Ox

A decade-old vulnerability in OpenSSH allows attackers to bypass password authentication on vulnerable Alpine Linux systems simply by entering an unusually long password. Tracked as CVE-2026-123158, the flaw can grant unauthorized access to accounts configured to reject password logins, potentially leading to root-level access on affected cloud systems. OpenSSH and Alpine Linux ...

Overview

OX Security researchers identified malicious releases of legitimate npm packages compromised in a campaign linked to the PolinRider malware family.

The injected code uses the Ethereum blockchain as a dead drop for command-and-control (C2) infrastructure. When an affected package is imported, a hidden loader queries public Ethereum RPC en...

A modified build of Anthropic’s Claude Code extension was available in the Cursor Extension Marketplace for about 11 hours on October 29, 2026. The malicious extension added an attacker-controlled SSH key, installed persistence, and attempted to open a reverse SSH tunnel. Overview

On October 29, 2026, Cursor disclosed that a maliciously modified version of the Anthropic...

TL;DR See every step: Agent Activity traces each agent session’s prompts, MCP and tool calls, read/write access, and sensitive data touches. Control what’s allowed: Custom guardrails by model, MCP server, and skill let you flag or block, starting from 100+ built-in policies. Endpoint to production: It’s now in early ac...

TL;DR Security tool sprawl is the build-up of overlapping security tools that report the same risks separately and leave gaps between them. Consolidating static application security testing (SAST), software composition analysis (SCA), and cloud-native application protection platforms (CNAPPs) means mapping what each tool covers, unifying findings in ...