Office Party: Vulnerability in Anthropic’s Office Skills

, , ,

Researchers found a vulnerability in Anthropic’s official DOCX, PPTX, and XLSX AI skills that allows malicious code execution on Linux machines by exploiting a fixed, unverified file path used to preload a shared library. This flaw lets an attacker plant a malicious library in a shared temp directory, which the skills then load via LD_PRELOAD when running LibreOffice, executing attacker code with user privileges. Despite reporting the issue to Anthropic, the vendor has not changed the vulnerable code, highlighting that even trusted official AI skills can pose security risks and require continuous scrutiny and validation.

https://www.air.security/blog-posts/office-party

Vulnerability That Lets Hackers SSH Into Linux Devices Is Under Active Exploitation

, ,

A critical vulnerability known as *sshole allows attackers to gain unauthenticated privileged SSH access to Linux systems that use OpenSSH with the musl library under specific configurations. Exploited actively by threat group GT10, the flaw enables rapid intrusion and installation of a backdoor called TAC Agent, facilitating system control and persistence. OpenSSH has released a fix, and users are urged to update promptly to prevent further compromise.

https://arstechnica.com/security/2026/11/vulnerability-that-lets-hackers-ssh-into-linux-devices-is-under-active-exploitation/

Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion

, ,

Microsoft patched a remote code execution vulnerability (CVE-2026-83844) in Windows Paint that allowed local attackers to execute code with user interaction. Despite Microsoft disclosing the flaw in mid-October, confusion arose over the availability and details of the fix, which was ultimately deployed via the Microsoft Store in early November. The vulnerability carries a high severity score but requires local access and user action, with no known exploitation reports to date.

https://www.darkreading.com/application-security/microsoft-rce-bug-windows-paint-confusion

Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

, , ,

Hackers began exploiting a recently disclosed high-severity OpenSSH vulnerability (CVE-2026-123158, “SSHole”) within hours of its publication, targeting Linux systems running OpenSSH on musl libc with PAM disabled, such as Alpine Linux. The flaw allows unauthenticated attackers to bypass password authentication on accounts configured without passwords by sending oversized passwords, granting access with the compromised account’s existing privileges, including root access, as confirmed by successful exploitation on a honeypot. Users are urged to update to OpenSSH 10.6p2 and review login logs for unusual password acceptance on accounts meant to be passwordless.

https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html

Claude Code’s “Don’t Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

, , , ,

Anthropic’s AI coding assistant Claude Code saves approved shell commands, including embedded passwords and API keys, in a project’s .claude/settings.local.json file, which has been found exposed in 1,122 public GitHub repositories. Security researchers from Apiiro identified 1,379 different secrets in these files, including database passwords, SSH logins, and cloud service keys, often remaining accessible in git history and forks for over 200 days. Developers are advised to rotate all exposed credentials, remove the files from version control, and avoid embedding secrets directly in commands to prevent such leaks.

https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html

Microsoft Paint RCE Fix Now Available, but Windows Update Won’t Deliver It

, ,

Microsoft has released a fix for CVE-2026-83844, a remote code execution vulnerability in Windows Paint, available exclusively through a Microsoft Store update rather than Windows Update. The patched version is 11.2609.401.0, but many systems may still run older versions, requiring administrators to verify and update each user’s Paint installation via PowerShell commands. Microsoft rates the flaw as important with a CVSS score of 8.1, noting exploitation requires specialized knowledge, and no exploitation has been reported to date.

https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html

So My ISP Was Hijacking My DNS

, , ,

Karthikey Hegde discovered his ISP was hijacking his DNS queries by returning tampered IP addresses, which he verified by comparing plaintext DNS responses with encrypted DNS over HTTPS (DoH). He explains that while running a local DNS resolver like Unbound provides some control, traditional DNS queries remain unencrypted and vulnerable to ISP tampering unless forwarded over encrypted channels like DNS over TLS (DoT) or DoH. He also clarifies that DNSSEC verifies authenticity but does not encrypt traffic, so ISPs can still observe or manipulate DNS requests unless encrypted transport or VPNs are used.

https://www.karthihegde.dev/posts/dns_tampering

Bug Report: Privacy Violation in User-Agent Header · Issue #107757 · Anthropics/claude-Code

, , ,

A security bug report in the anthropics/claude-code repository highlights that the software disclosed users’ email addresses in the User-Agent HTTP header during web searches without consent, leading to privacy violations and increased scam emails. Users noted this behavior persists despite the introduction of a built-in privacy plugin in recent versions; concerns remain about the inclusion of identifiable session data in requests generated by Claude. Contributors recommend removing personal information from User-Agent headers by default to prevent unintentional data exposure to third parties.

https://github.com/anthropics/claude-code/issues/107757

Do the Math: How We Took Over ChatGPT Accounts

, , ,

In October 2026, researchers discovered a critical vulnerability in ChatGPT’s public share feature that allowed attacker-controlled JavaScript to run inside a victim’s authenticated session simply by opening a shared link. By exploiting an unverified postMessage listener in MathLive and bypassing Content Security Policy via YouTube’s JSONP endpoint, the attack executed unsandboxed scripts with full chatgpt.com privileges, enabling enumeration and exfiltration of private conversations and complete account takeover. OpenAI fixed the flaw on October 26 by blocking unauthorized cross-frame messages and updating frontend protections, highlighting the importance of end-to-end verification in sandboxed environments and cross-feature security.

https://www.parameter.ai/labs/we-found-a-gap-at-openai

ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data Exfiltration

, ,

Check Point Research discovered a vulnerability in ChatGPT’s recently introduced Lockdown Mode that allowed attackers to bypass its core protections, enabling silent exfiltration of chat data, phishing via spoofed application windows, and malware delivery. The flaw exploited permissive sandbox iframe permissions to open pop-ups outside the sandbox, facilitating covert data theft and social engineering attacks, including zero-click exploitation in the ChatGPT Classic app. OpenAI fixed the issue by removing risky permissions from the HTML-preview sandbox iframe, closing the attack vector.

https://research.checkpoint.com/2026/chatgpt-lockdown-mode-bypass-phishing-malware-delivery-and-silent-data-exfiltration/

Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit

, ,

Cybersecurity researchers from Check Point Research have revealed a prompt adware named Haiou embedded within an OpenAI Codex jailbreak toolkit that modifies the AI agent’s instruction set to inject persistent advertisements for a third-party AI gateway. This prompt adware bypasses traditional payload detection by altering natural language prompts and global configurations, potentially facilitating supply chain attacks and undermining trust in AI agent behavior, especially as such agents grow more integrated into enterprise environments.

https://thehackernews.com/2026/11/researchers-uncover-prompt-adware.html

Google Calendar Phishing Campaign Hijacks Sessions, Bypasses MFA

, , ,

Since August 2026, a phishing campaign dubbed Operation CloudFire has targeted corporate Google users by sending Google Calendar invites that lead to a live reverse proxy capturing real-time Google sessions, effectively bypassing multi-factor authentication. The attackers used multiple layers, including Google redirectors and Cloudflare challenges, to evade detection and leveraged compromised sender addresses to enhance credibility, while Material Security’s team tracked and disrupted the infrastructure by taking down hundreds of domains. Although the campaign appears to have paused, analysts warn the operator has prepared variants for Microsoft 365, signaling potential future threats using similar tactics.

https://www.bleepingcomputer.com/news/security/google-calendar-phishing-campaign-hijacks-sessions-bypasses-mfa/

Hackers Use N-Day Exploits in Zero-Click Attacks on iOS, Android Devices

, , , ,

APT29, a Russian threat group, has conducted a large-scale watering hole campaign targeting iOS and Android users through compromised legitimate and fake websites to deploy platform-specific n-day zero-click exploits. These exploits, including several zero-days patched by Apple and Google, allowed attackers to steal cookies, messaging app databases, credentials, and other sensitive information without user interaction. Security researchers recommend users apply the latest security updates to protect their devices from these ongoing attacks.

https://www.bleepingcomputer.com/news/security/hackers-use-n-day-exploits-in-zero-click-attacks-on-ios-android-devices/

Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

, ,

Google released patches in its November 2026 Android security bulletin fixing a critical vulnerability (CVE-2026-58868) affecting Android 14 through 17 that could allow remote code execution without user interaction via a heap buffer overflow. The update also addresses other critical flaws, including a remote denial-of-service issue in Android’s SMS handling, urging users to install the November security patch (2026-11-01 or later) as soon as possible, though no active exploitations have been reported so far.

https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html

CWP2Shell: The Login Page That Never Says No

, ,

VulnCheck disclosed ten critical vulnerabilities in Control Web Panel (CWP), including an unauthenticated remote code execution (CVE-2026-73695) via a module path traversal combined with a missing exit() after a login redirect that allows execution of attacker-controlled PHP modules. This initial foothold lets attackers escalate to root through unauthenticated command injection and SQL injection flaws in the loopback user API, enabling full root access on affected servers; all issues are fixed in CWP 1.29 (October 31, 2026). Given tens of thousands of internet-facing installations expose the vulnerable user panel, operators must upgrade immediately to mitigate high-severity exploit paths actively demonstrated with public exploit tooling.

https://www.vulncheck.com/blog/control-web-panel-pre-auth-module-dispatch-rce

Scroll to Top