A Laptop, a Container, and $6.3 Billion: What the Binance Hack Means for Anyone Running Infrastructure
On October 29, roughly $6.3 billion left Binance's hot wallets in minutes. Strip away the crypto, and this is the […]
PwnEscape: One Checksum That Broke Out of the Guest [Under the Hood]
PwnEscape is not a hypervisor bug. It is a host-kernel IPv4 flaw where a guest’s checksum-offload metadata rewrites a header the kernel already acted on — leaking host memory, crashing the host, or, in the researcher’s lab, running code as root.
setuid, setgid, and the Sticky Bit: How Linux Permissions Really Work [Under the Hood]
unixshadow — permissions setuid, setgid, and the Sticky Bit The three permission bits every sysadmin uses and few can explain […]
The Cursor Marketplace Backdoor: How a svc-telemetry SSH Key Landed in authorized_keys
unixshadow — cursor-backdoor The Cursor Marketplace Backdoor A trusted editor extension auto-updated, and a stranger’s SSH key quietly moved into […]
Node2Shell: The Brotli Bug That Turned HTTP/2 Into Remote Code Execution
node — CVE-2026-111497 ~ node –version # if this prints anything older than the fixed lines below, keep reading Node2Shell: […]
The CVE Flood: Why 2026 Broke the Vulnerability Count
analyst@unixshadow: ~/cve-count/2026.log analyst@unixshadow:~# curl -s “https://services.nvd.nist.gov/rest/json/cves/2.0?pubStartDate=2026-10-01T00:00:00.000Z&pubEndDate=2026-10-26T00:00:00.000Z&resultsPerPage=1” # totalResults: 13934 The CVE Flood: Why 2026 Brokethe Vulnerability Count October 2026 published […]