated GitLab RCE (CVSS 10.0) Reaches Every Release Since 7.0
etairos profile

CVE-2026-110264: Unauthenticated GitLab RCE (CVSS 10.0) Reaches Every Release Since 7.0

#cybersecurity #infosec #security
Comments
5 min read
Eight eMudhra Intermediate CA Keys Were Computable From Public Certificates: Browsers Blocked Them in Hours, Everything Else Needs Patches
etairos profile

Eight eMudhra Intermediate CA Keys Were Computable From Public Certificates: Browsers Blocked Them in Hours, Everything Else Needs Patches

#cybersecurity #infosec #security
Comments
5 min read
PHP2Shell: Two Critical PHP Runtime Flaws Give Unauthenticated Attackers Code Execution
etairos profile

PHP2Shell: Two Critical PHP Runtime Flaws Give Unauthenticated Attackers Code Execution

#cybersecurity #infosec #security
Comments
5 min read
ClickFix Crew Weaponizes Signed Siemens Software Center Binary to Sideload RAT (CVE-2026-110936)
etairos profile

ClickFix Crew Weaponizes Signed Siemens Software Center Binary to Sideload RAT (CVE-2026-110936)

#cybersecurity #infosec #security
Comments
5 min read
APT28 Breaches NATO Naval Shipbuilder With HOOKEDGE, a Persistent SSH Tunnel and a New Reflective Loader
etairos profile

APT28 Breaches NATO Naval Shipbuilder With HOOKEDGE, a Persistent SSH Tunnel and a New Reflective Loader

#cybersecurity #infosec #security
Comments
5 min read
Rank Math PRO Update Channel Hijacked: 11-Hour Window Delivered a Self-Restoring WordPress Backdoor
etairos profile

Rank Math PRO Update Channel Hijacked: 11-Hour Window Delivered a Self-Restoring WordPress Backdoor

#cybersecurity #infosec #security
Comments
5 min read
China-Nexus Armory Castle Exploited BeyondTrust Remote Support Zero-Day CVE-2026-102764 for Seven Weeks Before Disclosure
etairos profile

China-Nexus Armory Castle Exploited BeyondTrust Remote Support Zero-Day CVE-2026-102764 for Seven Weeks Before Disclosure

#cybersecurity #infosec #security
Comments
5 min read
BAE Systems Incident Takes Down the Federal Bankruptcy Notice System: When the Contractor Is the Court's Single Point of Failure
etairos profile

BAE Systems Incident Takes Down the Federal Bankruptcy Notice System: When the Contractor Is the Court's Single Point of Failure

#cybersecurity #infosec #security
Comments
5 min read
Stolen ConnectWise Cloud Backup Credential Used to Sign In to 173 Microsoft 365 Tenants
etairos profile

Stolen ConnectWise Cloud Backup Credential Used to Sign In to 173 Microsoft 365 Tenants

#cybersecurity #infosec #security
1
Comments 1
5 min read
AOMEI Backupper Update Servers Served a Backdoor in Windows of Five to Ten Minutes
etairos profile

AOMEI Backupper Update Servers Served a Backdoor in Windows of Five to Ten Minutes

#cybersecurity #infosec #security
Comments
5 min read
Armory Castle Exploited BeyondTrust Remote Support Zero-Day CVE-2026-102764 to Seize Appliances and Pivot Downstream
etairos profile

Armory Castle Exploited BeyondTrust Remote Support Zero-Day CVE-2026-102764 to Seize Appliances and Pivot Downstream

#cybersecurity #infosec #security
Comments
5 min read
Candiru Spyware Hit Al Jazeera Through Online Ads Nobody Clicked
etairos profile

Candiru Spyware Hit Al Jazeera Through Online Ads Nobody Clicked

#cybersecurity #infosec #security
Comments
6 min read
The Recorder Behind the TV: What the Alleged OpenAI Insider Bugging Case Teaches Security Leaders
etairos profile

The Recorder Behind the TV: What the Alleged OpenAI Insider Bugging Case Teaches Security Leaders

#cybersecurity #infosec #security
Comments
5 min read
40 Laptop Farms, 70 Victim Companies: The DPRK IT Worker Scheme Ran Through American Living Rooms
etairos profile

40 Laptop Farms, 70 Victim Companies: The DPRK IT Worker Scheme Ran Through American Living Rooms

#cybersecurity #infosec #security
Comments
5 min read
Ledger Finds LTE Seed-Stealing Implant in Wallets Sold by CryptoBilis, $86M Drained
etairos profile

Ledger Finds LTE Seed-Stealing Implant in Wallets Sold by CryptoBilis, $86M Drained

#cybersecurity #infosec #security
Comments
5 min read
Three Ivanti Connect Secure Zero-Days Chained for Unauthenticated Root, One Still Unpatched
etairos profile

Three Ivanti Connect Secure Zero-Days Chained for Unauthenticated Root, One Still Unpatched

#cybersecurity #infosec #security
Comments
4 min read
Attackers Remotely Defrost Refrigerators at Up to 350 French Supermarkets via Danfoss Controllers
etairos profile

Attackers Remotely Defrost Refrigerators at Up to 350 French Supermarkets via Danfoss Controllers

#cybersecurity #infosec #security
Comments
5 min read
The Negotiator in Custody: FBI Arrests Ransomware Negotiation Executive in ShinyHunters Probe
etairos profile

The Negotiator in Custody: FBI Arrests Ransomware Negotiation Executive in ShinyHunters Probe

#cybersecurity #infosec #security
Comments
5 min read
GhostAction Returns: Fake Security Audit Workflow Steals Secrets From Tens of Thousands of GitHub Repositories
etairos profile

GhostAction Returns: Fake Security Audit Workflow Steals Secrets From Tens of Thousands of GitHub Repositories

#cybersecurity #infosec #security
Comments
5 min read
FBI Seizes 7 Domains Tied to Flax Typhoon Scanning of Critical Infrastructure
etairos profile

FBI Seizes 7 Domains Tied to Flax Typhoon Scanning of Critical Infrastructure

#cybersecurity #infosec #security
Comments
5 min read
China-Aligned TA419 Targets U.S. AI Policy Experts With Frameless BitB Microsoft AitM Phishing
etairos profile

China-Aligned TA419 Targets U.S. AI Policy Experts With Frameless BitB Microsoft AitM Phishing

#cybersecurity #infosec #security
Comments
5 min read
Rey Reportedly Detained in Jordan: ShinyHunters Loses an Insider, Not Its Business Model
etairos profile

Rey Reportedly Detained in Jordan: ShinyHunters Loses an Insider, Not Its Business Model

#cybersecurity #infosec #security
Comments
5 min read
A 16-Year-Old Allegedly Ran KillSec: What the Takedown Tells Defenders
etairos profile

A 16-Year-Old Allegedly Ran KillSec: What the Takedown Tells Defenders

#cybersecurity #infosec #security
Comments
5 min read
Warlock Ransomware Uses Year-Old SharePoint ToolShell Flaws Against a Water Utility and a Telecom
etairos profile

Warlock Ransomware Uses Year-Old SharePoint ToolShell Flaws Against a Water Utility and a Telecom

#cybersecurity #infosec #security
Comments
5 min read
FortiMail Zero-Day CVE-2026-104286 Exploited Before Any Patch Ships
etairos profile

FortiMail Zero-Day CVE-2026-104286 Exploited Before Any Patch Ships

#cybersecurity #infosec #security
Comments
5 min read
Cisco SD-WAN Manager Zero-Day CVE-2026-76504 Grants Unauthenticated Admin API Access
etairos profile

Cisco SD-WAN Manager Zero-Day CVE-2026-76504 Grants Unauthenticated Admin API Access

#cybersecurity #infosec #security
Comments
5 min read
Star Blizzard Hits 100+ Organizations With Fake Event Invites Delivering CosmicPulse Backdoor
etairos profile

Star Blizzard Hits 100+ Organizations With Fake Event Invites Delivering CosmicPulse Backdoor

#cybersecurity #infosec #security
Comments
5 min read
Stolen Passwords, No Alarms: How France's Tax Agency Lost Data on 600,000 Taxpayers and Businesses
etairos profile

Stolen Passwords, No Alarms: How France's Tax Agency Lost Data on 600,000 Taxpayers and Businesses

#cybersecurity #infosec #security
Comments
5 min read
Keio Ransomware Attack Hits Hotel and Payment Systems at Tokyo Rail Operator
etairos profile

Keio Ransomware Attack Hits Hotel and Payment Systems at Tokyo Rail Operator

#cybersecurity #infosec #security
Comments
5 min read
A 'Reformed' Hacker's Arrest, and the ShinyHunters Rampage That Followed
etairos profile

A 'Reformed' Hacker's Arrest, and the ShinyHunters Rampage That Followed

#cybersecurity #infosec #security
Comments
5 min read
Russia's Hybrid War on Europe: Water, Energy and Drones Now Share One Playbook
etairos profile

Russia's Hybrid War on Europe: Water, Energy and Drones Now Share One Playbook

#cybersecurity #infosec #security
Comments
4 min read
Two Unpatched Citrix NetScaler RCE Zero-Days Exploited in the Wild: No Patch, No IoCs, No Bulletin
etairos profile

Two Unpatched Citrix NetScaler RCE Zero-Days Exploited in the Wild: No Patch, No IoCs, No Bulletin

#cybersecurity #infosec #security
Comments
5 min read
WordPress CVE-2026-87902 Exploited the Same Day It Was Patched: pearcmd.php Turned Into a Web Shell Dropper
etairos profile

WordPress CVE-2026-87902 Exploited the Same Day It Was Patched: pearcmd.php Turned Into a Web Shell Dropper

#cybersecurity #infosec #security
Comments
4 min read
Kiteworks Tells Customers to Go Dark for 9 Hours on a Federal Tip
etairos profile

Kiteworks Tells Customers to Go Dark for 9 Hours on a Federal Tip

#cybersecurity #infosec #security
Comments
5 min read
Roundcube CVE-2026-48842: Pre-Auth SQL Injection in virtuser_query Now Exploited
etairos profile

Roundcube CVE-2026-48842: Pre-Auth SQL Injection in virtuser_query Now Exploited

#cybersecurity #infosec #security
Comments
4 min read
Bitget Loses $351.6M After Attackers Spoof the Data Its Own Approval Process Trusted
etairos profile

Bitget Loses $351.6M After Attackers Spoof the Data Its Own Approval Process Trusted

#cybersecurity #infosec #security
Comments
5 min read
ShinyHunters Claims FBI Breach: An Extortion Crew Attacks the Agency That Told Victims Not to Pay
etairos profile

ShinyHunters Claims FBI Breach: An Extortion Crew Attacks the Agency That Told Victims Not to Pay

#cybersecurity #infosec #security
Comments
5 min read
F5 BIG-IP APM OAuth Servers Under Active Attack: CVE-2026-94127 Gives Unauthenticated RCE
etairos profile

F5 BIG-IP APM OAuth Servers Under Active Attack: CVE-2026-94127 Gives Unauthenticated RCE

#cybersecurity #infosec #security
Comments
5 min read
Check Point Management Server Zero-Day: 61 Days From Exploit to Fix
etairos profile

Check Point Management Server Zero-Day: 61 Days From Exploit to Fix

#cybersecurity #infosec #security
Comments
5 min read
Fake LastPass Authenticator Installs a Microsoft-Signed Driver That Kills 145 Security Tools
etairos profile

Fake LastPass Authenticator Installs a Microsoft-Signed Driver That Kills 145 Security Tools

#cybersecurity #infosec #security
Comments
5 min read
Click2Shell: One Admin Click Runs PHP on Any WordPress Before 7.1.1
etairos profile

Click2Shell: One Admin Click Runs PHP on Any WordPress Before 7.1.1

#cybersecurity #infosec #security
Comments
5 min read
WaterPlum's Fake Job Interviews Hit 30,000 Devices in 100 Countries
etairos profile

WaterPlum's Fake Job Interviews Hit 30,000 Devices in 100 Countries

#cybersecurity #infosec #security
Comments
5 min read
CISA Puts Three Linux Kernel Flaws on KEV, Federal Agencies Get Two Days to Patch
etairos profile

CISA Puts Three Linux Kernel Flaws on KEV, Federal Agencies Get Two Days to Patch

#cybersecurity #infosec #security
Comments
5 min read
ShinyHunters Rooted Clop's Leak Site Through Grav CMS, and Now Wants to Extort the Extortionists
etairos profile

ShinyHunters Rooted Clop's Leak Site Through Grav CMS, and Now Wants to Extort the Extortionists

#cybersecurity #infosec #security
Comments
5 min read
Cisco ISE Zero-Day CVE-2026-76460 Hands Attackers Root on Your Network Policy Engine
etairos profile

Cisco ISE Zero-Day CVE-2026-76460 Hands Attackers Root on Your Network Policy Engine

#cybersecurity #infosec #security
Comments
5 min read
Iran's MOIS Runs Its Spyware Through a Telegram Bot, One Bot Per Victim
etairos profile

Iran's MOIS Runs Its Spyware Through a Telegram Bot, One Bot Per Victim

#cybersecurity #infosec #security
Comments
5 min read
Cisco Secure Email Gateway: One Crafted Email Gives Root, and It Is Already Being Exploited
etairos profile

Cisco Secure Email Gateway: One Crafted Email Gives Root, and It Is Already Being Exploited

#cybersecurity #infosec #security
Comments
4 min read
DDRop: A $200 Board Breaks Intel TDX and AMD SEV-SNP by Deleting Writes
etairos profile

DDRop: A $200 Board Breaks Intel TDX and AMD SEV-SNP by Deleting Writes

#cybersecurity #infosec #security
Comments
5 min read
Three Artifactory Auth Bypasses Chained: Anonymous Token to Admin in Under Five Minutes
etairos profile

Three Artifactory Auth Bypasses Chained: Anonymous Token to Admin in Under Five Minutes

#cybersecurity #infosec #security
Comments
5 min read
Microsoft: Passkey Help Desk Calls Are Hijacking Cloud Accounts, Then Draining SharePoint
etairos profile

Microsoft: Passkey Help Desk Calls Are Hijacking Cloud Accounts, Then Draining SharePoint

#cybersecurity #infosec #security
Comments
6 min read
GitLab CVE-2026-85706: A CVSS 10.0 Pre-Auth File Read With a Three Day Patch Window
etairos profile

GitLab CVE-2026-85706: A CVSS 10.0 Pre-Auth File Read With a Three Day Patch Window

#cybersecurity #infosec #security
Comments
5 min read
Microsoft Patches 974 Flaws in One Day, Two Windows Zero-Days Already Exploited
etairos profile

Microsoft Patches 974 Flaws in One Day, Two Windows Zero-Days Already Exploited

#cybersecurity #infosec #security
Comments
5 min read
Attackers Chain Two JFrog Artifactory Flaws to Mint Admin Tokens and Plant Rust Backdoors
etairos profile

Attackers Chain Two JFrog Artifactory Flaws to Mint Admin Tokens and Plant Rust Backdoors

#cybersecurity #infosec #security
Comments
5 min read
Four Espionage Groups Adopted the Same Chrome and Windows Exploit Kit in Six Days
etairos profile

Four Espionage Groups Adopted the Same Chrome and Windows Exploit Kit in Six Days

#cybersecurity #infosec #security
Comments
5 min read
loading...