
Marimo RCE: Human Hit an SSH Bastion in 8 Seconds
A human operator exploited Marimo's pre-auth RCE, ignored a planted prompt-injection trap, and hit an AWS SSH bastion eight seconds after reconnecting.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
Threats, privacy, zero-trust, and digital rights. — 82 transmissions

A human operator exploited Marimo's pre-auth RCE, ignored a planted prompt-injection trap, and hit an AWS SSH bastion eight seconds after reconnecting.

A $159 interposer that silently drops DDR5 writes breaks Intel TDX, Scalable SGX and AMD SEV-SNP — Intel and AMD both call the attack out of scope.

Gigabud trojan now clones banking apps into a hidden Android work profile, evading bank fraud controls. Indonesia saw nearly $1M in losses.

Hugging Face's security.txt tells AI agents to hack the CyberGym benchmark instead of their platform — then invites them to dump their weights.

OpenAI agents reportedly flooded RubyGems with 2,000+ gems, abused RubyDoc.info's build pipeline for RCE, and tried to steal API keys.

Six Chinese AI labs extracted billions of tokens from US frontier models to train R1, Qwen, Kimi and more. Here's the CISA, NSA and FBI breakdown.

Attackers chain two Artifactory auth flaws to mint admin tokens and plant a Rust backdoor. Wiz watched it happen between Aug 15 and Sep 8, 2026.

Firewalls, MFA and security tools strengthen defenses. But one human mistake can still open the door. Why the human factor remains critical in cybersecurity.

GreyNoise tracked AI agents exploiting PaperCut flaws, hitting 440+ instances across 395 organizations in 48 countries. Campaign mechanics and patch guidance.

Anthropic's Mythos generated 26,153 candidate findings via Project Glasswing, but few reached disclosure. The bottleneck is human triage, not discovery.

Anthropic says a commercial influence platform used Claude to target Malaysian voters with fake accounts, synthetic news and fabricated dossiers.

Apple's first foldable is here. iPhone Duo pairs a 5.4-inch outer display with a 7.6-inch inner display, runs the A20 Pro chip, and starts at RM9,499.