News
cybersecurity ICMacOS Malware Evolves Into Remote Access Trojan That Lets Hackers Control Infected Macs - CyberPress cybersecurity New DarkCore RAT Lets Hackers Masquerade as Victims Using Stolen Browser Sessions - CyberPress cybersecurity Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Login Tokens Without Permissions - CyberPress cybersecurity Hackers Use Fake Cloudflare Verification Pages to Target WordPress Admins With PHP Backdoors - CyberPress threat-intel Hackers Use PowerShell and Windows Error Reporting to Hide Malware on Infected PCs - GBHackers threat-intel Microsoft Issues Emergency .NET Security Updates to Fix Four Vulnerabilities - GBHackers cybersecurity Microsoft Releases Emergency .NET Security Updates to Fix Brotli Memory Corruption Flaw - CyberPress threat-intel Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens - GBHackers cybersecurity Hackers Bypass Windows Secure Boot on Fully Updated PCs Using BlackX Bootkit - CyberPress threat-intel Cloudflare Adds New WAF Rules to Detect Attacks Targeting CVE-2026-111497 - GBHackers cybersecurity Malicious AGENTS.md Files Hijack AI Coding Agents to Execute Malware and Steal Tokens - CyberPress threat-intel OpenAI Codex Breaks USB Drive Encryption in Minutes, Exposing Critical Security Flaws - GBHackers cybersecurity Cloudflare Releases Emergency WAF Rules for Critical Node.js Brotli Vulnerability - CyberPress cybersecurity AI Agent Breaks Encrypted USB Drive Protections and Decrypts Files Without Passwords - CyberPress cybersecurity Hackers Use Public PHP2Shell Exploits to Launch Automated Attacks on Websites - CyberPress
1 / 15
All news ›
Cybersecurity

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

The Hacker News ·

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target. The findings were

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.