Caddy pattern exposes only Immich and Nextcloud share links
The public site returns 404 unless the app itself confirms the share key; everything else stays on the VPN.
5 stories, newest first · one card per story
The public site returns 404 unless the app itself confirms the share key; everything else stays on the VPN.

Four chained bugs give unauthenticated remote code execution; Plex fixed them in 1.43.3.10861 on August 3.

A write-up shows self-hosted HTTP tunnels using OpenSSH reverse forwards and nginx signed URLs.

A Chinese-language cybercriminal group is compromising Brazilian government and education servers to host gambling-themed phishing sites via a reverse-proxy network.

Check Point links Gambling Goblin, a Chinese-speaking cluster, to malicious Apache modules hijacking Brazilian government servers to promote betting sites.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views