Blogger rejects LLMs for research and criticizes AI security marketing
The post contrasts Calif, OpenAI and Wiz narratives on PHP flaws and says a Tailscale hash drop was not responsibly disclosed.
1
Stories per day · 30 days
2 RSS
Relatedprivilege-escalation7ssh7headscale6lateral-movement3wireguard3ai-marketing1mesh-vpn1php1port-forwarding1remote-access1responsible-disclosure1security-research1tailnet1tailscale-ssh1unix-sockets1
12 stories, newest first · one card per story
Stories tagged #tailscale
Tailscale patches SSH flaws enabling lateral movement inside tailnets
Fixes shipped in Tailscale v1.104.4; abuse still requires a device the tailnet policy already allows to use SSH.
Tailscale 1.104.4 fixes SSH flaws reaching root-only sockets
A policy-permitted SSH session could swap socket paths and reach Docker or the local API; no real attacks are reported.
Tailscale investigating Tailscale SSH privilege-escalation flaws
Authorized Tailscale SSH users may exceed their local-user permissions; a patched client is targeted for October 27.
Tailscale prepares client fix after uncoordinated Tailworm disclosure
Six high-severity findings in client 1.104.2 and headscale 0.29.5 can yield root via SSH forwarding; no exploitation is reported.
Unpatched Tailscale SSH flaws can give authorized users root
Cyberdione Labs detailed 11 Tailworm issues in Tailscale 1.104.2 and headscale v0.29.5; patches were expected October 27.
Tailscale SSH flaws can yield root on connected servers
Lab tests on Tailscale 1.104.2 and headscale 0.29.5 showed root via privileged socket forwarding; no fixes yet.
Unpatched Tailscale SSH flaws can yield root from one compromised device
Lab tests on Tailscale 1.104.2 and headscale 0.29.5 found no CVE, bulletin, or fix as of October 25.
Researcher reports Tailscale SSH flaws that can yield root across servers
Eleven unconfirmed findings in tailscale 1.104.2 and headscale 0.29.5 have no CVE, bulletin, or fix.
web-edit 0.1a0
Simon Willison released web-edit 0.1a0, a Tailscale file editor that keeps credentials out of the LLM.
Kothamine malware uses Tailscale’s tailcat to evade network detection
Malwarebytes details Kothamine, a Windows RAT spread via npm that tunnels commands through Tailscale tailcat.
Stop Telling People Not To Click Links
Tailscale CEO argues link-clicking is not the problem; deploying phishing-resistant authentication like passkeys and WebAuthn eliminates entire attack classes.
1