https://sesamedisk.com/category/cybersecurity/ Articles about Cybersecurity from Sesame Disk. en-us https://sesamedisk.com/openssh-musl-star-password-bypass/ A * in /etc/shadow is supposed to mean no password can log in. On musl-based OpenSSH without PAM, it became the password. Here is what happened, who is affected, and how to close it. Thu, 05 Nov 2026 14:01:15 +0000 https://sesamedisk.com/openssh-musl-star-password-bypass/ Cybersecurity https://sesamedisk.com/cloudflare-security-audit-skill/ Cloudflare open-sourced the skill behind its vulnerability harness. It is a disciplined audit workflow, not a scanner, and its limits matter as much as its prompts. Thu, 05 Nov 2026 05:47:56 +0000 https://sesamedisk.com/cloudflare-security-audit-skill/ AI & Emerging Technology Cybersecurity https://sesamedisk.com/whatsapp-malware-work-files/ Malaysia is a visible target in a global WhatsApp campaign that hides malware in invoices, statements, and salary files. Here is what the advisories show, and what to do. Thu, 05 Nov 2026 05:44:40 +0000 https://sesamedisk.com/whatsapp-malware-work-files/ AI & Emerging Technology Cybersecurity https://sesamedisk.com/openai-948-linux-root-exploits/ OpenAI says its pipeline found and patched hundreds of Linux privilege-escalation bugs. The 948 count, the novel techniques, and the cost are unverified, so treat them as alleged. Thu, 05 Nov 2026 05:37:03 +0000 https://sesamedisk.com/openai-948-linux-root-exploits/ AI & Emerging Technology Cybersecurity https://sesamedisk.com/fake-ai-agent-repos-smartloader/ A 73-repo cluster shows the README, not the skill manifest, is now the infection path. 51 repos were still live in a Nov. 4 snapshot. Thu, 05 Nov 2026 03:41:03 +0000 https://sesamedisk.com/fake-ai-agent-repos-smartloader/ AI & Emerging Technology Cybersecurity https://sesamedisk.com/ai-security-review-terra-carbon/ OpenAI’s GPT-6.1 Terra is rated Critical for cybersecurity. Google’s Gemini 4 Carbon finds and patches bugs. Here’s what changes for developers. Thu, 05 Nov 2026 02:00:05 +0000 https://sesamedisk.com/ai-security-review-terra-carbon/ Cloud & Business Technology Cybersecurity https://sesamedisk.com/french-blood-bank-freezers-cyberattack/ Hackers raised temperature settings on plasma freezers at three French blood bank sites. No blood products were lost, but the attack exposes OT risk. Wed, 04 Nov 2026 13:34:04 +0000 https://sesamedisk.com/french-blood-bank-freezers-cyberattack/ Cloud & Business Technology Cybersecurity https://sesamedisk.com/gitbook-breach-api-token-rotations/ GitBook says AI agents helped attackers reach infrastructure credentials. It revoked customer API tokens and told users to rotate integration secrets. Wed, 04 Nov 2026 13:30:45 +0000 https://sesamedisk.com/gitbook-breach-api-token-rotations/ Cloud & Business Technology Cybersecurity https://sesamedisk.com/postman-silently-auto-installs-ai-plugins/ Postman desktop silently auto-installs Codex and Claude plugins into user scope, approves its own startup hook, and publishes API activity by default. Tue, 03 Nov 2026 21:12:06 +0000 https://sesamedisk.com/postman-silently-auto-installs-ai-plugins/ Cybersecurity Data Security & Compliance Sotfware & DevOps https://sesamedisk.com/mobile-device-management-for-byod-audits/ A practical guide to mobile device management for BYOD security audits, covering enrollment models, framework mapping, evidence sets, and platform trade-offs. Tue, 03 Nov 2026 15:12:00 +0000 https://sesamedisk.com/mobile-device-management-for-byod-audits/ Cloud & Business Technology Cybersecurity Data Security & Compliance Device Management Strategies https://sesamedisk.com/lawyers-sanctioned-for-ai-prompt-injection/ Brazilian courts fined lawyers for hiding AI prompt injection commands in court filings, and referred them to the OAB for disciplinary action. Sun, 01 Nov 2026 14:35:41 +0000 https://sesamedisk.com/lawyers-sanctioned-for-ai-prompt-injection/ AI & Emerging Technology Cybersecurity Legal System & AI Impact https://sesamedisk.com/jdk-certificate-flaw-patch-java-now/ Stop trusting compromised eMudhra roots in container images. Extract cacerts from your JDK base image, delete the aliases, rebuild, and verify. Sun, 01 Nov 2026 14:05:11 +0000 https://sesamedisk.com/jdk-certificate-flaw-patch-java-now/ Cybersecurity DevOps & Cloud Infrastructure Sotfware & DevOps https://sesamedisk.com/scribd-breach-user-data-exposed/ Scribd’s breach notice itemizes emails, card last four digits, issuer, expiry and payment history, but no passwords. Here is what that gap means for users. Sat, 31 Oct 2026 08:10:23 +0000 https://sesamedisk.com/scribd-breach-user-data-exposed/ Cybersecurity Cybersecurity Incidents Data Security & Compliance https://sesamedisk.com/muse-ai-share-links-expose-business-secrets/ Meta paused Muse AI chat sharing after researchers found 6,800+ discoverable links leaking internal documents, a marketing company’s revenue review marked for its CEO, and loan files via passive DNS. Sat, 31 Oct 2026 00:07:23 +0000 https://sesamedisk.com/muse-ai-share-links-expose-business-secrets/ AI & Business Technology Cybersecurity Cybersecurity Incidents Data Security & Compliance https://sesamedisk.com/google-app-password-phishing-scam/ A real Google alert can carry an attacker-supplied message. Here is how recovery addresses and app-password labels turn Google’s own notifications into phishing lures. Fri, 30 Oct 2026 08:23:28 +0000 https://sesamedisk.com/google-app-password-phishing-scam/ Cybersecurity Cybersecurity Incidents https://sesamedisk.com/vmware-esx-logging-flaw-zero-day/ CISA added CVE-2026-41709 to KEV after CrowdStrike tied the ESX logging bypass to WARP PANDA zero-day use. What the 2.7 flaw does, what it does not, and how to patch. Fri, 30 Oct 2026 06:20:19 +0000 https://sesamedisk.com/vmware-esx-logging-flaw-zero-day/ Cybersecurity Cybersecurity Incidents https://sesamedisk.com/claude-code-extension-ssh-backdoor/ A malicious 2.1.313 build on Open VSX added an SSH key, opened a reverse tunnel, and set persistence. Here is what is confirmed and what is not. Fri, 30 Oct 2026 05:13:25 +0000 https://sesamedisk.com/claude-code-extension-ssh-backdoor/ AI & Emerging Technology Cybersecurity https://sesamedisk.com/polymarket-supply-chain-drain/ A compromised third-party script drained about $2.7 million from hundreds of Polymarket accounts. Here’s how it worked and what it means for prediction markets. Fri, 30 Oct 2026 02:50:48 +0000 https://sesamedisk.com/polymarket-supply-chain-drain/ Cybersecurity Tech Markets https://sesamedisk.com/binance-hot-wallet-breach-what-we-know/ Binance suspended deposits and withdrawals after a suspected hot-wallet breach. Here’s what is confirmed, what remains an estimate, and what users should watch. Fri, 30 Oct 2026 02:50:46 +0000 https://sesamedisk.com/binance-hot-wallet-breach-what-we-know/ Cybersecurity Tech Markets https://sesamedisk.com/wordpress-7-1-4-security-flaws/ WordPress 7.1.4 fixes 22 security issues, including a core-update race condition and several stored XSS bugs. Here is who needs it and how to update. Wed, 28 Oct 2026 22:23:26 +0000 https://sesamedisk.com/wordpress-7-1-4-security-flaws/ Cybersecurity