Recent articles by Juha Saarinen

Admin creds left in carmaker app opened doors to vehicles

Admin creds left in carmaker app opened doors to vehicles

Researchers work their way in from a single number plate.
Juha Saarinen Nov 10 2026 6:33AM Security
Researchers turn PwnEscape Linux flaw into Firecracker breakout

Researchers turn PwnEscape Linux flaw into Firecracker breakout

Demonstrates host kernel bug that undercuts defence-in-depth sandboxing.
Juha Saarinen Nov 9 2026 6:51AM Security
"Don't ask again" in Anthropic's Claude Code leaks developer secrets

"Don't ask again" in Anthropic's Claude Code leaks developer secrets

AI vendor looking into fixes after researchers count 2539 exposed credentials.
Juha Saarinen Nov 9 2026 6:40AM Security
Lightweight Linux distros vulnerable to *sshole password bypass

Lightweight Linux distros vulnerable to *sshole password bypass

Accounts that shouldn’t accept passwords do, thanks to a decade-old edge case.
Juha Saarinen Nov 6 2026 11:38AM Security
Low-privileged accounts on unpatched systems as good as root: OpenAI

Low-privileged accounts on unpatched systems as good as root: OpenAI

AI agents built 948 distinct Linux kernel privilege-escalation exploits in exercise.
Juha Saarinen Nov 6 2026 6:54AM Security
No OAIC probe of collapsed VIQ over court transcription work in India

No OAIC probe of collapsed VIQ over court transcription work in India

Regulator sees possible security breach but won't pursue liquidated provider.
Juha Saarinen Nov 5 2026 6:10AM Security
Chinese Videostrong botnet hit Android TV boxes in Australia: researchers

Chinese Videostrong botnet hit Android TV boxes in Australia: researchers

Google boots Shenzhen-based vendor behind XPCE botnet.
Juha Saarinen Nov 4 2026 6:23AM Security
Microsoft quietly fixes Windows troubleshooter privesc vulnerability

Microsoft quietly fixes Windows troubleshooter privesc vulnerability

Aussie researcher bags US$16,000 in bounties for two diagnostics bugs.
Juha Saarinen Nov 2 2026 1:43PM Security
ARTEX AI hacking framework spreads to another China-linked group

ARTEX AI hacking framework spreads to another China-linked group

Open-source ARTEX framework linked to espionage and financially motivated campaigns.
Juha Saarinen Nov 2 2026 6:57AM Security
Flaw in GNU's code forge could have let attackers backdoor Bash

Flaw in GNU's code forge could have let attackers backdoor Bash

Researchers use special email address to reach crucial source code.
Juha Saarinen Oct 30 2026 2:50PM Security
Researchers feed infostealer gangs booby-trapped session cookies

Researchers feed infostealer gangs booby-trapped session cookies

Infected their own machines with malware to see what criminals do with stolen sessions.
Juha Saarinen Oct 30 2026 6:47AM Security
Apple rains on MIE-bypassing iPhone jailbreak parade with iOS update

Apple rains on MIE-bypassing iPhone jailbreak parade with iOS update

Researchers get past anti-spyware memory protection.
Juha Saarinen Oct 29 2026 6:30AM Security
Fixes for Google Brotli flaw arrive for Microsoft .NET, PHP and Linux

Fixes for Google Brotli flaw arrive for Microsoft .NET, PHP and Linux

Vendors disagree on how readily the flaw can be exploited.
Juha Saarinen Oct 27 2026 12:52PM Security
Node2Shell flaw embedded in apps and dev tools far beyond Node.js

Node2Shell flaw embedded in apps and dev tools far beyond Node.js

Brotli incident reminds researcher of past Log4j emergency.
Juha Saarinen Oct 25 2026 2:08PM Security
Australia sanctions North Korean IT worker bosses and financiers

Australia sanctions North Korean IT worker bosses and financiers

After US imposition.
Juha Saarinen Oct 23 2026 12:05PM Security
Critical flaws strike PHP as disclosure embargo is broken

Critical flaws strike PHP as disclosure embargo is broken

Uncoordinated disclosure of large-scale vulnerability threat via social media.
Juha Saarinen Oct 21 2026 7:58PM Security
Cloudflare warns fixing botched eMudhra certs goes beyond browsers

Cloudflare warns fixing botched eMudhra certs goes beyond browsers

Servers, containers and apps need manual patching.
Juha Saarinen Oct 21 2026 1:41PM Security
Stolen ConnectWise 'SkyKick' credential exposed Microsoft 365 tenants

Stolen ConnectWise 'SkyKick' credential exposed Microsoft 365 tenants

Cloud Backup pulled worldwide as customers hunt for planted credentials valid until 2028.
Juha Saarinen Oct 18 2026 7:56PM Security
Australian gov, media networks reached by Israeli firm’s spy ads

Australian gov, media networks reached by Israeli firm’s spy ads

Ads tied to mercenary spyware turned up on ANSTO and critical infrastructure networks.
Juha Saarinen Oct 16 2026 5:34PM Security
Shopify tells Australian store to stay shut after hijacked extensions divert shoppers

Shopify tells Australian store to stay shut after hijacked extensions divert shoppers

Malicious Javascript in add-ons sent shoppers to fake checkouts.
Juha Saarinen Oct 16 2026 5:17PM Security

Log In

  |  Forgot your password?