A researcher published 11 unpatched Tailscale and headscale findings, led by an SSH forwarding bug that turns one compromised device into root on its peers. Here's what you can change today.

Tailscale SSH vulnerabilities from the Tailworm report: Findings, response timeline, security bulletins, and fixes in Tailscale v1.104.4.

Trustworthy expert guide to your Synology and UGREEN NAS.

Tailworm report shows how one hacked device could gain root via Tailscale SSH port forwarding.

La Tailscale SSH vulnérabilité révélée par Tailworm permet à un utilisateur déjà autorisé d’obtenir davantage de privilèges que son compte local, jusqu’à un possible accès root. Ce n’est pas une attaque ouverte à tout Internet : l’attaquant doit d’abord compromettre un appareil autorisé. En attendant un correctif officiel identifié, désactivez le transfert SSH, réduisez les règles d’accès et révoquez les appareils suspects.

Am Wochenende wurden Sicherheitslücken in Tailscale-Software bekannt, die Angreifer etwa zum Ausweiten der Rechte missbrauchen können.

Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released.

How I checked my own network against the Tailworm Tailscale SSH findings, the vendor fix (Tailscale 1.104.4) and what I have applied.

Tailscale patches Tailworm SSH flaws that let a compromised device gain root on other tailnet machines, but disputes the "worm" label.

Am Wochenende wurden Sicherheitslücken in Tailscale-Software bekannt, die Angreifer etwa zum Ausweiten der Rechte missbrauchen können.

How I checked my own network against the unpatched Tailworm Tailscale SSH findings, where I stand, and which fixes I have queued. This is a living document. Nothing below is applied unless its status says so.

Authenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html Tailworm flaws put Tailscale SSH at risk https://www.securityweek.com/tailscale-rushes-patches-after-uncoordinated-disclosure-of-tailworm-flaws/ UK police suppliers repeatedly breached https://therecord.media/uk-police-data-breached-from-suppliers-watchdog-report Rural hospitals get a cyber lifeline https://cyberscoop.com/oncd-rural-hospital-cybersecurity-pilot-project-lifeline-250/ Cyberattack disrupts UNM health services https://www.theregister.com/cyber-crime/2026/10/27/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack/5305690 Warp breach exposes AI agent logs https://www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/ Malware hides from online store scanners https://www.infosecurity-magazine.com/news/hackers-infect-953-online-stores/ Apple patches exploited flaw on older devices https://thehackernews.com/2026/10/apple-backports-fix-for-exploited.html Get the show notes here: https://cisoseries.com/cybersecurity-news-october-28-2026/ Huge thanks to our sponsor, Guardsquare (https://hubs.la/Q04sv5qF0) Is your mobile app truly protected? Relying on the OS isn't enough. A global study of thirteen-hundred security and developer leaders found that ninety-six percent of teams using layered protection reported significantly fewer security incidents. Don't wait for a breach to harden your defenses. Get the protection needed for modern security risks. Learn more at Guardsquare.com (http://Guardsquare.com) .

Security vulnerabilities in Tailscale software disclosed over the weekend could let attackers elevate their privileges, among other things.

Am Wochenende wurden Sicherheitslücken in Tailscale-Software bekannt, die Angreifer etwa zum Ausweiten der Rechte missbrauchen können.

Tailworm report shows how one hacked device could gain root via Tailscale SSH port forwarding.

A researcher published 11 unpatched Tailscale and headscale findings, led by an SSH forwarding bug that turns one compromised device into root on its peers. Here's what you can change today.