Four Payloads, One Intrusion Pattern
Follow the behaviour before encryption.
Slack Replies Need a Named Initiator
Verify who authorised the message.
An Untrusted App Turned Calendar Data Into Commands
Hosted content still needs a trustworthy interpreter.
An Open Docker Port Gave Attackers Their Own AI Operator
The AI agent is not the entry point. An unauthenticated Docker API is, and Carbonato turns it into privileged host access and automated post-compromise work.
SolarWinds’ Patch Still Needs a Player Check
A server upgrade cannot certify every remote component.
An Email Address Can Carry Repository Authority
Inventory hidden authority.
Miljödata’s Fine Leaves Questions for Its Customers
Require evidence behind supplier assurances.
Roundcube’s Fix Predated the Attack Warning
Keep the patch receipt and the investigation record separate.
Resetting Passwords Leaves This Trap Intact
Establish its ownership.
Bitget’s Wallet Server Served the Attacker
Check transaction authority.
BragJack Turned Extension Access into AI Agent Commands
An installed malicious extension crossed trusted browser-agent channels in five research demonstrations. The permissions, exposed capabilities and fixes differed by product.
Webform Can Turn Stored Data Into Executable Logic
Inspect display settings and verify the installed fix.