@waddey 🪅

‼️ Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers Details: cybersecuritynews.com/tailsc… A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report lists 11 findings in five groups. They cover Tailscale’s SSH server, its serve and app connector features, the DERP relay client, and headscale, an open-source server that manages Tailscale networks. The researcher tested Tailscale 1.104.2 and headscale 0.29.5 between October 22 and October 24, 2026. The most serious group involves Tailscale SSH. Its SSH server runs inside tailscaled, a background program with full root privileges on the machine. #cybersecuritynews

Maldives Digital Service (MDS), in coordination with the National Cyber Security Agency (NCSA), is implementing necessary security patches, vulnerability mitigation measures, and system hardening activities in response to recently identified critical vulnerabilities affecting PHP web technologies, identified as CVE-2026-109618 and CVE-2026-109619. These proactive measures are being undertaken to address potential security risks, prevent unauthorized access, and strengthen the protection and resilience of government digital infrastructure and services. The PHP development team has released security updates in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 to address these vulnerabilities, and affected systems are strongly advised to be updated immediately. Temporary service disruptions may occur while these security measures are being implemented. MDS will work to minimize any impact and restore affected government digital services as quickly as possible. MDS, in close coordination with NCSA, remains committed to strengthening national cybersecurity readiness and ensuring the continued security, reliability, and resilience of government digital services. 🛡️ Strengthening Cybersecurity. Securing Government Digital Services. Official PHP Security Advisory 🔗 php.net/archive/2026.php #MaldivesDigitalService #MDS #NCSA #CyberSecurity #SecurityAdvisory #VulnerabilityMitigation #DigitalResilience

The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated. For more⬇️ ncsc.gov.uk/news/critical-se…

ރަސްމާލޭން އެއް ގައުމެއްގެ ރައްޔިތުންނަށް އެންމެ ގިނައިން ގަނެވޭނީ 25 ޕަސެންޓް ޕްރޮޕަޓީ ift.tt/MfvXBAe