Tailscale prepares client fix after uncoordinated Tailworm disclosure
Six high-severity findings in client 1.104.2 and headscale 0.29.5 can yield root via SSH forwarding; no exploitation is reported.
Stories per day · 30 days
Relatedssh3tailscale3headscale2privilege-escalation2hqc1key-exchange1lateral-movement1mceliece1mesh-vpn1post-quantum1tailnet1
3 stories, newest first · one card per story
Stories tagged #wireguard
HqcLethe streams HQC encapsulation for stateless post-quantum handshakes
Chinese-remainder splitting keeps each Raspberry Pi worker in fixed memory and is checked in Rocq and ProVerif.
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
CERT-UA says Sandworm-linked UAC-0145 poses as recruiters in fake job interviews to deliver a trojanized WireGuard VPN that runs attacker commands on victims' hosts.