A security flaw in Tailscale SSH identified as TS-2026-009 enables root access through insecure argument handling, raising concerns for affected users.
TS-2026-009: Insecure argument handling in Tailscale SSH permitted root access
Browsing Category
Security & Compliance
129 posts
Cursor 0day: When Full Disclosure Becomes the Only Protection Left
A newly discovered Cursor 0day vulnerability highlights the risks of full disclosure, raising questions about cybersecurity transparency and protection strategies.
Vancouver PD website features Quick Escape button that wipes itself from history
Vancouver Police Department website now features a Quick Escape button that deletes its browsing history, raising privacy and safety concerns.
European “Age Verification” “App” Forcing Everyone To Use Android Or iOS
A new European age verification app restricts users to Android and iOS platforms, raising concerns over accessibility and privacy. Details are still emerging.
CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability Actively Exploited (CISA KEV)
Security researchers confirm active exploitation of SonicWall SMA1000 appliances’ code injection vulnerability, CVE-2026-15410, posing critical risks to users.
Cursor 0Day: When Full Disclosure Becomes The Only Protection Left
A new zero-day vulnerability in Cursor software prompts urgent full disclosure, raising concerns about security and responsible disclosure practices.
How The FSF Sysadmins Block Botnets With Reaction
Free Software Foundation sysadmins are implementing real-time measures to block botnets, enhancing security and disrupting malicious networks.
LAPD Lets Contract With Surveillance Giant Flock Expire
Los Angeles Police Department has let its surveillance contract with Flock expire, ending a partnership involving widespread license plate recognition technology.
Wikipedia Escapes Category 1 Designation Under The UK Online Safety Act For Now
Wikipedia has temporarily avoided classification as a Category 1 platform under the UK Online Safety Act, pending further review. Details remain ongoing.
GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years
A critical use-after-free vulnerability called GhostLock has existed in all Linux distributions for 15 years, posing potential security risks.
