Cybersecurity
When the internet’s plumbing catches fire
Checkmarx’s Jenkins Security Plugin Was Backdoored Using Credentials Checkmarx Failed to Rotate — The Hackers Even Left a Thank-You Note
🤚 The Open-Palm Incident Report The TeamPCP hacking group has successfully backdoored the official Checkmarx Jenkins Application Security Testing (AST) plugin, turning one of the…
Read moreA Fake OpenAI ‘Privacy Filter’ Hit Number One on Hugging Face With 244,000 Downloads — It Was a Rust-Based Infostealer Wearing a Lab Coat
🤚 The Open-Palm Trending Page A malicious repository called Open-OSS/privacy-filter spent enough time at the #1 trending spot on Hugging Face to accumulate 244,000 downloads…
Read moreHackers Used Google Ads and Claude’s Own Website to Install Mac Malware — The URL Was Real, the Conversation Was Fake, and the Roofing Contractor Did the Rest
🤚 The Open-Palm Attack Vector In a campaign that deserves some kind of award for ironic creativity, hackers have been using Google Ads and Anthropic’s…
Read moreJDownloader’s Website Was Hacked to Serve Python RAT Malware — And the Breach Was Discovered by a Redditor Who Actually Reads Certificate Names
🤚 The Open-Palm Incident Report JDownloader, the beloved open-source download manager that has faithfully served power users and Linux enthusiasts since approximately the Mesozoic era…
Read moreLinux ‘Dirty Frag’ Zero-Day Gives Root With a Single Command — Your Kernel Has Been an Open Door Since the Obama Administration
🤚 The Open-Palm Root Shell A new Linux zero-day vulnerability dubbed “Dirty Frag” has arrived with all the subtlety of a freight train through your…
Read moreTCLBanker Trojan Hides Inside a Logitech AI Installer, Spreads via WhatsApp, and May Have Been Written by AI — The Future Is Exactly as Stupid as Promised
🤚 The Open-Palm Infection Report A new banking trojan called TCLBanker is doing something genuinely impressive, in the way that a house fire is technically…
Read morePalo Alto Networks Firewalls Have Been Owned by State Hackers for a Month — Your Perimeter Defense Has Been Freelancing
🤚 The Open-Palm Disclosure If you run Palo Alto Networks firewalls — and statistically, a disconcerting number of you do — you may want to…
Read moreA Student With a 00 Radio Halted Taiwan’s Entire High-Speed Rail — The Security Parameters Hadn’t Changed Since the Bush Administration
A 23-year-old university student in Taiwan, identified by his surname Lin, has been arrested for doing something that sounds like the plot of a cyberpunk…
Read moreDAEMON Tools Was Trojanized for a Month and Nobody Noticed — Your ISO Mounter Is Now a Foreign Intelligence Asset
🤚 The Open-Palm Infection Report If you downloaded DAEMON Tools between April 8 and early May 2026, congratulations — you may have also downloaded a…
Read moreShinyHunters Breach Canvas LMS and 275 Million Students Just Learned Their Most Expensive Lesson Yet — It Wasn’t on the Syllabus
🤚 The Open-Palm Incident Report Attention, students: your homework, private messages, and existential 2 a.m. emails to your professor about extension requests are now in…
Read more