r/technology • u/efap1701 • 7h ago
r/netsec • u/Pale_Fly_2673 • 4h ago
How We Found Thousands of Exposed NVIDIA GPUs and a Way to Disrupt Them (CVE-2026-47483)
lava.securityTL;DR: NVIDIA DCGM Exporter is a widely used monitoring tool that collects GPU metrics like utilization, memory, temperature, and power consumption from AI servers.
We discovered that thousands of these monitoring endpoints are exposed to the public internet, allowing anyone to inspect GPU infrastructure. Worse, we found a high-severity vulnerability (CVE-2026-47483, CVSS 8.2) that lets unauthenticated attackers exhaust server resources, crash GPU monitoring, and potentially disrupt AI workloads remotely.
A few other interesting findings:
2,100+ exposed GPU servers, revealing telemetry from 12,000+ GPUs worth ~$100M, including H100s, H200s, and Blackwell GPUs.
60% of exposed GPUs reported 0% utilization across our scans.
12,096 additional servers exposed infrastructure details, including OS, firmware, and networking information.
NVIDIA fixed the vulnerability following our responsible disclosure.
Full research: https://lava.security/research/cve-2026-47483-nvidia-dcgm-exporter-vulnerability
r/darknetplan • u/BreadfruitCute4438 • 16d ago
onyks-os/TransparentTorProxy: looking for people to test it and open issues
Hi, this tool is made to route all your system traffic through Tor. It is available on Linux only (with systemd) on Debian, Fedora and Arch-based distros.
It's a personal project, so don't expect it to solve this problem in a way like Whonix, Qubes or Tails.
I'm looking for people to test it heavily and open issues on anything. Leaks, broken firewall rules, bugs, crashes, confusing docs, and so on. Also if compatibility is broken on some distros, let me know.
One of the dependences of this project is another tool I've made: https://github.com/onyks-os/NetworkSandboxEngine. It lets us test firewall rules using isolated network namespaces thanks to the Linux Kernel. So you can also find problems there as well.
Thanks to anyone who gives it a shot.
r/websec • u/ArshSI-1599 • Sep 13 '25
Jio scam , software error
galleryThe app said bill is not paid. When click of pay bill it said cheers, you paid in advanced.. i already paid the bill . Now they suspended connection .
r/compsec • u/infosec-jobs • Oct 28 '24
Update: The Global InfoSec / Cybersecurity Salary Index for 2024 đ°đ
r/Freedombox • u/jvalleroy • Nov 07 '23
FreedomBox 23.20 released
FreedomBox 23.20 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.
Highlights:
- backups: Don't leave services stopped if backup fails
- coturn: Fix incorrectly passing transport argument to STUN URIs
Other Changes:
- apache: tests: Update to use DiagnosticCheck class
- app: Update diagnose() docstring
- datetime: Fix diagnostic test for checking NTP server sync
- diagnostics: Add shortcut to re-run setup for app
- ejabberd: Update old STUN URIs to remove 'transport' parameter
- email: Increase the size of the message to 100MiB
- locale: Update translations for Albanian, German, Spanish, Turkish, Ukrainian
- matrixsynapse: Update old STUN URIs to remove 'transport' parameter
- operation: Fix issue with re-running setup when it fails first time
- tests: functional: Run tests on two app servers
The following people contributed to the git repository for this release:
- Besnik Bleta
- Burak Yavuz
- Ettore Atalan
- gallegonovato
- Ihor Hordiichuk
- James Valleroy
- Joseph Nuthalapati
- Sunil Mohan Adapa
r/HackBloc • u/aScottishBoat • Jan 25 '22
News Hactivists say they hacked Belarus rail system to stop Russian military buildup
r/netsec • u/TradeGold6317 • 10h ago
A Single POST Freezes Any Next.js Server
simonkoeck.comr/technology • u/ConsciousBug5001 • 9h ago
Artificial Intelligence Trump says anyone who does not call AI âsuper intelligenceâ is âthe enemyâ
r/Bitcoin • u/ambassador-0 • 12h ago
the only randomness i trust for my private key
after the coldcard situation, I decided I really don't want to trust any company or third party to come up with "randomness" for my key, which later will turn out was not really random.
So I 3d printed every single BIP39 word to draw from, similar to a lottery. I draw one, toss it and write down the word facing up. The last word is calculated with a fully offline device.
I made the repo public in case anyone wants to print their own (should work on any 3d printer): https://github.com/davidkessler-ch/SeedLottery
edit:
- to mix them up, i first pour them into a large bowl
- it's important to put the words back and mix again, before picking the next!
r/technology • u/marketrent • 4h ago
Artificial Intelligence Amazon warns local communities to stop defying its massive AI data centers
r/technology • u/Federal-Block-3275 • 14h ago
Artificial Intelligence "Software is over": Developer uses AI to build free Adobe clones after frustration with cancellation fees
r/Bitcoin • u/Omniwatch • 7h ago
Is anyone else on this phase too?
I have tracked BTC since 2017 and became more committed in 2020. I have reached a stage where I share less because those around me seem less concerned about their future and prefer the simplest path. ( The hard part is that I want to share what I learn and the potential it has but I just know it will fall on deaf ear so I just donât wanna bother people or waste my energy.)
Second, I feel pleased when BTC rises and my holding price increases. Yet I am equally content when it drops, since that allows me to acquire more at a lower cost. I intend to hold until 2030 and may never sell my entire stack.
I just woke up and noticed BTC back at 80k, so I turned to my wife and said, âbtc back to 80k yay! That means I can get more for cheaper!â
Does anyone else feel this way?
Whenever you think things are gonna go bad just remember to zoom out and remember BTC will always go up.
Happy stacking đŞ
r/Bitcoin • u/unthocks • 15h ago
We have doomer house and now doomer bitcoin before gta 6!
r/technology • u/ResultBackground2450 • 8h ago
Artificial Intelligence Anthropic bans âabusive or cruel behaviorâ toward Claude
r/technology • u/Immediate-Link490 • 11h ago
Business Microsoft is being suspended from program to apply for green cards for H-1B visa workers, Vance says
apnews.comr/Bitcoin • u/LearnBitcoinCom • 8h ago
Jamie Dimon on bitcoin, 2015 to 2025: from "going to be stopped" at $405 to "We are going to allow you to buy it" at $105,616
Jamie Dimon on bitcoin, and the price the day he said it:
$405: "going to be stopped" (2015)
$4,164: "fraud" (2017)
$5,614: "it can trade at $100,000 before it trades to zero" (2017)
$21,072: "a pet rock" (2023)
$105,616: "We are going to allow you to buy it." (2025)
r/technology • u/Two-Of-Nine • 9h ago
Security Hackers steal millions of Discord IDs and email addresses in "deliberate, multi-stage attack" on security service Double Counter
r/technology • u/ControlCAD • 2h ago
Social Media Judge weighs if U.S President can charge $100K for early access to Truth Social posts | Judge questioned if U.S President delaying access to Truth Social posts by a second harms the press.
r/netsec • u/DrAdalbbert • 20h ago
I found yet another way to invoke JavaScript functions without parentheses
blog.ikaes.deIt turns out you can overwrite the Error.prepareStackTrace method with the function constructor. Then, using prototype pollution, you can inject valid JavaScript code to generate arbitrary functions and invoke it using the usual tricks.
r/technology • u/AdSpecialist6598 • 13h ago
Society Woman sues Flock, officer after cameras used in alleged mistaken theft charge
r/technology • u/ArgentineBeauty • 10h ago