Pentest & Red Teaming

Find our latest news, analyses and insights on cybersecurity, emerging threats and digital security issues.

« Tailworm » : des failles Tailscale SSH permettent une élévation vers root

Pentest & Red Teaming

By Defensy
October 27, 2026

“Tailworm”: Tailscale SSH Flaws Allow Escalation to Root

On October 24, 2026, researcher Erica Windisch (Cyberdione Labs) published “Tailworm”, a security assessment of Tailscale and headscale listing eleven findings. Its core concerns Tailscale SSH: any user allowed to log in, even with...

More Details

Une clé maîtresse LiteLLM non révoquée mène au détournement de la chaîne de publication

Artificial Intelligence, Pentest & Red Teaming

By Defensy
October 24, 2026

Unrevoked LiteLLM Master Key Leads to Release Pipeline Hijack

On October 21, 2026, a trojanized version of LiteLLM, the widely used open-source gateway for accessing AI models, was published to PyPI and Docker Hub by the project’s own release pipeline. LiteLLM’s root-cause analysis,...

More Details

Pentest & Red Teaming

By Defensy
September 14, 2026

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

Wiz Research has confirmed active exploitation of three vulnerabilities in JFrog Artifactory, the artifact repository at the heart of many CI/CD pipelines. Between August 15 and September 8, 2026, multiple actors chained two of...

More Details

Artificial Intelligence, Pentest & Red Teaming

By Defensy
September 14, 2026

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

On September 11, 2026, three independent researchers, Spencer Kitts, Thomas Larsen and Sydney Von Arx, published an analysis attributing a May campaign against RubyGems.org, the official Ruby package registry, to a swarm of OpenAI...

More Details