NewsArs Technica — Security
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Teaser from the source
For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Ars Technica — SecurityMore on intercept
Other advisories
- Not ratedosv:CLEANSTART-2023-HW88932invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021
- Not ratedosv:CLEANSTART-2024-US02073Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker
- Not ratedosv:CLEANSTART-2024-WV69351When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the ifram...
- Not ratedosv:CLEANSTART-2026-QV17759undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers
- Not ratedosv:CLEANSTART-2024-YV21759Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker
- Not ratedosv:CLEANSTART-2024-YL50966When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the ifram...
- Not ratedosv:CLEANSTART-2024-GV74917When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of it
- Not ratedosv:CLEANSTART-2026-ET22170undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial response
Other news entries
- SS7 and Diameter Attacks: How Signaling Flaws Expose Your PhoneNewsBleepingComputer
- Binance says a fake job interview started its $6.3B hack; it has rebuilt the affected wallet system and will cover all lossesBreachpwn.watch
- EMudhra Intermediate CA Certificates CompromisedNewsPalo Alto Networks Unit 42
- Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH ConnectionsNewsThe Hacker News
- Hackers breach F5 BIG-IP APM devices to deploy Linux rootkitNewsBleepingComputer
- JSCeal Malware Can Bypass Google Authentication Using Stolen Session CookiesNewsThe Hacker News
- New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web TrafficNewsThe Hacker News
- OpenLeash Adds a Human Check to Risky AI Agent ActionsNewsSecurityWeek
ID