--- title: This Week In Security: BugTraq, AI Hacks, And Being Dumb... description: A roundup covers the revival of the BugTraq disclosure mailing list after a multi-year hiatus, a DEF CON attendee's alleged Wi-Fi deauth attack on a Delta... canonical: https://daily.dev/posts/this-week-in-security-bugtraq-ai-hacks-and-being-dumb-on-planes-v2lsh1rlp twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: This Week In Security: BugTraq, AI Hacks, And Being Dumb On Planes | daily.dev og:description: A roundup covers the revival of the BugTraq disclosure mailing list after a multi-year hiatus, a DEF CON attendee's alleged Wi-Fi deauth attack on a Delta... og:url: https://daily.dev/posts/this-week-in-security-bugtraq-ai-hacks-and-being-dumb-on-planes-v2lsh1rlp og:image: https://api.daily.dev/og/posts/v2LSh1RLP.png og:image:alt: This Week In Security: BugTraq, AI Hacks, And Being Dumb On Planes og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # This Week In Security: BugTraq, AI Hacks, And Being Dumb On Planes **[Hackaday](https://daily.dev/sources/hackaday)** · 10 min read · 1 upvotes · 0 comments ## Summary A roundup covers the revival of the BugTraq disclosure mailing list after a multi-year hiatus, a DEF CON attendee's alleged Wi-Fi deauth attack on a Delta flight, a data breach at Steam's European hardware order handler CEVA, three patched Zoom vulnerabilities dubbed 'Zoomsday' enabling remote code execution, a Claude-backed AI agent that hacked a gym booking system's cancellation API to jump a waitlist, a new US government memo authorizing private companies to conduct cyber operations, the LiteLLM supply chain compromise stemming from the earlier Trivy worm exposing 153GB of credentials from Boeing, Orange, Roku and others, and unauthenticated command injection flaws found in FIMER solar inverters that could let attackers destabilize the power grid or endanger repair workers. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What are the Zoomsday vulnerabilities in Zoom and which CVEs are involved? Zoomsday refers to three patched Zoom vulnerabilities: CVE-2026-53413, a buffer overflow from improper length checking of incoming data; CVE-2026-53414, a buffer size bug where an allocated buffer is too small for a read operation; and CVE-2026-53415, a use-after-free bug allowing code execution. All three could let a call participant execute arbitrary code on other participants across all Zoom platforms. _Teams relying on Zoom for business calls can track disclosures like Zoomsday through daily.dev to patch before exposure._ ### How did the LiteLLM supply chain compromise happen and how much data was stolen? LiteLLM, an AI proxy and gateway package used by thousands of enterprises, was compromised because it used the security scanner Trivy in its automated build workflow after Trivy itself was infected with a credential-stealing worm in March 2026. The worm used LiteLLM's stolen publishing credentials to push infected package versions, and Hudson Rock obtained a 153 GB archive of stolen credentials including GitHub, GitLab, Slack, and SSH access from firms like Boeing, Orange Telecom, and Roku. _Engineers who depend on AI proxy tooling like LiteLLM can follow supply chain incidents like this on daily.dev to check exposure early._ ### What vulnerabilities did SaiFlow find in FIMER solar inverters? SaiFlow found that FIMER hybrid inverters expose an unauthenticated REST API due to an nginx misconfiguration, allowing direct command injection into the proprietary Aurora protocol without any credentials. This lets an attacker remotely force power feeding to the grid even when it's disabled, corrupt flash storage, change country standards, and manipulate battery charge and discharge rates, posing fire and electrocution risks; FIMER has not meaningfully responded months after disclosure. _Developers building on inverter or grid-facing embedded systems can watch for vendor patch updates like this via daily.dev._ ## Similar posts on daily.dev - [This Week In Security: Stealing Email With AI, AMD Nerfs Chips, The World Cup Nearly Rickrolled, And GPSD Bugs](https://daily.dev/posts/this-week-in-security-stealing-email-with-ai-amd-nerfs-chips-the-world-cup-nearly-rickrolled-and-xarslivpw) · Hackaday · 0 upvotes · 0 comments - [This Week In Security: Annoyed Researchers, Dangling DNS, And Hacks That Could Have Been Worse](https://daily.dev/posts/this-week-in-security-annoyed-researchers-dangling-dns-and-hacks-that-could-have-been-worse-zkzz1p3fl) · Hackaday · 0 upvotes · 0 comments - [4th May – Threat Intelligence Report](https://daily.dev/posts/4th-may-threat-intelligence-report-o8uni6wf4) · Check Point Research · 0 upvotes · 0 comments - [ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More Stories](https://daily.dev/posts/threatsday-bulletin-wi-fi-hack-npm-worm-defi-theft-phishing-blasts-and-15-more-stories-mhdyvycca) · The Hacker News · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#llm](https://daily.dev/tags/llm) [View this post on daily.dev](https://daily.dev/posts/this-week-in-security-bugtraq-ai-hacks-and-being-dumb-on-planes-v2lsh1rlp) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"This Week In Security: BugTraq, AI Hacks, And Being Dumb On Planes","url":"https://daily.dev/posts/this-week-in-security-bugtraq-ai-hacks-and-being-dumb-on-planes-v2lsh1rlp","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/this-week-in-security-bugtraq-ai-hacks-and-being-dumb-on-planes-v2lsh1rlp"},"datePublished":"2026-08-14T14:09:07.195Z","dateModified":"2026-09-14T08:06:21.542Z","description":"A roundup covers the revival of the BugTraq disclosure mailing list after a multi-year hiatus, a DEF CON attendee's alleged Wi-Fi deauth attack on a Delta...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/54db5e14c25f516943a40b2f59d47928?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/54db5e14c25f516943a40b2f59d47928?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hackaday","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hackaday","logo":"https://media.daily.dev/image/upload/s--JhDfhy70--/f_auto,q_auto/v1767541814/logos/hackaday","url":"https://daily.dev/sources/hackaday"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/this-week-in-security-bugtraq-ai-hacks-and-being-dumb-on-planes-v2lsh1rlp","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,llm","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hackaday","item":"https://daily.dev/sources/hackaday"},{"@type":"ListItem","position":3,"name":"This Week In Security: BugTraq, AI Hacks, And Being Dumb On Planes"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/this-week-in-security-bugtraq-ai-hacks-and-being-dumb-on-planes-v2lsh1rlp#faq","mainEntity":[{"@type":"Question","name":"What are the Zoomsday vulnerabilities in Zoom and which CVEs are involved?","acceptedAnswer":{"@type":"Answer","text":"Zoomsday refers to three patched Zoom vulnerabilities: CVE-2026-53413, a buffer overflow from improper length checking of incoming data; CVE-2026-53414, a buffer size bug where an allocated buffer is too small for a read operation; and CVE-2026-53415, a use-after-free bug allowing code execution. All three could let a call participant execute arbitrary code on other participants across all Zoom platforms. Teams relying on Zoom for business calls can track disclosures like Zoomsday through daily.dev to patch before exposure."}},{"@type":"Question","name":"How did the LiteLLM supply chain compromise happen and how much data was stolen?","acceptedAnswer":{"@type":"Answer","text":"LiteLLM, an AI proxy and gateway package used by thousands of enterprises, was compromised because it used the security scanner Trivy in its automated build workflow after Trivy itself was infected with a credential-stealing worm in March 2026. The worm used LiteLLM's stolen publishing credentials to push infected package versions, and Hudson Rock obtained a 153 GB archive of stolen credentials including GitHub, GitLab, Slack, and SSH access from firms like Boeing, Orange Telecom, and Roku. Engineers who depend on AI proxy tooling like LiteLLM can follow supply chain incidents like this on daily.dev to check exposure early."}},{"@type":"Question","name":"What vulnerabilities did SaiFlow find in FIMER solar inverters?","acceptedAnswer":{"@type":"Answer","text":"SaiFlow found that FIMER hybrid inverters expose an unauthenticated REST API due to an nginx misconfiguration, allowing direct command injection into the proprietary Aurora protocol without any credentials. This lets an attacker remotely force power feeding to the grid even when it's disabled, corrupt flash storage, change country standards, and manipulate battery charge and discharge rates, posing fire and electrocution risks; FIMER has not meaningfully responded months after disclosure. Developers building on inverter or grid-facing embedded systems can watch for vendor patch updates like this via daily.dev."}}]} ```