![[tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards](https://image.cybernoz.com/wp-content/uploads/2026/09/tldr-sec-346-Can-AI-Do-Novel-Security-Research-600x340.png)
[tl;dr sec] #351 – PHP2Shell, Autopatching Skills, AWS Pathrunner
PHP2Shell This week PHP2Shell became public: an unauthenticated remote code execution vulnerability affecting the past 13 years of PHP. I’ve been a part of a…
Year: 2026
Singapore pushes for quick action on PHP security flaws as hackers prowl
The flaws in PHP, which powers many websites and online services, could allow attackers to take control of web servers, steal data or disrupt services…
LiteLLM release pipeline hacked to distribute credential-stealing malware
According to cybersecurity firm Aikido, files bundled with the compromised package executed automatically when Python started, even if an application did not import LiteLLM. The…
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Unknown hackers hijacked more than 300 Tor exit nodes and reconfigured them to favor unencrypted email traffic and redirect SSH connections through servers they controlled,…
Black Kite debuts Quantum Readiness controls to assess post-quantum security across vendor ecosystems
Black Kite, provider of third-party cyber risk management solutions, announced the release of Quantum Readiness, a new set of controls within the SSL/TLS Strength category…
SafePay ransomware compromised 600 critical organizations worldwide; urge patching and network defenses
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), the U.S. Secret Service (USSS), and international partners warned that SafePay,…
Microsoft April 2023 Patch Tuesday Highlights: everything you need to know
Among the 97 vulnerabilities patched by Microsoft this Patch Tuesday, two vulnerabilities caught our attention. Learn how to detect and mitigate CVE-2023-28252, an elevation of…
To octopi, or not to octopi.
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and…
GitLab warns of new max severity code execution vulnerability
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. This security…
North Korean Hackers Use Post-Quantum Encryption to Hide New Malware From Security Tools
North Korean-linked Lazarus hackers are using post-quantum cryptography in a malware delivery chain designed to conceal later-stage payloads from security tools. The technique appeared in…
Keeper Security Launches AI-Powered Phishing Protection to Block Credential Theft
Keeper Security has introduced a new AI-powered phishing protection feature designed to prevent users from entering their credentials on fraudulent websites. Available through the Keeper…
Scammers Exploit Dell and Staples Order Emails to Bypass Traditional Phishing Detection
Scammers are abusing legitimate Dell and Staples order notifications to deliver callback phishing lures, embedding fraudulent helpline numbers inside transactional emails that pass authentication checks.…