New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic
More on Intercept
Other advisories
- Not ratedosv:CVE-2026-98716KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted
- HighCVE-2026-100409OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths
- HighCVE-2026-100409OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths
- Not ratedosv:CVE-2026-87029undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
- Not ratedosv:CVE-2026-100409OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths
- Not ratedosv:CLEANSTART-2026-AW40978frontend gRPC server's streaming interceptor chain did not include the authorization interceptor
- Not ratedosv:CLEANSTART-2026-ZP07254undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers
- HighCVE-2026-102406Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception
Other news entries
- Hackers breach F5 BIG-IP APM devices to deploy Linux rootkitNewsBleepingComputer
- JSCeal Malware Can Bypass Google Authentication Using Stolen Session CookiesNewsThe Hacker News
- OpenLeash Adds a Human Check to Risky AI Agent ActionsNewsSecurityWeek
- 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have OneNewsThe Hacker News
- Signal adds new security feature to thwart man-in-the-middle attacksNewsBleepingComputer
- CISA Warns of Exploited Langflow, N-central, and Tomcat VulnerabilitiesNewsSecurityWeek
- Chinese Actor Weaponizes Deepseek AI Agent to Attack Security FirmNewsDark Reading
- CubePilot drone software dev hit by DNS hijacking to intercept trafficNewsBleepingComputer
Source: https://thehackernews.com/2026/09/new-ted-backdoor-hides-inside-victims.html
ID