NewsArs Technica — Security22.10.2026

333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email

Teaser from the source

For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.

This is the RSS-feed teaser. Read the full article at the original source.

Read at Ars Technica — Security

Other advisories

Not ratedosv:CLEANSTART-2026-QV17759undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers
Not ratedosv:CLEANSTART-2024-YV21759Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker
Not ratedosv:CLEANSTART-2024-YL50966When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the ifram...
Not ratedosv:CLEANSTART-2024-GV74917When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of it
Not ratedosv:CLEANSTART-2026-ET22170undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial response
Not ratedosv:CLEANSTART-2026-MB00933undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive
Not ratedosv:CLEANSTART-2026-NE99679undici's cache interceptor mishandles malformed Cache-Control private directives
Not ratedosv:CLEANSTART-2026-UF65546frontend gRPC server's streaming interceptor chain did not include the authorization interceptor

Other news entries

Source: https://arstechnica.com/information-technology/2026/10/300-tor-exit-nodes-hijacked-to-intercept-ssh-traffic-and-retrieve-plaintext-email/

ID