Security Updates
Latest Threat Alerts
Live FeedUnpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published...
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vul...
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal i...
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicff...
About this feed. These alerts are gathered automatically from public sources and updated hourly, and are provided as general information only. We make no warranty, express or implied, as to their accuracy or completeness, and nothing here is professional or security advice. Each headline links to the original report and all content remains the property of its source. Alerts and advisories from the Australian Signals Directorate are © Commonwealth of Australia, reused under a Creative Commons Attribution 4.0 International licence. The sources shown are independent, and their inclusion here does not imply they endorse this feed or our services.