News
12 November 2026
TECHBOARD #6: SSHole unlocks locked accounts without a password as Binance reveals how the billion-dollar theft unfolded
Under certain conditions, the SSHole vulnerability allows attackers to gain root access using any password longer than 256 characters. This edition of TECHBOARD also covers new details of the Binance attack, the Coinmate data breach, and a vulnerability in Microsoft Paint.
4 November 2026
TECHBOARD #5: Binance loses $6.3 billion as attackers slip a backdoor into Claude Code
A record-breaking $6.3 billion cryptocurrency theft, a compromised Claude Code extension, stolen authentication tokens, and vulnerabilities discovered by AI. TECHBOARD #5 covers the most important cybersecurity developments of the past week.
4 November 2026
Phishing Without Typos or Bizarre Promises: Would You Spot It?
Modern phishing is no longer easy to identify by typos or bizarre promises. Try ten realistic workplace scenarios and see whether you can distinguish a scam from legitimate communication.
3 November 2026
An expired payment card may still work
An expired payment card may not be completely inactive. Researchers showed how an expiration date could be modified during an NFC payment without breaking the card’s cryptography.
2 November 2026
AI and LLM security testing: when your AI assistant becomes a confused deputy
An AI assistant embedded in a banking app was able to initiate a transfer on its own. All it took was combining a single XSS vulnerability with the model’s willingness to help, and the bank’s security controls were bypassed.
30 October 2026
TECHBOARD #4: Attackers Push Malicious LiteLLM Update, Critical Ruby Flaw Threatens GitLab
Attackers slipped malware into the official LiteLLM distribution, while a critical GitLab flaw could allow unauthenticated remote code execution. TECHBOARD #4 also covers a certificate authority using a private key valued at just 4, new PHP2Shell complications, and other security findings.
Sign up for our newsletter for all the important cybersecurity and ethical hacking news.
© 2026 citadelo AG. All rights reserved.
