A security researcher reported that attackers compromised a Tor management server in late August using a reused password, then installed the Ebury Linux backdoor and gained control of a second server called Switzerland2. From there they reconfigured 333 exit relays between October 2 and 5 to redirect SSH traffic to attacker-controlled servers and block ports used for encrypted email while leaving unencrypted email ports open.
arstechnica.com
· 2026-10-22
A security researcher discovered that 333 Tor exit relays—about 10% of the network—had been infected since August with the Ebury SSH backdoor and were coordinating a man-in-the-middle attack on SSH connections starting October 2. The compromised nodes redirected SSH traffic to 12 interception servers that stole passwords and harvested unencrypted mail traffic, prompting the researcher's report that led to the removal of the infected exit nodes from the Tor network.
kaba.cx
· 2026-10-20
Daniel Rhyne, a former infrastructure engineer, received a 32-month prison sentence after remotely accessing his employer's network, locking thousands of devices, deleting admin accounts, and demanding a ransom. His actions included changing passwords, shutting down servers, and sending threatening emails to co-workers in late 2023.
bleepingcomputer.com
· 2026-10-06
A cybersecurity guide details how organizations can build a Secure Access Service Edge (SASE) framework, starting with a full infrastructure audit to uncover shadow IT, redundant tools and undocumented network dependencies. It then recommends piloting SASE in controlled environments, such as remote-worker groups or new branch offices, before wider rollout. The transition is described as taking 6-18 months or longer, during which legacy and SASE systems must be secured in parallel.
darkreading.com
· 2026-09-24
After a researcher's resignation over AI extinction fears, Anthropic CEO Dario Amodei called for external organizations to verify AI labs' safety practices and audit training pipelines, a proposal quickly backed by OpenAI, Google and others. Security experts counter that labs should first tighten fundamental internet security measures—access logs, permissions, and control systems—rather than relying on outside auditors as the primary fix.
techcrunch.com
· 2026-09-16
A syslog server is a software tool or appliance that collects log messages—covering logins, reboots, firewall denials, hardware failures and more—from routers, switches, servers and other devices across a network. It receives these messages via UDP, TCP or encrypted TLS transport, then stores them in a searchable format organized by source, timestamp, severity and event type.
blog.greencloudvps.com
· 2026-08-24
GoKawiil