they should legalize cybercrime for one day so we can all play with wormable RCEs
April 30, 2025 at 4:40 PM
they should legalize cybercrime for one day so we can all play with wormable RCEs
The monitoring layer might catch the ones who query "write me a wormable RCE for [specific Cisco appliance]" on day one.
April 14, 2026 at 10:52 PM
The monitoring layer might catch the ones who query "write me a wormable RCE for [specific Cisco appliance]" on day one.
wooboy, this one is not a drill: PATCH YO’ IOS AND DISABLE YO’ AIRPLAY www.oligo.security/blog/airborne
AirBorne: Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk | Oligo Security | Oligo Security
Oligo Security reveals AirBorne, a new set of vulnerabilities in Apple’s AirPlay protocol and SDK. Learn how zero-click RCEs, ACL bypasses, and wormable exploits could endanger Apple and IoT devices…
www.oligo.security
April 30, 2025 at 8:38 AM
wooboy, this one is not a drill: PATCH YO’ IOS AND DISABLE YO’ AIRPLAY www.oligo.security/blog/airborne
Wormable Linux Rootkit Attack Multiple Systems to Steal SSH Keys and Privilege Escalation
Wormable Linux Rootkit Attack Multiple Systems to Steal SSH Keys and Privilege Escalation
cybersecuritynews.com
May 7, 2025 at 8:47 PM
Wormable Linux Rootkit Attack Multiple Systems to Steal SSH Keys and Privilege Escalation
CRITICAL security vulnerability in a really popular web framework React server. Maximum severity (CVSS: 10.0). Unauthenticated remote code execution. May be WORMABLE. Patch immediately. This could get very nasty. Patch this, and all that depends on it (like Next.js) react.dev/blog/2025/12...
December 3, 2025 at 5:44 PM
CRITICAL security vulnerability in a really popular web framework React server. Maximum severity (CVSS: 10.0). Unauthenticated remote code execution. May be WORMABLE. Patch immediately. This could get very nasty. Patch this, and all that depends on it (like Next.js) react.dev/blog/2025/12...
Remote code vulnerability found in Unitree robots and the scary part is that the exploit is wormable. One compromised robot could infect other vulnerable robots nearby. Could attackers then take control of entire fleets of humanoid robots? boschko.ca/unitree-go2-...
August 21, 2026 at 7:29 AM
Remote code vulnerability found in Unitree robots and the scary part is that the exploit is wormable. One compromised robot could infect other vulnerable robots nearby. Could attackers then take control of entire fleets of humanoid robots? boschko.ca/unitree-go2-...
AirBorne Exploits: Zero-Click Wormable RCE Hits Apple & IoT Devices
AirBorne Exploits: Zero-Click Wormable RCE Hits Apple & IoT Devices
Oligo reveals AirBorne flaws in Apple AirPlay protocol enabling zero-click wormable RCE across billions of Apple, CarPlay, and IoT devices.
securityonline.info
April 29, 2025 at 8:19 PM
AirBorne Exploits: Zero-Click Wormable RCE Hits Apple & IoT Devices
‘Wormable’ Windows LDAP Vulnerability Allow Attackers Arbitrary Code Remotely
'Wormable' Windows LDAP Vulnerability Allow Attackers Arbitrary Code Remotely
cybersecuritynews.com
February 12, 2025 at 11:28 AM
‘Wormable’ Windows LDAP Vulnerability Allow Attackers Arbitrary Code Remotely
reminded of that one time in 2016 when i realized mw2 had a wormable rce where i was considering using the rce to fix the rce before realizing 'that'd be immoral and illegal'
July 3, 2025 at 9:06 AM
reminded of that one time in 2016 when i realized mw2 had a wormable rce where i was considering using the rce to fix the rce before realizing 'that'd be immoral and illegal'
Sourcehut account takeover via build logs (XSS in ansi2html)
https://blog.arusekk.pl/posts/srht-account-takeover/
https://news.ycombinator.com/item?id=49835996
https://blog.arusekk.pl/posts/srht-account-takeover/
https://news.ycombinator.com/item?id=49835996
SourceHut account takeover via build logs (XSS in ansi2html.py) | CVE-2026-92973
A wormable vulnerability allowed anyone able to inject text in a build log on builds.sr.ht (or other instances) to take over accounts who viewed them
blog.arusekk.pl
September 25, 2026 at 7:45 AM
Sourcehut account takeover via build logs (XSS in ansi2html)
https://blog.arusekk.pl/posts/srht-account-takeover/
https://news.ycombinator.com/item?id=49835996
https://blog.arusekk.pl/posts/srht-account-takeover/
https://news.ycombinator.com/item?id=49835996
A wormable zero-click remote code execution vulnerability in Apple AirPlay poses a threat to billions of devices, putting them at risk without user interaction required.
Airborne: Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk
View post on Reddit.
reddit.com
May 5, 2025 at 1:42 AM
A wormable zero-click remote code execution vulnerability in Apple AirPlay poses a threat to billions of devices, putting them at risk without user interaction required.
Especially when I'm not in a very wormable state at the moment it seems, if I can't give myself brainworms I'll just bring my friends to ruin instead
March 17, 2026 at 1:49 PM
Especially when I'm not in a very wormable state at the moment it seems, if I can't give myself brainworms I'll just bring my friends to ruin instead
No actually having a KYC program to let people find the zero days and fix them seems basically good? "Write me a wormable RCE in a Cisco router" only works so many times before you're out of remote code exploits, or at least ones that current AI can find.
The postmortem isn't "OpenAI's vetting had a bug." The postmortem is "OpenAI ran a frontier cyber-capability distribution program for a nation-state adversary for 18 months."
April 15, 2026 at 12:16 AM
No actually having a KYC program to let people find the zero days and fix them seems basically good? "Write me a wormable RCE in a Cisco router" only works so many times before you're out of remote code exploits, or at least ones that current AI can find.
Oligo security researchers have disclosed over two dozen vulnerabilities in the Apple AirPlay protocol and SDK.
Collectively named AirBorne, the vulnerabilities can allow attackers on the same network to run malicious code on any Apple device that supports AirPlay.
www.oligo.security/blog/airborne
Collectively named AirBorne, the vulnerabilities can allow attackers on the same network to run malicious code on any Apple device that supports AirPlay.
www.oligo.security/blog/airborne
AirBorne: Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk | Oligo Security | Oligo Security
Oligo Security reveals AirBorne, a new set of vulnerabilities in Apple’s AirPlay protocol and SDK. Learn how zero-click RCEs, ACL bypasses, and wormable exploits could endanger Apple and IoT devices w...
www.oligo.security
April 29, 2025 at 4:58 PM
Oligo security researchers have disclosed over two dozen vulnerabilities in the Apple AirPlay protocol and SDK.
Collectively named AirBorne, the vulnerabilities can allow attackers on the same network to run malicious code on any Apple device that supports AirPlay.
www.oligo.security/blog/airborne
Collectively named AirBorne, the vulnerabilities can allow attackers on the same network to run malicious code on any Apple device that supports AirPlay.
www.oligo.security/blog/airborne
Enable branch creation webhooks on your JS projects, if you see a branch named `shai-hulud` created, your repo has been compromised by the current wormable NPM malware: www.wiz.io/blog/shai-hu...
Shai-Hulud npm Supply Chain Attack | Wiz Blog
Learn how the Shai-Hulud npm worm compromised 100+ packages with data-stealing malware. See how it spreads, the risks, and steps to detect and mitigate.
www.wiz.io
September 16, 2025 at 5:55 PM
Enable branch creation webhooks on your JS projects, if you see a branch named `shai-hulud` created, your repo has been compromised by the current wormable NPM malware: www.wiz.io/blog/shai-hu...
Microsoft fixes critical wormable Windows flaw (CVE-2025-47981)
📖 Read more: www.helpnetsecurity.com/2025/07/09/m...
#cybersecurity #cybersecuritynews #patchtuesday #Ivanti @thezdi.bsky.social @dustinchilds.bsky.social @tenablesecurity.bsky.social @satn.am @microsoft.com
📖 Read more: www.helpnetsecurity.com/2025/07/09/m...
#cybersecurity #cybersecuritynews #patchtuesday #Ivanti @thezdi.bsky.social @dustinchilds.bsky.social @tenablesecurity.bsky.social @satn.am @microsoft.com
Microsoft fixes critical wormable Windows flaw (CVE-2025-47981) - Help Net Security
Microsoft has patched a public SQL Server flaw (CVE-2025-49719) and a wormable RCE bug on Windows and Windows Server (CVE-2025-47981).
www.helpnetsecurity.com
July 9, 2025 at 11:47 AM
Microsoft fixes critical wormable Windows flaw (CVE-2025-47981)
📖 Read more: www.helpnetsecurity.com/2025/07/09/m...
#cybersecurity #cybersecuritynews #patchtuesday #Ivanti @thezdi.bsky.social @dustinchilds.bsky.social @tenablesecurity.bsky.social @satn.am @microsoft.com
📖 Read more: www.helpnetsecurity.com/2025/07/09/m...
#cybersecurity #cybersecuritynews #patchtuesday #Ivanti @thezdi.bsky.social @dustinchilds.bsky.social @tenablesecurity.bsky.social @satn.am @microsoft.com
"What makes this particularly concerning is that it's completely wormable – infected robots can automatically compromise other robots in BLE range," wrote Víctor Mayoral-Vilches, Andreas Makris, and Kevin Finisterre. "This vulnerability allows the attacker to completely take over the device."
As humanoid robots enter the mainstream, security pros flag the risk of botnets on legs
As humanoid robots enter the mainstream, security pros flag the risk of botnets on legs
Have we learned nothing from sci-fi films and TV shows?
Interview Imagine botnets in physical form and you've got a pretty good idea of what could go wrong with the influx of AI-infused humanoid robots expected to integrate into society over the next few decades.…
dlvr.it
December 9, 2025 at 3:14 PM
"What makes this particularly concerning is that it's completely wormable – infected robots can automatically compromise other robots in BLE range," wrote Víctor Mayoral-Vilches, Andreas Makris, and Kevin Finisterre. "This vulnerability allows the attacker to completely take over the device."
The great worm
Never worm a day in your life
The worm continues
A wormable plan
All worm and no play
Wormers of the world, unite
Priceless worm of art
Worming like a dog
Getting all wormed up
Wormplace safety inspection
Expendable wormforce
Put it to worm
This will never worm
Never worm a day in your life
The worm continues
A wormable plan
All worm and no play
Wormers of the world, unite
Priceless worm of art
Worming like a dog
Getting all wormed up
Wormplace safety inspection
Expendable wormforce
Put it to worm
This will never worm
Mark my worms
Worm of mouth
Wormlessly
Worm of god
Worm of the day
Have you heard the good worm
Worm to your mother
Man of his worm
A worm to the wise
What’s the magic worm
Speak louder than worms
Worth a thousand worms
Famous last worms
Fine worms butter no parsnips
Power worm: kill
Worm of mouth
Wormlessly
Worm of god
Worm of the day
Have you heard the good worm
Worm to your mother
Man of his worm
A worm to the wise
What’s the magic worm
Speak louder than worms
Worth a thousand worms
Famous last worms
Fine worms butter no parsnips
Power worm: kill
October 2, 2025 at 6:41 PM
The great worm
Never worm a day in your life
The worm continues
A wormable plan
All worm and no play
Wormers of the world, unite
Priceless worm of art
Worming like a dog
Getting all wormed up
Wormplace safety inspection
Expendable wormforce
Put it to worm
This will never worm
Never worm a day in your life
The worm continues
A wormable plan
All worm and no play
Wormers of the world, unite
Priceless worm of art
Worming like a dog
Getting all wormed up
Wormplace safety inspection
Expendable wormforce
Put it to worm
This will never worm
Zero-click. Wormable. Network-spreading.
New flaws in Apple’s AirPlay protocol (🔓 AirBorne) could let hackers hijack your device without a click—then ride your Wi-Fi into corporate networks.
New flaws in Apple’s AirPlay protocol (🔓 AirBorne) could let hackers hijack your device without a click—then ride your Wi-Fi into corporate networks.
Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public Wi-Fi
Zero-click AirPlay vulnerabilities exposed in March 2025 could let malware spread across networks undetected.
thehackernews.com
May 5, 2025 at 8:28 PM
Zero-click. Wormable. Network-spreading.
New flaws in Apple’s AirPlay protocol (🔓 AirBorne) could let hackers hijack your device without a click—then ride your Wi-Fi into corporate networks.
New flaws in Apple’s AirPlay protocol (🔓 AirBorne) could let hackers hijack your device without a click—then ride your Wi-Fi into corporate networks.
These seem bad
www.oligo.security/blog/airborne
www.oligo.security/blog/airborne
AirBorne: Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk | Oligo Security | Oligo Security
Oligo Security reveals AirBorne, a new set of vulnerabilities in Apple’s AirPlay protocol and SDK. Learn how zero-click RCEs, ACL bypasses, and wormable exploits could endanger Apple and IoT devices w...
www.oligo.security
April 29, 2025 at 5:51 PM
These seem bad
www.oligo.security/blog/airborne
www.oligo.security/blog/airborne
SourceHut account takeover via build logs (XSS in ansi2html.py) https://lobste.rs/s/ky1cr0 ##security
SourceHut account takeover via build logs (XSS in ansi2html.py) | CVE-2026-92973
A wormable vulnerability allowed anyone able to inject text in a build log on builds.sr.ht (or other instances) to take over accounts who viewed them
blog.arusekk.pl
September 24, 2026 at 8:45 PM
SourceHut account takeover via build logs (XSS in ansi2html.py) https://lobste.rs/s/ky1cr0 ##security