ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

Dark ReadingPublished 2026-10-09 14:58 UTC

The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications.

— Dark Reading

Read at Dark Reading

Three fired OpenAI safety researchers dispute the company’s misconduct claims

Three former OpenAI safety researchers dispute the company’s claim that they mishandled sensitive information, saying they were dismissed for prioritising safety. In an open letter, they warn the firings may have a chilling effect on employees and AI safety culture.

55 minutes ago

Image: The Hacker News
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
The Hacker NewsCybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star…
2 hours ago
Image: The Hacker News
Attackers exploit unpatched AhsayCBS flaws to deploy webshells and cryptocurrency miners
Attackers are exploiting vulnerabilities in the AhsayCBS backup platform, deploying webshells and cryptocurrency miners. Sources describe the flaws as unpatched; one reports that they enable authentication bypass and OS command injection.
4 hours ago