{ "subreddit": "r/SecOpsDaily", "page": "https://redlisten.com/r/secopsdaily", "updated": "2026-11-07T15:58:59.635Z", "members": 17890, "activity": { "posts_last_24_hours": 27, "posts_per_hour": 1.8, "comments_per_hour": 0.3, "newest_post_utc": 1794063827.091, "newest_comment_utc": 1794044027.826 }, "top_threads_this_week": [ { "title": "OpenSSH flaw lets attackers log into password-disabled Linux accounts", "score": 48, "comments": 11, "created_utc": 1793901861.481, "snippet": "A new authentication bypass vulnerability in OpenSSH (dubbed “sshole”) is actively being exploited against Alpine Linux and other distributions using the musl C library. The flaw allows an...", "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xopmy9/openssh_flaw_lets_attackers_log_into/" }, { "title": "Want to Rent an Internet Address at the White House?", "score": 47, "comments": 6, "created_utc": 1793855027.065, "snippet": "This is a wild finding from Krebs. White House staffers are apparently running residential proxy software on their work devices, effectively renting out their IP addresses to third parties....", "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xoa6x2/want_to_rent_an_internet_address_at_the_white/" }, { "title": "Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot", "score": 19, "comments": 2, "created_utc": 1793984622.736, "snippet": "Well, that didn't take long. Threat actors are actively exploiting CVE-2026-123158 (SSHole) within hours of the public disclosure, achieving root access on a honeypot. This is a critical...", "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xpi1q5/hackers_target_openssh_sshole_flaw_within_hours/" }, { "title": "OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run", "score": 16, "comments": 3, "created_utc": 1793858621.992, "snippet": "This is a significant development in the offensive security space, but the implications are broader than just a new tool. OpenAI’s pipeline isn't just finding bugs; it's dynamically reproducing...", "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xob7st/openai_ai_pipeline_generates_948_linux_root/" }, { "title": "Binance says fake job interview led to $6.3 billion crypto heist", "score": 16, "comments": 2, "created_utc": 1793739790.29, "snippet": "This is a textbook Lazarus Group operation, but the scale is staggering. $6.34 billion is the largest single crypto heist on record, and it wasn't a protocol exploit—it was straight-up social...", "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xn53vu/binance_says_fake_job_interview_led_to_63_billion/" }, { "title": "Synology warns of C3RB3R ransomware attacks targeting NAS devices", "score": 16, "comments": 1, "created_utc": 1793620994.667, "snippet": "This is a targeted ransomware campaign hitting exposed Synology NAS devices. The C3RB3R group is likely exploiting weak admin credentials or unpatched vulnerabilities to gain initial access, then...", "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xlvcql/synology_warns_of_c3rb3r_ransomware_attacks/" }, { "title": "Binance Hack: How Attackers Stole $6.34 Billion Through Developer Laptops", "score": 12, "comments": 0, "created_utc": 1793729088.713, "snippet": "This is a massive supply chain attack with a sophisticated social engineering component. The $6.34B figure is staggering, even if $2.85B was frozen. The Attack Path: - Initial Compromise (June): A...", "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xn08sa/binance_hack_how_attackers_stole_634_billion/" }, { "title": "Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub", "score": 11, "comments": 1, "created_utc": 1794038582.058, "snippet": "This is a classic case of a convenience feature creating a massive operational security blind spot. The \"Don't Ask Again\" toggle in Claude Code is essentially logging plaintext secrets to a...", "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xq12lf/claude_codes_dont_ask_again_file_exposes/" }, { "title": "Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction", "score": 9, "comments": 0, "created_utc": 1793786643.245, "snippet": "Critical Android vulnerability CVE-2026-58868 is a pre-auth remote code execution (RCE) bug in the Android system component that requires zero user interaction to exploit. Google's November...", "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xnkg8u/google_issues_patches_for_critical_android_flaw/" }, { "title": "New Android SMS of Death exploit can remotely crash unpatched phones", "score": 9, "comments": 0, "created_utc": 1793462599.416, "snippet": "This is a textbook remote DoS vector targeting the baseband layer. The researcher dropped a PoC for CVE-2026-58882, which exploits how the Android modem processes malformed SMS PDUs. No user...", "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xkdzb4/new_android_sms_of_death_exploit_can_remotely/" } ], "newest_posts": [ { "title": "Leaking the WARDOGS Server Binary via Remote Code Execution on a Hosting Partner", "score": 1, "comments": 0, "created_utc": 1794063827.091, "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xq8g0n/leaking_the_wardogs_server_binary_via_remote_code/" }, { "title": "Hacking Two Automakers: ForgeRock Path Confusion, RCE, and Remote Vehicle Access", "score": 1, "comments": 0, "created_utc": 1794063804.42, "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xq8fpj/hacking_two_automakers_forgerock_path_confusion/" }, { "title": "CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands", "score": 1, "comments": 0, "created_utc": 1794063781.844, "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xq8fe4/ctm360_exposes_fake_gift_card_scams_exploiting/" }, { "title": "Chainalysis cyberattack exposed password hashes and live tokens for all users", "score": 1, "comments": 0, "created_utc": 1794057128.387, "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xq61nw/chainalysis_cyberattack_exposed_password_hashes/" }, { "title": "Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub", "score": 11, "comments": 1, "created_utc": 1794038582.058, "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xq12lf/claude_codes_dont_ask_again_file_exposes/" }, { "title": "ARTEX abuse expands as cybercriminals target financial sector", "score": 2, "comments": 0, "created_utc": 1794024188.616, "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xpwz3l/artex_abuse_expands_as_cybercriminals_target/" }, { "title": "SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks", "score": 2, "comments": 0, "created_utc": 1794013387.394, "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xptgp4/sonicwall_warns_of_new_sslvpn_mfa_bypass_flaw/" }, { "title": "Brute Force Sentry for Managed SIEM | Huntress", "score": 1, "comments": 0, "created_utc": 1794009783.191, "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xps7il/brute_force_sentry_for_managed_siem_huntress/" }, { "title": "Runaway AI hacking agent behind WorkOS breach after escaping sandbox", "score": 2, "comments": 0, "created_utc": 1794006187.022, "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xpqwuk/runaway_ai_hacking_agent_behind_workos_breach/" }, { "title": "Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System", "score": 1, "comments": 0, "created_utc": 1794002602.456, "url": "https://www.reddit.com/r/SecOpsDaily/comments/1xppjkv/turning_up_the_heat_inside_the_attacks_on_europes/" } ], "words_this_week": [ { "word": "flaw", "titles": 23 }, { "word": "linux", "titles": 21 }, { "word": "attacks", "titles": 16 }, { "word": "rce", "titles": 15 }, { "word": "hackers", "titles": 12 }, { "word": "code", "titles": 12 }, { "word": "security", "titles": 12 }, { "word": "root", "titles": 11 }, { "word": "fake", "titles": 11 }, { "word": "breach", "titles": 11 }, { "word": "users", "titles": 10 }, { "word": "cve", "titles": 10 } ], "preview": "This is a preview. Every post and comment in r/SecOpsDaily, live, as JSON or RSS on the same paths a Reddit client uses, plus keyword streams to Slack, Discord, webhook or email, needs a free key: https://app.redlisten.com/?signup=1&utm_source=redlisten&utm_medium=subreddit", "docs": "https://redlisten.com/docs", "attribution": "Source: Redlisten, https://redlisten.com/r/secopsdaily" }