A security vulnerability demonstrates how even basic Unix commands like "cat" can be weaponized through specially crafted files. The discovery highlights overlooked attack vectors in everyday terminal operations.
Security researchers have documented how a straightforward command—reading a text file with `cat`—can be exploited through malicious file contents. The vulnerability relies on embedded escape sequences and control characters that execute unintended actions when displayed in a terminal.
The attack works because terminal emulators interpret certain sequences as commands rather than plain text. A crafted README file can trigger behaviors ranging from data exfiltration to command execution, depending on the terminal and its configuration.
This represents a class of "mad bugs"—vulnerabilities hiding in plain sight within standard tools. The research was shared on Hacker News, generating significant discussion about terminal safety and the assumptions developers make about input handling.
The finding underscores that security vulnerabilities aren't limited to complex software. Even minimal operations warrant scrutiny when user-controlled data intersects with system interpreters.
Hacking group FulcrumSec claims to have stolen 86 GB of data from Manchester Airports Group. Security researchers confirmed the breach included detailed customer, booking, and travel records.
Multiple extensions in the Chrome Web Store and Microsoft Edge delivered malware that stole cryptocurrency, browser data, and user history while injecting fraudulent ClickFix lures.
A new survey reveals strong public opposition in the UK to government surveillance of encrypted communications. The findings highlight growing concern over privacy rights as lawmakers continue debating message scanning proposals.
PaperCut has released a second emergency security update for its NG and MF print management software after researchers discovered bypass methods for the initial fixes. The vulnerabilities are currently being exploited in the wild.