Skip to content
Thursday, November 5, 2026
LXD and MicroCloud CVSS 10: Your Public Certificate Is Now a Password (CVE-2026-112816)
Two Senators Asked Meta Who Watches the Footage From Its Glasses. Answers Due by Thanksgiving
FBI Pins Binance’s $6.43B Theft on TraderTraitor, and the Private Keys Were Never the Problem
Polymarket’s Performance Monitor Became a Wallet Drainer, and the CSP Waved It Through

Cybersecsloth

the security industry is a joke. we cover it anyway.

Random News
LXD and MicroCloud CVSS 10: Your Public Certificate Is Now a Password (CVE-2026-112816)
Two Senators Asked Meta Who Watches the Footage From Its Glasses. Answers Due by Thanksgiving
FBI Pins Binance’s $6.43B Theft on TraderTraitor, and the Private Keys Were Never the Problem
Polymarket’s Performance Monitor Became a Wallet Drainer, and the CSP Waved It Through

Cybersecsloth

the security industry is a joke. we cover it anyway.

Random News
Headlines
CVE-2026-112816: LXD and MicroCloud Trusted Client Impersonation, CVSS 10

LXD and MicroCloud CVSS 10: Your Public Certificate Is Now a Password (CVE-2026-112816)

Wyden and Markey Letter to Meta on AI Glasses Privacy and Footage Review

Two Senators Asked Meta Who Watches the Footage From Its Glasses. Answers Due by Thanksgiving

FBI Attributes $6.43B Binance Hack to North Korea's TraderTraitor

FBI Pins Binance’s $6.43B Theft on TraderTraitor, and the Private Keys Were Never the Problem

Polymarket DebugBear Script Drainer: IOCs, Timeline, How It Worked

Polymarket’s Performance Monitor Became a Wallet Drainer, and the CSP Waved It Through

Hunt the Cursor Claude Code Extension SSH Backdoor (2.1.312/2.1.313)

Hunting the Cursor Marketplace Claude Code Backdoor: svc-telemetry, .smt and a Reverse Tunnel

CVE-2026-98432 Linux TCP UAF: MPTCP Remote Root, Go Default, Fixes

CVE-2026-98432: A 2015 IPv4 TCP Bug Got a Remote Root Exploit, and Go Turned MPTCP On for You

CVE-2026-76418 Cisco ASA FTD SSL VPN DoS Added to CISA KEV

Cisco ASA and FTD SSL VPN Can Be Remotely Rebooted, and CISA Put the DoS on KEV

CVE-2026-97229 GitLab CI Regexp RCE Added to CISA KEV (Due Nov 1)

GitLab’s CI Regex Compiler Is a CVSS 10.0 RCE, and CISA Just Put It on KEV

CVE-2026-46300 Fragnesia Linux Kernel KEV Due Oct 31 (PHP2Shell Chain)

Fragnesia Is on KEV, and It Is the Root Half of the PHP2Shell Chain

CVE-2026-41709 VMware ESX Insufficient Logging Added to CISA KEV

A CVSS 2.7 ESX Logging Bug Just Landed on CISA KEV Because Spies Used It as a Zero-Day

AGPL