MetaMask Is Exiting Ethereum Validators Without Defining the Incident’s Scope
MetaMask reports no immediate wallet threat. Our analysis separates the validator response from the still-unknown infrastructure scope.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Australia’s December Privacy Rule Can Apply Even When a Human Makes the Decision
Australia’s privacy regulator has explained a 10 December disclosure duty for software-assisted decisions that significantly affect people. Human review and third-party tools do not automatically remove a decision from scope.
A GitPython Commit Could Run an Attacker’s Tracked Hook
GitPython 3.1.60 fixes a repository discovery flaw.
Next.js Patched Seven Security Flaws, but the Critical One Is Still Missing
Next.js 16.3.8 fixes seven security flaws, but the announced critical fix remains pending. The 15.5.27 release has a narrower list, with one branch-scope conflict.
RedFlick Gives Star Blizzard a Shorter Route From Phishing to Persistence
Star Blizzard’s RedFlick campaigns turn an email reply into a path toward a protected archive. Defenders need to distinguish mail exposure from endpoint execution.
wolfSSL 5.9.4 Puts Trust State on the Patch Checklist
The 11 fixes in wolfSSL 5.9.4 need an application-level exposure check. Long-lived certificate and session state also belongs in the change plan.
TeamViewer Fixed a Flaw That Could Override Your Session Permissions
TeamViewer fixed five client and host vulnerabilities. The lead flaw could let a remote session bypass permissions the user had explicitly denied.
One Encoded URL Can Hand Attackers Cisco SD-WAN Admin Access
Cisco says attackers are exploiting a critical SD-WAN Manager flaw that turns one encoded HTTP request into administrator-level API access.
Two LightLLM Helper Ports Expose Code Execution on Inference Nodes
Two LightLLM helper services can accept unsafe network input outside the model API. Check multimodal and profiling nodes, their live ports and their network boundaries.
The VPN Server Your Firebox Trusts Could Hand It Root Commands
WatchGuard fixed 15 Fireware vulnerabilities, including a root-command path through a hostile BOVPN over TLS server and adjacent-network code execution.