THE JDNEER

AI-Written Scripts Helped Hackers Backdoor Government Linux Servers for Months, Unit 42 Says

AI-Written Scripts Helped Hackers Backdoor Government Linux Servers for Months, Unit 42 Says

Unit 42 says an unattributed group, CL-UNK-1211, used AI-assisted scripts to backdoor government Linux servers from October 2025 to April 2026, stealing sudo passwords and planting a Go RAT. Here is how it worked and how to check your servers.

Fake Claude, ChatGPT and Copilot Installers Are Stealing Sessions and Keys, ANY.RUN Warns

Fake Claude, ChatGPT and Copilot Installers Are Stealing Sessions and Keys, ANY.RUN Warns

ANY.RUN tied 1,258 sandbox analyses to fake Claude, ChatGPT, Copilot and other AI tools that trick employees into pasting malicious commands, running trojanized installers or signing in to fake Google windows. The US ranked second for submissions.

Android Was Built on Freedom. Google's Developer Verification Takes It Away

Android Was Built on Freedom. Google's Developer Verification Takes It Away

Google's Android developer verification turns an open platform into a gated one, and the Philippines gets it in 2027. I oppose it heavily. Making developers register with Google and making users wait 24 hours to install apps goes against everything Android stood for.

Infinity Core: Six Linux Kernel Bugs Let Local Users Become Root, and Fixes Are Still Rolling Out

Infinity Core: Six Linux Kernel Bugs Let Local Users Become Root, and Fixes Are Still Rolling Out

Researcher Hyunwoo Kim has disclosed Infinity Core, six bugs in core Linux kernel code. Five let an unprivileged local user gain root or escape a container, and exploit code is public. Fedora and Debian trixie have fixes; Ubuntu, RHEL and Debian bookworm are still waiting.

Four Critical J-Web Flaws Let Attackers Take Over Junos Devices Without Logging In

Four Critical J-Web Flaws Let Attackers Take Over Junos Devices Without Logging In

Juniper's October release fixes four CVSS 9.8 flaws in J-Web, the Junos web interface, that let unauthenticated attackers bypass login or run code as root. There are no workarounds, so patching and locking J-Web down to trusted hosts is the answer.

Five Critical BGP Bugs Let Peers Take Over Juniper Routers

Five Critical BGP Bugs Let Peers Take Over Juniper Routers

Five CVSS 9.8 stack overflows in Juniper's routing daemon can be triggered through BGP, via BMP, flowspec and EVPN-VPWS, and most lead to root code execution on Junos OS. None are known exploited. Fixed releases are out, and only one has a workaround.

Juniper's October 2026 Security Release: 153 Junos CVEs, 15 Critical, and What to Patch First

Juniper's October 2026 Security Release: 153 Junos CVEs, 15 Critical, and What to Patch First

Juniper's October 14 release fixes 153 Junos OS and Junos OS Evolved CVEs, 15 of them critical, spanning BGP, J-Web, SRX, MX and more. None are on CISA's KEV list and Juniper knows of no exploitation, but most lack workarounds, so upgrading is the fix.

This Open Source Project Turns a Wi-Fi 7 Router Into a 320 MHz Radio Receiver

This Open Source Project Turns a Wi-Fi 7 Router Into a 320 MHz Radio Receiver

W1700K SDR turns a Gemtek Wi-Fi 7 router into a receive-only software-defined radio that streams up to 320 MHz of raw IQ from the 2.4, 5 and 6 GHz bands over 10 gigabit Ethernet, using only open firmware. Here is what it does and what it takes to run.

We Tested ScamCheck.ph, the Banks' New Anti-Scam Checker. Here's How It Did

We Tested ScamCheck.ph, the Banks' New Anti-Scam Checker. Here's How It Did

Philippine banks are pushing ScamCheck.ph, a free AI checker for suspicious texts and screenshots. In our small test it flagged all six fake scam messages and none of three genuine ones. The one gap worth fixing: it doesn't yet say who handles your data.

Chip Stocks Tumble Across Asia as Rate Fears and AI Funding Worries Collide

Chip Stocks Tumble Across Asia as Rate Fears and AI Funding Worries Collide

Kospi fell over 8% and hit a trading halt as Samsung and SK hynix lost more than 10%, after hot US inflation revived Fed hike fears and CoreWeave's bond slide deepened doubts about how the AI buildout is financed. Tokyo and Taipei fell too.

Globe Wants Telecom Restoration Treated Like Power After Disasters

Globe Wants Telecom Restoration Treated Like Power After Disasters

Globe is proposing a National Utility Resiliency Plan that would put telecom restoration on par with power after disasters, with priority logistics, security support and faster permits for repair crews, plus incentives for sturdier networks.

Ledger Freezes Wallet Sales Across Southeast Asia and Hong Kong Over Spy Implants

Ledger Freezes Wallet Sales Across Southeast Asia and Hong Kong Over Spy Implants

Ledger has asked resellers in the Philippines, six other Southeast Asian markets and Hong Kong to pull its hardware wallets from shelves while it investigates devices fitted with a hidden implant that steals recovery phrases. Suspected losses top US$86 million.