Tailscale fixed four SSH and Serve vulnerabilities, TS-2026-014 to TS-2026-017, in v1.104.4 after a researcher's "Tailworm" disclosure. What each flaw does, who is exposed, the forwarding mitigation and how to harden Tailscale SSH policies.
Read story ↗SkyW4lker is a Microsoft 365 phishing kit that abuses OAuth device-code sign-in: victims log in on Microsoft's real page, pass MFA and hand their tokens to the attacker. Here is how it works, how to detect it with KQL and how to block it with…
Read story ↗The October 28, 2026 Intelligence Edition of MAG212 CYBER: 28 verified pages on the Node.js Brotli flaw, Tailscale SSH, Magento PolyShell, Oracle EBS CVE-2026-101767, SkyW4lker device-code phishing, the GMO breach and post-quantum deadlines, with detection rules and a 72-hour plan.
Read story ↗Explore PHP2Shell, Node2Shell, SafePay ransomware and AI coding agent risks in the October 26 issue of MAG212 CYBER, with practical defense guidance and sources.
Read story ↗Flip through the magazine Turn the pages below, or open full-screen mode for the best reading experience.
Read story ↗