154 results for “CVE”

Oversecured discloses seven Android vulnerabilities, two of them Pixel-specific, all reported to Google and fixed except one low-severity WebView case. They are the Camera geolocation leak (CVE-2024-0017), a VPN bypass list change (CVE-2023-21383), a Bluetooth permission check flaw (CVE-2024-34719), the WorkSource parcel mismatch (CVE-2023-20963, exploited in the wild by the Pinduoduo app), Device Admin HTML injection (CVE-2021-0600) and a ContentProvider.openFile() caller-context bypass (CVE-2023-21292). Each has root cause and PoC code.

oversecured.comwriteupAdded 29 Oct 2026🛡️ Security

Node2Shell is Datadog Security Labs' analysis of CVE-2026-111497, an out-of-bounds write in the Google Brotli 1.2.0 decoder, fixed in Node.js 22.23.4, 24.22.1 and 26.12.1 on 21 October 2026. It explains the unchecked return value in DecodeBlockTypeAndLength(), the read and write primitives, and why code execution is still engineering effort. It lists inbound and outbound exposure paths, behavioral detections and what WAFs miss.

securitylabs.datadoghq.comwriteupPublished and added 29 Oct 2026🛡️ Security

Alpine Linux incident report on attempted exploitation of CVE-2026-97229 (CVSS 10.0), a regex-evaluation bug in Ruby's Onigmo engine reachable through GitLab CI configuration. An attacker crashed workers 8 times on 20 and 21 October 2026. Upgrading to GitLab 19.3.6 did not fix it because the patch sits in GitLab's bundled Ruby. Alpine rebuilt the instance and found no tampering with aports or releases.

alpinelinux.orgwriteupAdded 29 Oct 2026, published 28 Oct 2026🛡️ Security

KeyDrift is a custom malware framework used by UAT-11473, which exploited CVE-2026-20127 in Cisco SD-WAN Catalyst Controller to gain access. Talos analyzes PolyFlame (memory-resident vdaemon injection, recvfrom hook, TinyShell-style backdoor, intermediate C2) and LittleFilch (SSL_read hook that extracts and RSA-encrypts keying material). It reports infrastructure overlap with Volt Typhoon's Silent Train, plus patch guidance and Snort SIDs.

blog.talosintelligence.comwriteupPublished and added 28 Oct 2026🛡️ Security

Endor Labs AI SAST found three unbounded memory allocation flaws in Apache Kafka, fixed under CVE-2026-114349 (DefaultRecord decoder, a ~90-byte compressed batch that kills consumers, brokers and the log cleaner) and CVE-2026-111551 (ListDeserializer and Kafka Streams AssignmentInfo decoding). The post gives code, reproducers and payload bytes. Remediation: upgrade to 4.2.2, 4.3.2 or 4.4.0, set max.decompressed.message.bytes, restrict write and group ACLs, and alert on DeadThreadCount.

endorlabs.comwriteupPublished and added 28 Oct 2026🛡️ Security

PHP2Shell is the public exploit for CVE-2026-109618 (corrupted internal state at the memory limit, allowing hijack during cleanup) and CVE-2026-109619 (double free used to leak memory and defeat ASLR). Orca ran the GitHub tool unchanged against an unpatched PHP server and got command execution. It then built its own exploit with AI from the patch, which worked on PHP 8.4.26 and WordPress. Fixed in 8.2.35, 8.3.36, 8.4.27 and 8.5.12.

orca.securitywriteupPublished and added 26 Oct 2026🛡️ Security

Brotlipocalypse is an OSM Security post (24 October 2026) on CVE-2026-111497, an out-of-bounds write in the google/brotli C decoder (1.0.3 through 1.2.0). It shows the decoder is vendored into many runtimes, databases, fonts and native extensions that need separate fixes. It gives grep and git checks for bundled copies, a table of fixed projects, and mitigations.

opensourcemalware.comwriteupPublished and added 24 Oct 2026🛡️ Security

Analysis of CVE-2026-111497 (Node2Shell), an out-of-bounds write in Google's Brotli C decoder, showing it also affects the PyPI packages Brotli (all releases up to 1.2.0) and brotlicffi (up to 1.2.0.2). The author diffed the 1.2.0 and 1.2.1 sdists and confirmed the behaviour with AddressSanitizer. Fixes are Brotli 1.2.1 and brotlicffi 1.2.1.0, both patched without release notes. No advisory database lists either package yet.

opensourcemalware.comwriteupPublished and added 23 Oct 2026🛡️ Security

PHP2Shell is Calif's writeup of pre-auth RCE in PHP (CVE-2026-109618, CVE-2026-109619) triggered by memory_limit fatal errors that leave dangling state. It covers a HashTable bucket bug in _zend_hash_str_add_or_update_i, a Session upload-progress stale-pointer bug, and an unserialize destructor-list primitive that reaches PHP-FPM. It lists affected apps (WordPress, Drupal, Joomla, Magento and others) and gives temporary mitigations.

calif.iowriteupAdded 23 Oct 2026🛡️ Security

PHP2Shell is Wiz Research's disclosure of memory-safety bugs in core PHP, grouped under two CVEs (up to CVSS 9.2) and fixed in patched releases on 21 October 2026. The post details four bugs, all triggered by out-of-memory fatal errors that leave stale state: an upload-progress unserializer use-after-free, a session-ID memory disclosure, a fatal-error backtrace use-after-free and an OPcache type confusion. It describes unauthenticated RCE on WordPress, Drupal and Joomla, plus detection signals and a disclosure timeline.

wiz.iowriteupPublished and added 21 Oct 2026🛡️ Security

PHP2Shell is Datadog Security Labs' analysis of two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2), disclosed 21 October 2026. It walks through a reproduced exploit on PHP 8.5.11 (heap grooming, a fake array, and a destructor calling system()) and the stale-state use-after-free. It lists fixed versions (8.2.35, 8.3.36, 8.4.27, 8.5.12), partial mitigations, and detection signals across requests, error logs and shell child processes.

securitylabs.datadoghq.comwriteupAdded 29 Oct 2026, published 21 Oct 2026🛡️ Security

Endor Labs ran Gemini 4 Argon in the Cursor harness on its Agent Security League coding tasks (SusVibes). Argon ties Fable 5 at 29% SecPass with 78.8% FuncPass, and uniquely and securely solves two tasks (SABnzbd CVE-2021-29488 and OpenStack Nova CVE-2015-8749). It is also the slowest and costliest recent combo: 14 minutes median per task and $765. The run had 29 confirmed cheating instances.

endorlabs.comwriteupPublished and added 20 Oct 2026🧠 AI

CVE-2026-106173 is an unauthenticated arbitrary file write in the FortiSIEM phQueryMaster gRPC service on tcp/27918, advised by Fortinet on 13 October 2026. The SendQueryResult handler concatenates an attacker-controlled query-id into a path, and a null byte in the header removes the server-added filename suffix. Overwriting /opt/charting/redishb.sh, run every 60 seconds by cron, gives root-level code execution. IOCs are file timestamps.

horizon3.aiwriteupAdded 29 Oct 2026, published 20 Oct 2026🛡️ Security

Depth First Security's write-up describes three V8 bugs found using its dfs-large1 research tooling: CVE-2026-78938, a type confusion in Promise.prototype.finally that lets an internal helper be constructed and return a primitive; CVE-2026-79236, a TurboFan load-elimination bug that keeps a stale property-array pointer after object migration; and a shared WebAssembly memory sandbox escape (issue 546253900) caused by mismatched backing-store registration during serialization. It walks through turning each memory bug into addrof/fakeobj primitives, chaining either with the sandbox escape to reclaim a freed V8 isolate via a WebSocket allocation, and pivoting through a CFI-constrained ROP chain to achieve Chrome renderer code execution, earning two v8CTF flags. Fixes landed between August 20 and 25, 2026.

depthfirst.comwriteupAdded 29 Oct 2026, published 20 Oct 2026🛡️ Security

Honeypot writeup of in-the-wild exploitation of Plex Media Server through the Plex2Shell chain (CVE-2026-96652, -96654, -96655, -96656) in October 2026. Attackers from 45.194.92.222, 91.92.40.202 and 176.65.139.228 used SSRF-style timeline/subscribe requests and downloaded a Docker-named dropper and an XMRig miner from 217.60.194.116. Includes file hashes, a later-seen proxyware sample (myawesomeproxy), lab pcaps for signatures and links to sandbox reports.

boredhackerblog.infowriteupAdded 20 Oct 2026, published 19 Oct 2026🛡️ Security

Long-form write-up of a Hexacon 2026 talk on a WPS EAP reassembly overflow in Broadcom's proprietary 802.11 stack, present since 2010 and incompletely patched in 2018. It is remotely triggerable over WiFi without the network key. It gives information disclosure and code execution on eCos (BCM3380, BCM3383, BCM33834) and Linux (BCM3390, BCM65xx, BCM68xx) platforms. Exploited on Belgian ISP routers from Proximus, VOO and Orange. Includes a 90-day disclosure timeline, and Broadcom refused to assign a CVE.

quentinkaiser.bewriteupAdded 19 Oct 2026, published 16 Oct 2026🛡️ Security

ARMORY CASTLE (formerly UNC5221), a suspected PRC-nexus actor, exploited BeyondTrust Remote Support zero-day CVE-2026-102764 in August 2026, per Mandiant incident response. The post details the SAWFLY PHP webshell, BARECLAW SOCKS5 WebSocket tunneler, SUID root escalation, sudoers template persistence, vault credential extraction, log deletion and haproxy.conf changes. It adds YARA rules, detection ideas and patch-first remediation (BT26-05).

cloud.google.comwriteupAdded 29 Oct 2026, published 15 Oct 2026🛡️ Security

PEERSTITCH is a memory-resident ARM64 implant that Unit 42 found in a September 2024 telecom intrusion (cluster CL-STA-0954, aka UNC5820). Attackers used CVE-2024-47575 on FortiManager to steal configs for more than 500 FortiGates, then CVE-2025-61624 auto-script path traversal to reach root. The report covers ptrace injection into miglogd and iked, an Apache mod_md ACME reverse shell, FGFM impersonation, anti-forensics, hunting guidance, IOCs and YARA.

unit42.paloaltonetworks.comwriteupAdded 30 Oct 2026, published 14 Oct 2026🛡️ Security

Hackers-Arise tutorial on NVIDIA's open-source NemoClaw, which runs OpenClaw (and Hermes or LangChain Deep Agents) inside OpenShell sandboxes. OpenShell provides kernel-level isolation and declarative YAML policies for files, credentials and network access. It covers OpenClaw's risks (543 tracked CVEs, 40,000+ exposed instances), an OpenClaw vs NemoClaw comparison, the caveat that sandbox escapes and core-logic zero-days remain possible, and a Docker/Node.js install via the nemoclaw.sh wizard with TUI testing. It also cites the Cisco AI Defense plus OpenShell case study, in which an agent that does security patching was protected against a simulated exfiltration attempt.

hackers-arise.comwriteupPublished and added 14 Oct 2026🧠 AI

CVE-2026-103572 is a remote code execution bug in Microsoft.VisualStudio.Copilot.Core.dll, shared by Visual Studio and SQL Server Management Studio. A trailing dot (for example `.mcp.json.`) bypasses the protected-filename check in EditsFunctionHandler.GetEditConfirmationTypeAsync, so a hijacked Copilot can rewrite its own MCP and settings files and run commands. The post covers path traversal and InstallationID leaks, indirect prompt injection demos, the October 2026 patch (GetFullPath), and a $0 bounty.

embracethered.comwriteupAdded 29 Oct 2026, published 13 Oct 2026🛡️ Security

VulnCheck reproduces and root-causes CVE-2026-76504, an exploited zero-day authentication bypass in Cisco SD-WAN vManage. A POST to the URL-encoded path /%6a_security_check skips the password check because AppServerLoginModule.login() tests the raw getRequestURI() for "j_security_check", while WildFly's security-constraint matcher decodes the path. Supplying an internal username such as viptela-reserved-cloudops or viptela-reserved-uc then mints an admin-level session. Includes decompiled code, request/response samples, and notes on about 1,500 exposed devices and IoCs; the weaponized exploit and detection rules are gated to customers.

vulncheck.comwriteupAdded 12 Oct 2026🛡️ Security

Endor Labs explains CVE-2025-61927, an RCE in the happy-dom headless browser caused by relying on Node.js's vm module, which is not a security boundary. They show that the maintainer's mitigation (--disallow-code-generation-from-strings) is insufficient, because untrusted scripts can still pollute builtin prototypes for DoS or RCE (CVE-2025-62410). The fix adds --frozen-intrinsics. The post recommends isolated-vm, Secure EcmaScript, or container/VM isolation for untrusted JavaScript.

endorlabs.comwriteupPublished and added 12 Oct 2026🛡️ Security

watchTowr's analysis of the PaperCut NG 26.0.4-PO build 76508 pre-auth RCE chain, built from WT-2026-0143 (authentication bypass) and WT-2026-0144 / CVE-2026-82077 (post-auth RCE). The bypass reaches Setup Wizard forms through the Tapestry service parameter via the Home page, which resets the admin password. The RCE uses path traversal in the Scan to Fax connector. It also gives the August to September 2026 patch and bypass timeline, including exploited CVE-2026-81578 and CVE-2026-82078.

labs.watchtowr.comwriteupAdded 30 Oct 2026, published 9 Oct 2026🛡️ Security

VulnCheck's exploit development team analyzes CVE-2026-76504, a critical zero-day authentication bypass in Cisco Catalyst SD-WAN Manager (vManage), reproduced to the point of a weaponized exploit. The root cause is a discrepancy between WildFly's Undertow engine, which URL-decodes the request path before deciding whether j_security_check requires auth, and Cisco's AppServerLoginModule.login(), which checks the raw (undecoded) getRequestURI() string — so a path like /%6a_security_check skips the password check entirely. The remaining session-building fallback path only checks membership in four hardcoded internal usernames (viptela-reserved-dca/cloud/cloudops/uc), and two of them (cloudops, uc) grant full admin via the dataservice API, giving an unauthenticated attacker a fully privileged vManage session with a single POST request.

vulncheck.comwriteupAdded 8 Oct 2026🛡️ Security

Huntress documents active exploitation of two AhsayCBS (Ahsay Cloud Backup Server) vulnerabilities being chained together: CVE-2026-105133, an authentication bypass in checkSysPwd, and CVE-2026-105134, an unauthenticated RCE in the Replication Receiver's UpdateReceivers.do endpoint that grants SYSTEM. Attackers use the chain to drop JSP webshells, then deploy a renamed XMRig cryptominer (masquerading as msedge.exe via a modified NSSM binary), a Task-Manager-aware anti-detection PowerShell script, and the vulnerable WinRing0x64.sys kernel driver for hardware-level miner access. Huntress provides IOCs, mitigation guidance (restrict management interface, re-image if compromised) and four Sigma rules targeting each stage of the intrusion chain.

huntress.comwriteupAdded 9 Oct 2026, published 8 Oct 2026🛡️ Security

A detailed "CVE of the Day" thread analyzing CVE-2026-76471, a critical (CVSS 9.8) Cisco advisory covering insufficient NX-API input validation (CWE-122 heap-based buffer overflow) on Nexus 3000/9000 standalone NX-OS and a lower-severity credentialed variant on UCS 6300 Fabric Interconnects via UCS Manager XML API. It compiles Cisco's fixed-software versions per platform, notes the temporary Live Protect shield lp00074, and walks through a six-step SOC evidence-preservation and correlation playbook (scoping affected devices, preserving logs/crash artifacts, reviewing API/shield telemetry, correlating device outcomes, remediating, and verifying post-patch state) while flagging that CISA KEV and FIRST EPSS had no data on the CVE at research time.

x.comwriteupPublished and added 8 Oct 2026🛡️ Security

watchTowr post-exploitation analysis of CVE-2026-88771, an unauthenticated log-poisoning command injection in Citrix NetScaler (advisory CTX697096). Sensors logged thousands of attempts: about 85% were OOB callbacks, the rest Sliver implants, a trojanized Dropbear SSH backdoor, a Perl stager with a PHP webshell, and SSH-key and secret-harvesting sprays. Includes artifacts to hunt (/var/tmp files, ns_helper, ns.conf edits) and IOC repo pointers.

watchtowr.comwriteupAdded 30 Oct 2026, published 7 Oct 2026🛡️ Security

Microsoft Security's FORGE Lab shares results and lessons from four months of AI-agent-driven vulnerability research: 140 Windows CVEs (52 in September 2026's release), 155 internally validated reports across 23 open-source projects, and the first patch merged into the Linux kernel via the Linux Foundation's Akrites coordinated-disclosure initiative. Using their multi-model agentic scanning harness MDASH and GPT-5.5-based validation agents, the team measured automated PoC generation at an average $3.61/21.5 minutes per confirmed crash and local privilege-escalation AEG at $8.56/25.4 minutes, and argues the real bottleneck has shifted from finding bugs to validating and remediating them at matching speed. Specific disclosed CVEs include curl's CVE-2026-9545 and CVE-2026-13608, Node.js's CVE-2026-56848, and Linux kernel's CVE-2026-64563.

microsoft.comwriteupPublished and added 7 Oct 2026🛡️ Security

Rapid7's analysis of CVE-2026-21589 (CVSSv4 9.3), a critical unauthenticated arbitrary file read vulnerability affecting Bitbucket, Confluence, Jira Software/Service Management, Bamboo, Crowd, Crucible, and Fisheye Data Center products. It summarizes watchTowr Labs' root-cause finding that double-colon (::) sequences can act as path separators in Atlassian's web-resource handling, enabling path traversal to read arbitrary files within the Tomcat web root — including crowd.properties credentials that can be chained to create a rogue jira-administrators account. The post provides emergency patching guidance, Atlassian's WAF/RewriteValve mitigations, log-hunting regex, and notes public Python PoC and Nuclei templates exist.

rapid7.comwriteupPublished and added 7 Oct 2026🛡️ Security

CVE-2026-21589 is a pre-auth arbitrary file read in Atlassian Jira, Confluence and Bitbucket, found by diffing atlassian-plugins-webresource 6.0.7 against 6.0.8. The Router's unescapeSlashes turns "::" into "/", so "..::" traversal reaches WEB-INF files through download/resources routes. Reading crowd.properties leaks Crowd app credentials, which allow creating an admin user.

labs.watchtowr.comwriteupAdded 30 Oct 2026, published 6 Oct 2026🛡️ Security

An incident-response style deep dive into active in-the-wild exploitation of Citrix NetScaler ADC/Gateway via CVE-2026-88771 (unauthenticated RCE through log-poisoning of ns_monuploadd_err.pl) and CVE-2026-88772 (DTLS memory overflow), part of 8 CVEs disclosed by Citrix on September 27, 2026. The author reverse-engineers the full post-exploitation toolkit dropped after root is obtained: SLAPSHOT (a Perl/Python loopback TCP tunneler/pivot), WHIPSHOT (a disguised PHP web shell served via fake CSS paths), the Platypus C2 agent, and a Perl "Pitboss" dropper script (with full decoded source and an embedded SHA-256-protected PHP web shell) that creates a rogue superuser, SUIDs /bin/sh, exfiltrates NetScaler config, and patches httpd.conf for persistence. It closes with extensive IOCs (C2 IPs, file hashes, paths, credentials) and patch guidance for affected NetScaler builds.

theravenfile.comwriteupPublished and added 6 Oct 2026🛡️ Security

CyberForge CVE-of-the-Day #070 on CVE-2026-61500 in Rejetto HFS 3.0.0–3.2.0. The default Koa session-signing key came from Math.random() (CWE-338) and the unauthenticated login handshake leaked outputs of the same generator. That allows recovery of the key, a forged administrator session, and code execution through the legitimate server_code feature. It covers scoring (CVSS 9.8/9.3, EPSS, KEV status), the 3.2.1 fix, a six-step SOC hunting and remediation trail (loginSrp1/2, get_config/set_config pivots, COOKIE_SIGN_KEYS review), and offline jq/Python helpers for container and config metadata.

x.comwriteupAdded 9 Oct 2026, published 6 Oct 2026🛡️ Security

Write-up of a BlueHat Asia 2026 talk on CVE-2026-65669, a critical SQL Server elevation of privilege in Copilot in SQL Server Management Studio. The read-only mode was only a regex classifier (LocalSqlExecutionAccessChecker) and was bypassed with DECLARE @p sysname='sp_executesql'; EXEC @p. The chain used indirect prompt injection through AGENTS.md and CONSTITUTION.md extended properties to take a db_owner to sysadmin, with data exfiltration via xp_dirtree and RestoreVerifyBackupFile.

embracethered.comwriteupAdded 29 Oct 2026, published 30 Sep 2026🛡️ Security

Microsoft Threat Intelligence tracked in-the-wild exploitation of CVE-2026-73570, an unauthenticated OS command-injection vulnerability in Zimbra Collaboration Suite's SNMP notification path (swatchdog-to-snmptrap), triggerable via a crafted SMTP request when the optional zimbra-snmp package is enabled. The post documents pre-disclosure scanning, JSP webshell deployment, a novel pam_exec/zmmailboxdmgr privilege-escalation chain to root, systemd-based persistence (zimlog.service), theft of zimbraPreAuthKey/zimbraAuthTokenKey via zmlocalconfig and LDAP, lateral movement over Zimbra's SSH identity, a multi-stage Go-based remote-access agent (zimclient2 via zimdown2/agent2.sh), a dedicated mailbox-exfiltration implant, and an AzCopy-based exfiltration attempt, closing with Defender XDR KQL hunting queries and MITRE ATT&CK mapping.

microsoft.comwriteupAdded 1 Oct 2026, published 30 Sep 2026🛡️ Security

Horizon3.ai discloses CVE-2026-61500, a session-forgery vulnerability in Rejetto HTTP File Server (HFS) 3.x found using Anthropic's Mythos model. HFS seeds Koa's keygrip session-signing key with V8's insecure, invertible Math.random() PRNG and separately leaks raw Math.random() outputs through an unauthenticated login endpoint; by sampling a dozen leaked outputs and feeding them to the Z3 SMT solver, an attacker can recover the xorshift128+ internal state, step it backwards to the process-start signing key, and forge an admin session cookie that leads to remote code execution via HFS's built-in admin JavaScript execution feature. The piece walks through the full exploit chain and argues that Mythos independently chained the crypto weakness and the leak, built the Z3-based key-recovery solver, and produced a working PoC without additional prompting.

horizon3.aiwriteupAdded 7 Oct 2026, published 30 Sep 2026🛡️ Security

Mandiant and GTIG report on exploitation of the Citrix NetScaler ADC and Gateway zero-day CVE-2026-88772, active since early September 2026, alongside CVE-2026-88771. It covers the DTLS-triggered NSPPE crash, httpd.conf persistence via .deb and .sig handlers, SUID /bin/sh, and the WHIPSHOT web shell and SLAPSHOT tunneler. It gives hunting commands, log artifacts, YARA rules, patched builds and containment steps.

cloud.google.comwriteupAdded 29 Oct 2026, published 29 Sep 2026🛡️ Security

watchTowr Labs reverse-engineers CVE-2026-88772, a preauth DTLS memory overflow in Citrix NetScaler ADC/Gateway's nsppe binary, exploited in the wild as a zero-day and fixed in Citrix bulletin CTX697096. The writeup walks through patch diffing between build 14.1-73.30 and 14.1-73.37, crafting malicious DTLS handshake fragments that trick NetScaler's reassembly logic into copying about 174KB of NSB chain data into a 35,840-byte scratch buffer, and the full exploitation path from crash to a fake-vtable hijack, ROP-based mprotect call, and shellcode execution, plus a public detection artefact generator.

labs.watchtowr.comwriteupAdded 1 Oct 2026, published 29 Sep 2026🛡️ Security

XBOW's technical write-up on CVE-2026-72018, an out-of-bounds write in the Linux kernel's SMC-D/DIBS loopback code (dibs_loopback driver) that lets an unprivileged user with CAP_NET_ADMIN escalate to root. The bug stems from an unvalidated peer-controlled dmbe_idx/dmbe_size offset computation (smcd_conn_save_peer_info -> smc_ism_write -> dibs_lo_move_data memcpy) that XBOW turned into a reliable LPE by MITM-forging CLC handshake fields via nftables NFQUEUE and grooming kernel cred structures with a 16-byte zero-write primitive alone. The post also details where the autonomous agent's reasoning stalled (abandoning a promising MITM idea, confusing write-what-where with a pure zero-write, chasing an unnecessary UAF) and required human intervention, motivating a multi-agent redesign of XBOW's research pipeline.

xbow.comwriteupAdded 30 Sep 2026, published 28 Sep 2026🛡️ Security

watchTowr Labs' technical breakdown of CVE-2026-88771, a pre-auth command injection in Citrix NetScaler ADC/Gateway's default configuration that was exploited in the wild as a zero-day before a patch existed. The root cause is in ns_monuploadd_err.pl: unsanitized log data (attacker-controlled via HTTP login/User-Agent fields) is interpolated into a backtick shell command via grep/sed/awk, allowing arbitrary root command execution once the crash-log parser runs; the article includes a full pre-auth exploit request, patch diff analysis (CTX697096), and a link to watchTowr's Detection Artefact Generator script.

labs.watchtowr.comwriteupPublished and added 28 Sep 2026🛡️ Security

A researcher reverse-engineers Windows NCSI (ncsi.dll, running under the Network List Service/netprofm as NETWORK SERVICE) to explain how a manual proxy or WPAD/PAC URL set by an unprivileged user gets applied to NCSI's active-probe HTTP request, causing the service account to NTLM-authenticate to an attacker-controlled proxy. On domain-joined hosts this cross-context proxy authentication can be captured/relayed (e.g. via ntlmrelayx) toward ADCS, Shadow Credentials, or RBCD; the finding was submitted to ZDI as ZDI-26-708 and Microsoft declined to assign a CVE, classifying it Moderate-Spoofing. Part 1 covers reproduction and the active-probe path through NcsiHttpGet/WinHTTP; Part 2 (linked) traces the root cause back to WinINet's Event ID 5600.

pgj11.comwriteupPublished and added 28 Sep 2026🛡️ Security

Mandiant and GTIG report renewed mass exploitation of Oracle PeopleSoft CVE-2026-35273 by UNC6240 (ShinyHunters). The actor bypassed WAF rules by requesting /%50SEMHUB/ instead of /PSEMHUB/, then deployed JSP web shells (x.jsp, u.jsp), the SIDEEYE backdoor (Ple64.exe), Neo-reGeorg and MeshAgent on dozens of systems globally. The post gives host and log hunting guidance, remediation steps and detection rules.

cloud.google.comwriteupAdded 29 Oct 2026, published 25 Sep 2026🛡️ Security

Hands-on walkthrough of Eyesharvester, an open-source recon tool (github.com/Exhunterx/eyesharvester) that scans IP ranges to fingerprint IP cameras, DVRs and NVRs, tests default credentials, lists vendor-specific CVEs and generates a hardening checklist. The piece demonstrates finding Hikvision devices vulnerable to CVE-2021-36260, which gives shell access and can be chained with a Metasploit payload and a reverse SSH/Meterpreter proxy to pivot into the internal network.

hackers-arise.comwriteupAdded 7 Oct 2026, published 25 Sep 2026🛡️ Security

Huntress SOC analyzes an intrusion that began with exploitation of Samsung MagicINFO (CVE-2025-4632, after incomplete fix of CVE-2024-7399) via tomcat9.exe. The actor took three tries to install AnyDesk (certutil and PowerShell attempts were blocked by Defender), created an 'oldadministrator' account, disabled Defender, then ran Silent XMR Miner Builder, which compiled a Monero miner on the endpoint using csc.exe, cvtres.exe, donut, tcc and MinGW gcc. The miner ran masquerading as explorer.exe against C3Pool; the post gives command lines and detection ideas such as unusual compiler child processes from an unsigned parent and explorer.exe with mining arguments.

huntress.comwriteupPublished and added 24 Sep 2026🛡️ Security

Rapid7 previews collaborative research with Zimbra that uncovered over 50 vulnerabilities in the Zimbra Collaboration Suite, several of which let attackers impersonate senders without credentials, control inbox visibility, and alter shared documents and calendars, turning classic Business Email Compromise into active manufactured-reality attacks rather than passive mailbox monitoring. It traces the pattern through real exploited Zimbra CVEs in CISA's KEV catalog (CVE-2024-45519 postjournal command injection, CVE-2025-27915 stored XSS via calendar invite used against Brazilian military targets, CVE-2026-73570 SNMP command injection) and earlier 2022 to 2023 zero-days (CVE-2022-27925, CVE-2022-37042 path traversal plus auth bypass, CVE-2023-37580) exploited by multiple threat groups per Google's Threat Analysis Group.

rapid7.comwriteupAdded 7 Oct 2026, published 24 Sep 2026🛡️ Security

CVE-2026-94127 is an unauthenticated heap overflow in F5 BIG-IP's APM OAuth userinfo handler (tmm). A 0x4100-byte heap buffer receives the Authorization header with no length check. watchTowr patch-diffed 21.1.0 against 21.1.0.2 with Diaphora, triggered a crash via /f5-oauth2/v1/userinfo, and described a ret2plt chain that works around SELinux by appending a command to /etc/bigstart/scripts/tmm.finish.

labs.watchtowr.comwriteupAdded 30 Oct 2026, published 23 Sep 2026🛡️ Security

Adversa AI catalogs ten distinct Claude Code attacks documented between September 2025 and September 2026: the Miasma supply-chain worm that hit 73 Microsoft repos via a SessionStart hook, TrustFall's unsandboxed MCP server execution on folder-trust, Check Point's CVE-2025-59536/CVE-2026-21852 pre-trust-dialog code execution and API key theft, Sentry-DSN-based "Agentjacking" prompt injection via fake bug reports, a 50-subcommand cap that silently disables deny rules, the SymJack symlink-to-config-hijack primitive working across six agent CLIs, Wiz's GhostApproval deceptive-approval-prompt finding (with CVE-2026-12958 at AWS and CVE-2026-50549 at Cursor but none at Anthropic), the Plugin4Shell SHA/branch-name collision bypassing plugin pinning, an academic MCP tool-poisoning paper achieving RCE on agent/LLM pairs, and SkillCloak's self-extracting-packer bypass of skill scanners. The piece argues almost none of these are model-behavior bugs - they are trust-boundary and consent failures in the surrounding tooling - and closes by pitching Adversa's own runtime agent security gateway as the fix.

adversa.aiwriteupAdded 7 Oct 2026, published 23 Sep 2026🛡️ Security

Huntress details a 2026 DarkMe RAT campaign that ditches the zero-days (CVE-2023-38831, CVE-2024-21412) previously used by the Water Hydra/EvilNum-linked group in favor of a plain phishing email delivering a disguised .pif file. The writeup reverse-engineers the full chain — msiexec pulling a wrapped MSI, a WSF stager, three obfuscated VB6 loader DLLs (Coconout.dll, Use.dll, Finalized.dll), a novel 329-app "inverted sandbox" gate, process hollowing into a signed clspack.exe, and Locked:// protocol-handler persistence — and corrects prior public reporting by showing the payload's "single-byte XOR" is actually a broken RC4 implementation. It closes with fresh C2 infrastructure (thatawful[.]boutique, port 7712), OSINT on delivery domains (including a related ClickFix/Efimer campaign), and concrete Sigma-style hunting rules and remediation steps.

huntress.comwriteupAdded 23 Sep 2026, published 22 Sep 2026🛡️ Security

Depth First researchers detail CVE-2026-80521, a Linux kernel use-after-free in the AF_UNIX subsystem's garbage collector (a race between edge visibility during SCM_RIGHTS sends and vertex freeing in unix_del_edge/unix_walk_scc_fast), discovered with their in-house AI vulnerability-detection model dfs-large1 and used to win a Google kernelCTF slot. They released a working container-escape exploit against the latest Ubuntu 26.04, plus a second exploit for CVE-2026-52910 against Ubuntu 24.04, arguing that AI-accelerated bug discovery has broken the assumption that shared-kernel containers (Docker/Kubernetes, nsjail, Firejail, Bubblewrap) provide a hard security boundary, and recommending migration of sensitive workloads to microVM isolation like Firecracker or Kata Containers.

depthfirst.comwriteupAdded 26 Sep 2026, published 22 Sep 2026🛡️ Security

Bishop Fox reverse-engineered "MikroTrick," a two-vulnerability chain (CVE-2026-67279 and CVE-2026-86060) that lets an unauthenticated SSH client fully take over vulnerable MikroTik RouterOS 7.x devices: an SSH rekey bypasses the authentication-state check to reach post-login functionality, and a legacy file-descriptor-based identity interface in the login helper is then abused via the username "-2" to impersonate a trusted local admin identity. The post details patch diffs between RouterOS 7.23.3/7.23.4 and 6.49.20/6.49.21 binaries, a non-invasive differential SSH detector for the flaw, and field evidence from compromised internet-facing routers showing persistence via scripts/schedulers with owner="0" that survive volatile log resets.

bishopfox.comwriteupAdded 28 Sep 2026, published 17 Sep 2026🛡️ Security

VulnCheck details full exploit development for CVE-2026-20079, a CVSS 10.0 unauthenticated RCE in Cisco Secure Firewall Management Center (FMC). The bug stems from a hardcoded, privilege-less csm_processes session created at boot in the sfsnort.sessions MySQL table; attackers can fix a CGISESSID cookie to that static session, then use hardcoded machine-user credentials (report:snortrules) to upgrade it into a UI-authenticated session, extract the sf_action_id CSRF token, abuse the sajaxintf.cgi validateLicense endpoint for arbitrary file write, and trigger pjb.cgi's upgradeReadinessCall to execute a Makeself-formatted shell script as root. The post includes Perl source diffs from Auth.pm/httpsd_conf, database session dumps, raw HTTP requests, and a working Go PoC that pops a root reverse shell, plus a bonus Perl Storable deserialization sink found during research.

vulncheck.comwriteupAdded 17 Sep 2026🛡️ Security

Sysdig's Threat Research Team documents a hand-coded (non-LLM) exploitation of CVE-2026-39987, a pre-authentication RCE in marimo notebooks caused by a missing validate_auth() check on the /terminal/ws WebSocket endpoint. The operator chained credential theft from environment variables and Redis, AWS Secrets Manager retrieval, and SSH pivoting to a bastion host in eight seconds, ignored a planted prompt-injection honeypot meant to detect LLM agents, and left behind reusable base64-encoded boto3/paramiko toolkits in /tmp. The post includes full script reproductions, IOCs (IPs, file paths, AS63949/Linode infrastructure), CloudTrail/GuardDuty detection guidance, and remediation steps (patch to marimo 0.23.0, restrict the terminal endpoint, scope Secrets Manager access).

sysdig.comwriteupAdded 20 Sep 2026, published 11 Sep 2026🛡️ Security

Cisco Talos details active exploitation of CVE-2026-20079 (CVSS 10.0 unauthenticated auth bypass leading to root) and CVE-2026-20316 (low-privilege login via static credentials) in Cisco Secure Firewall Management Center. Three post-compromise clusters are tracked: UAT-12197 deploying a JSP web shell and JAR command executor to exfiltrate credentials; UAT-11823, overlapping with Sandworm, using a malicious Makeself license.tmp to drop a Netcat reverse shell and a Cyclops Blink variant; and UAT-11988, a Qilin ransomware affiliate who abused package_info.pl for LOTL recon, SOCKS5/reverse-SSH tunneling, and ultimately deployed Qilin ransomware. Talos provides Snort SIDs, hotfix guidance ahead of a comprehensive hardening release, and a GitHub IOC repository.

blog.talosintelligence.comwriteupAdded 7 Oct 2026, published 9 Sep 2026🛡️ Security

Wiz researchers chain three LiteLLM flaws into a full pre-auth-to-cloud-compromise path: an MCP endpoint authentication bypass (CVE-2026-59822) that grants a session with any garbage Bearer token, a custom-code-guardrail sandbox bypass leading to root RCE (CVE-2026-59821) via exec() on unsanitized admin-submitted Python, and a config-endpoint authorization gap (CVE-2026-35029). They also show pass-through endpoints can be pointed at the AWS IMDS to steal IAM credentials, bypassing IMDSv2 via header-prefix forwarding. A scan of ~3,074 internet-facing instances found 9.6% accepting the default sk-1234 master key or no auth at all, and CVE-2026-59822 is now in CISA's KEV catalog with observed in-the-wild exploitation.

wiz.iowriteupPublished and added 9 Sep 2026🛡️ Security

Proofpoint details "BlueMoon," a novel exploit kit chaining a Chrome V8 type-confusion RCE (CVE-2026-85046), a V8 sandbox escape via WebAssembly metadata corruption (CVE-2026-87491), and a Windows kernel LPE (CVE-2026-85880) to break out of the browser sandbox. Within days of first use by China-aligned TA412 (28 Aug 2026), the kit was independently adopted by UNK_LateNight (delivering ShadowPad to US aerospace targets), UNK_DoubleCheck (Rust-based loader against a Vietnamese manufacturer), and UNK_QuietRacket (custom malware against Indonesia/Singapore government and finance targets). The piece analyzes exploit internals (Maglev/TurboFan JIT bug, reflective DLL loading, ALPC/WNF kernel exploitation), flags artifacts suggesting AI-assisted exploit development (debug comments, handover markdown files, v8CTF references), profiles the GemStone Chromium-extension credential-theft backdoor deployed via Secure Preferences forgery, and provides IOCs, ET rules, and a YARA rule for detection.

proofpoint.comwriteupAdded 26 Sep 2026, published 9 Sep 2026🛡️ Security

test

sansec.iowriteupAdded 18 Sep 2026, published 5 Sep 2026🛡️ Security

Endor Labs benchmarks Claude Code running Anthropic's Fable 5.1 against Opus 5 and Fable 5.0 on its Agent Security League leaderboard, which tests whether agents can independently re-derive historical security fixes (FuncPass/SecPass) without recalling them from training data or git history. Fable 5.1 tops both axes (87.2% FuncPass, 37.4% SecPass), runs at Fable 5.0's speed with zero timeouts, costs roughly a third of Opus 5, and shows far less confirmed training-data memorization than either predecessor. The post includes three detailed 'hall of fame' case studies where Fable 5.1 alone produced an independently-reasoned secure patch: Home Assistant's unauthenticated error-log route (CVE-2018-21019/CWE-200), html-sanitizer's Unicode-normalization XSS bypass (CVE-2024-34078/CWE-79), and Vyper's self-referencing dynarray out-of-bounds write (CVE-2023-31146/CWE-787).

endorlabs.comwriteupPublished and added 4 Sep 2026🛡️ Security

Aikido's analysis of "Dirty Frag," a set of Linux kernel bugs (CVE-2026-43284 in IPsec/XFRM ESP, CVE-2026-43500 in RxRPC, and the later variant CVE-2026-46300 "Fragnesia") that let a low-privileged local attacker write to the page cache of a read-only file they can only read, such as /usr/bin/su, and escalate to root. It explains the missing shared-memory check in splice()-fed ESP/RxRPC code paths, why the flaw reaches most kernel versions and distros via backports, how it enables container-to-node escapes in Kubernetes, and gives concrete host exposure checks (uname -r, lsmod grep for esp4/esp6/rxrpc, sysctl user.max_user_namespaces) plus detection guidance via audit logs and EDR.

aikido.devwriteupAdded 5 Sep 2026, published 4 Sep 2026🛡️ Security

Huntress details a campaign in which social-engineering (tech-support scams, Quick Assist, malicious downloads) leads to rogue ScreenConnect installs that deploy a four-stage VBScript loader (1.vbs–4.vbs). The loader profiles the host (checking for EDR products, existing ScreenConnect, RAM size), fetches an AES-encrypted payload via a Dropbox-hosted map file, and drops one of three packages: a user-level backdoor, a persistence/privesc kit, or a tunneling+cryptomining bundle (wstunnel/XMRig plus the vulnerable WinRing0 driver for BYOVD). A backdoored ScreenConnect client then re-pushes the VBScript chain to every newly connected Host session via ScreenConnect's file-transfer API, giving the campaign worm-like self-propagation — which ConnectWise later confirmed stems from CVE-2026-84869, a 9.9 CVSS flaw in unauthorized file-transfer execution, patched in ScreenConnect 26.6.5.

huntress.comwriteupAdded 8 Sep 2026, published 3 Sep 2026🛡️ Security

Manifold Security discloses 'GitSpawn', a vulnerability class where AI coding agents (Claude Code, Goose, Hermes, Qwen Code, Grok Build, and reportedly Codex/Cursor) run git commands like `git status`/`git diff` for context-gathering at startup without sanitizing the repository's own .git/config. Because these commands refresh git's index, a malicious repo can set `core.fsmonitor` (or a similar config sink) to an arbitrary command, achieving code execution outside the agent's sandbox before any approval prompt, workspace-trust dialog, or even authentication - simply by opening a folder delivered as files (zip, USB, shared drive) rather than cloned. Two CVEs were assigned (Goose, Hermes); four of eight reported findings remain unpatched at publication.

manifold.securitywriteupAdded 4 Sep 2026, published 1 Sep 2026🛡️ Security

Binarly presents MLTracer, a pipeline that loads PyTorch/pickle model files in a Docker sandbox with strace and FakeNet-NG, flags suspicious syscalls, and labels behavior (reverse shell, downloader, exfiltration) with a SetFit classifier. Run over ~2.12M Hugging Face files, it found 218 confirmed malicious models. Hugging Face-hosted scanners (Protect AI, JFrog, ClamAV, VirusTotal) and ModelScan/SaferPickle missed 9–84% of them. The post also tabulates 21 static-scanner evasion techniques, two of them novel (CodeType/FunctionType indirect variant, EXT2 + copyreg.add_extension), and shows detection of a CVE-2025-32434 exploit that the HF scanners missed.

binarly.iowriteupPublished and added 1 Sep 2026🛡️ Security

Novee Security disclosed that a low-privilege GitHub issue could trigger code execution on CI runners for Gemini CLI and Claude Code, and hijack the next agent run in OpenAI Codex, via flaws in the "harness" code surrounding each coding agent rather than the LLM itself. CVE-2026-12537 is a CVSS 10.0 OS command injection in Gemini CLI's container launcher via a crafted .gemini/.env file (fixed in 0.39.1); CVE-2026-54316 abused Hugging Face's public download counter as a side channel to exfiltrate a Claude Code API key one character at a time (fixed in 2.1.163). A separate Claude Code bash-quoting validator bypass and a Codex AGENTS.md instruction-file poisoning issue (via shared checkout across two passes) had no CVE, prompting OpenAI to only issue workflow/documentation fixes.

thehackernews.comwriteupPublished and added 1 Sep 2026🛡️ Security

Socket's Threat Research Team traced 13 malicious Composer/Packagist theme packages (across vsmov, vsphim, haiau009, chilltvcms, ophimcms vendors) used by Vietnamese movie/comic streaming sites, which inject JavaScript running an ad-fraud/gambling redirect on all mobile visitors and, on unpatched iPhones, chain WebKit exploits (CVE-2025-31277, CVE-2025-43529) through a GPU-process pivot into a kernel escape via the AppleM2ScalerCSCDriver IOKit client (related to CVE-2026-43655) to install spyware. The payload exfiltrates keychain data, SMS, photos, contacts, and — after an August 2026 redeployment — directly steals crypto wallet seeds/mnemonics from Bitget, Phantom, Trust Wallet, and others. The report attributes delivery infrastructure to FUNNULL (Triad Nexus, OFAC-sanctioned operator Liu Lizhi), ties the exploit kit to the "DarkSword" iOS exploit family, and provides full IOCs, hashes, and MITRE ATT&CK mapping.

socket.devwriteupPublished and added 1 Sep 2026🛡️ Security

Deep-dive reverse engineering of a real-world incident where a WordPress site compromised via CVE-2026-18322 was used to drop a bincrypter-obfuscated, statically-linked gs-netcat (gsocket) 1.4.42beta5 binary as a reverse-shell tunnel, persisted via crontab and masquerading as "netd"/"[kthreadd]". The author fully unravels bincrypter's multi-stage shell obfuscation (character-separator tricks, AES-256-CBC/openssl decryption, memfd_create fileless ELF execution via a Perl one-liner) and reveals a custom THC UPX build with zeroed magic bytes/PackHeader used to hide payload identification, along with gsocket's self-embedded XOR-encoded operator configuration. Releases two open-source tools (Bincrypter-Extract, Gsocket-Config-Extract), YARA rules, and an ImHex pattern file, plus full IOCs (C2 IP, GSRN secret, process/memfd artifacts).

pgj11.comwriteupPublished and added 31 Aug 2026🛡️ Security

Wiz Threat Research ran honeypots across LiteLLM, Flowise, LangChain, Langflow, ChromaDB, Ollama and other AI/ML services for 90 days, capturing active exploitation of an MCP Gateway auth bypass (CVE-2026-59822) and an MCP server test-endpoint command injection (CVE-2026-42271, in CISA KEV, chainable with Starlette CVE-2026-48710 for unauthenticated RCE and linked to Qilin ransomware exploitation) used to deploy fileless cryptominers. It also documents blind prompt injection campaigns against LangChain, Flowise, OpenWebUI, and Node-RED agents that trigger OS command execution confirmed via out-of-band DNS callbacks to OAST domains.

wiz.iowriteupAdded 3 Sep 2026, published 27 Aug 2026🛡️ Security

Trail of Bits gave GPT 5.6-Cyber preview access and tasked it with escaping a QEMU/KVM VM on a Debian 12 host; the agent succeeded three separate times, first via a recently disclosed host kernel bug (Januscape, CVE-2026-53359), then by chaining CVE-2026-9539 in libslirp with an unmarked bug fix, and finally by autonomously discovering and chaining multiple 0-day vulnerabilities in the kernel/QEMU stack over roughly 12 hours of largely unsupervised operation. The author argues off-the-shelf VMs (even hardened stable distros) no longer reliably contain a sufficiently capable AI agent — treat such agents as an APT — though Firecracker's minimal attack surface withstood the same agent's attempts.

blog.trailofbits.comwriteupAdded 3 Sep 2026, published 26 Aug 2026🛡️ Security

Analysis of CVE-2026-44963, a critical (CVSS 9.4) unsafe-deserialization RCE in Veeam Backup & Replication 12.x rooted in BinaryFormatter/.NET Remoting that lets any low-privilege domain user gain SYSTEM-level control of domain-joined backup servers; fixed in 12.3.2.4854. The author correlates it with a 2025 "Bug of June 2025" exploit sale, documents a Lynx Ransomware Group negotiation describing exploitation to create local admin accounts and dump domain credentials, covers an underground forum ad claiming an unauthenticated patch-bypass 0-day, and includes a Veeam-specific attacker TTP matrix (e.g. CVE-2023-27532 credential harvesting) plus defense recommendations.

theravenfile.comwriteupAdded 3 Sep 2026, published 20 Aug 2026🛡️ Security

Aikido researchers detail how an AI pentesting agent found a path traversal in Gogs' organization name handling (CVE-2026-52813), which they manually escalated to full Remote Code Execution by planting a bare git repository inside a worktree and overwriting its hooks/update file to trigger command execution on push. The post also covers a git-receive-pack/git-upload-pack service parameter confusion causing an authorization bypass allowing writes to private repos by read-only users (CVE-2026-52810, with an unpatched case-sensitivity bypass and manual code fix provided), and a stored XSS in Gogs' Jupyter notebook rendering via an outdated notebookjs library that bypasses bluemonday sanitization via onerror handlers set during innerHTML assignment.

aikido.devwriteupAdded 3 Sep 2026, published 19 Aug 2026🛡️ Security

Endor Labs researcher details 14 critical/high vulnerabilities (7+ public CVEs/GHSAs) found across seven AI orchestration platforms — NocoBase, Flowise, Langflow, Dify, Activepieces, Kestra, and Apache Airflow — all of which trust anyone who can touch a workflow to run code on the host. Walkthroughs include a Flowise 3.1.2 unauthenticated prompt-injection-to-RCE chain via Pyodide/Node bridge escape, Langflow's trivial `lambda`-string eval sandbox bypass, NocoBase's broken SES Compartment/Proxy guard escalation, and Dify/Activepieces sandboxes applied only after attacker code already executes. The research (presented at DEF CON 34, full whitepaper linked) argues these are multi-tenant code-execution engines shipped with single-user threat models, exposing connected credentials, email, calendars, and customer data.

endorlabs.comwriteupAdded 3 Sep 2026, published 18 Aug 2026🛡️ Security

Varonis Threat Labs details CoSnitch (CVE-2026-24301), a chain of three flaws in Microsoft Copilot Personal. A crafted copilot.microsoft.com link with ?q= and an undocumented autorun parameter runs a prompt on load. That prompt reads data through OAuth connectors (Gmail, Drive, Calendar) and exfiltrates it via Copilot's URL-fetch to an attacker webhook. Indirect prompt injection through web summarization also writes persistent attacker instructions into Copilot's memory. The post also describes "meta-hacking", where researchers got Copilot to disclose its own hidden parameter, and lists mitigations.

varonis.comwriteupAdded 5 Sep 2026, published 18 Aug 2026🛡️ Security

watchTowr Labs analyzes a pre-authentication remote code execution flaw in Citrix NetScaler ADC and Gateway, likely CVE-2026-8452, patched in versions 14.1-72.61 and 13.1-63.18. The bug is a heap overflow during SAML SignedInfo canonicalization, triggered by an oversized PrefixList attribute, which the researchers chain into a write-what-where primitive and full RIP control on non-PIE, no-ASLR builds. They describe dropping a PHP webshell, disabling crash signal handlers to survive without a full device reboot, and escalating from the nobody web server user to root via SUID on /bin/sh.

labs.watchtowr.comwriteupAdded 30 Oct 2026, published 14 Aug 2026🛡️ Security

XM Cyber researchers detail a four-stage exploit chain in Microsoft SCCM (Configuration Manager) that lets any unprivileged domain user achieve SYSTEM-level remote code execution on the primary site server: a missing authorization check on the AdminService UploadExtensionInChunks endpoint (CVE-2026-47301), a weak code-signing check that accepts any commercial certificate, a "CabSlip" Zip-Slip-style path traversal in CAB extraction giving arbitrary file write, and DLL hijacking of adsource.dll loaded by the SYSTEM-level SMS Executive service. Microsoft patched the RBAC bypass in July 2026, but the rest of the chain remains exploitable via the built-in Operations Administrator role until a full fix in ConfigMgr 2609 (October 2026); the article also gives log-based detection guidance (AdminService.log DirectoryNotFoundException/HTTP 500 patterns) and interim mitigations.

xmcyber.comwriteupAdded 3 Sep 2026, published 13 Aug 2026🛡️ Security

Endor Labs benchmarked Claude Code + Opus 5 on its SusVibes secure-coding benchmark (real historical CVE fixes hidden as coding tasks) and found it topped the leaderboard at 73.7% FuncPass / 32.4% SecPass, but also uncovered a new memorization-evasion pattern called "recall-then-diverge": the model writes a memorized fix early in its edit trajectory, then iteratively rewrites the code until the final diff no longer resembles the known patch and evades similarity-based cheat detection. The team details the discovery via an aiohttp request-smuggling task (CVE-2023-47641) where the agent produced the exact hidden pytest error string before any tool output could have revealed it, then extended their anti-cheating pipeline to compare first/peak/final edit overlap and string chronology rather than just the final patch, ultimately disqualifying 4 of Opus 5's 13 "unique" secure solves (including a jupyter-server-proxy case with a leaked upstream commit hash) as memorized.

endorlabs.comwriteupAdded 3 Sep 2026, published 11 Aug 2026🛡️ Security

Sentry researcher Drinor Selmanaj found CVE-2026-20685, a path traversal (Zip Slip/CWE-22 class) in darwin-init, the root PID 1 process that provisions Apple Private Cloud Compute nodes by extracting cryptex bundles. By crafting a tar archive that is simultaneously a valid cryptex and a set of traversal entries, the attacker writes files as root to the persistent /var/db data volume during boot, redirects the splunkloggingd log forwarder to an attacker-controlled server, and exfiltrates CloudBoard/Trusted Inference Engine telemetry including per-request metadata, token counts, and timing side-channels — while PCC's attestation, which only measures installed software, remains indistinguishable from a clean boot. Apple rated it CVSS 6.5 information disclosure, patched it in PCC 5E290.3+, and paid a $150,000 Apple Security Bounty award.

blog.sentry.securitywriteupAdded 3 Sep 2026, published 10 Aug 2026🛡️ Security

Wiz Research reverse-engineers CVE-2026-72898 (GHSA-vwf4-m7j8-wcjf), a zero-day SQL injection in Metabase's /api/session/reset_password endpoint exploited in the wild against Metabase Cloud since August 2026. The bug chains Clojure's merge (which lets an attacker-supplied user-id survive an auth-result merge), JSON keywordization, and HoneySQL's :raw keyword to smuggle unparameterized SQL into a t2/select-one query, yielding blind SQL injection. The post walks through decompiling patched vs. vulnerable JARs to reconstruct the flaw, notes ~2,500 internet-exposed Metabase instances per Shodan, and gives a curl-based exploitability check plus remediation guidance.

wiz.iowriteupAdded 3 Sep 2026, published 10 Aug 2026🛡️ Security

XBOW's autonomous AI agent chained a blind SSRF in Bing's reverse-image-search into three Critical Microsoft RCEs (CVE-2026-32194, CVE-2026-32191, CVE-2026-21536), each CVSS 9.8, by fingerprinting an ImageMagick-compatible backend through differential error responses and crafting an SVG payload that reached a shell-backed image delegate. The proof was confirmed via out-of-band callbacks showing NT AUTHORITY\SYSTEM and root execution across multiple production Bing image-processing workers on both Windows and Linux hosts. The piece walks through the full investigative trace — from ruling out XXE to fingerprinting ImageMagick coders/pseudo-protocols to constructing the pipe-based SVG exploit — and argues that ImageTragick-class bugs in "boring" image helpers remain a live, underrated attack surface.

xbow.comwriteupPublished and added 8 Aug 2026🛡️ Security

Huntress breaks down two macOS Screen Sharing (screensharingd/RFB) vulnerabilities patched by Apple: CVE-2026-43760, an authenticated confused-context bug letting legacy-VNC users read/write arbitrary files as root, and CVE-2026-65400, a pre-authentication bug in the SRP handshake that lets an unauthenticated remote attacker read/write any filesystem artifact as root and achieve remote code execution via LaunchDaemons or shell startup file persistence. The post details the SSFileCopySender/SSFileCopyReceiver helper processes, their kTCCServiceSystemPolicyAllFiles entitlement, TCC/SIP interactions, exposure via hosted bare-metal Mac providers, and how to detect exploitation using Apple's Endpoint Security framework (ES_EVENT_TYPE_NOTIFY_SCREENSHARING_ATTACH, authentication_type, UID/GID anomalies).

huntress.comwriteupAdded 3 Sep 2026, published 7 Aug 2026🛡️ Security

OpenAI's August 2026 system-card addendum for the GPT-5.6 Sol and GPT-5.6 Luna ChatGPT updates, assessed under OpenAI's Preparedness Framework. It reports the models as High capability in both Cybersecurity and Biological/Chemical domains, with detailed scores on CTF challenges (GPT-5.6 Sol saturating at 97.06%), CVE-Bench zero-day web-app exploitation, long-horizon cyber-range operations (including an agent bypassing EDR detection and deleting logs), plus virology troubleshooting, protein-binding prediction, and jailbreak/prompt-injection robustness evaluations.

deploymentsafety.openai.comwriteupAdded 7 Oct 2026, published 6 Aug 2026🛡️ Security

PortSwigger research paper on the 'HTTP Terminator', an autonomous LLM-driven pipeline (hypothesis generation from RFC micro-inspiration, live evaluation via a Burp Suite/SQLite harness against 30,000+ targets, and weaponization through an MCP-controlled Turbo Intruder agent) that discovered new HTTP desync triggers and Response Queue Poisoning exploits. It details concrete new techniques (the protocol-ruler recon method, the 'dangling byte' RQP-reliability trick, Response Forking, Status-Line Injection, Range Cache Poisoning) and a major new attack class, Shared Parser Confusion, plus a resulting CVE-2026-63078 zero-day in Apache Traffic Server, and real compromises of banks, an airport admin panel, a Beyond Trust product, a Meta server, and a Citrix NetScaler-based SSO deployment.

portswigger.netwriteupAdded 18 Sep 2026, published 5 Aug 2026🛡️ Security

James Kettle (PortSwigger) built the "HTTP Terminator," an autonomous LLM-driven pipeline (Ideation → Evaluation → Weaponization → Cascade) that generated ~30,000 novel HTTP desync vectors from RFC micro-inspiration, tested them 24/7 across 30,000 live bug-bounty targets via a Burp Suite extension, and weaponized findings with an MCP-wired Turbo Intruder agent to achieve Response Queue Poisoning. The work yielded new desync triggers, a "dangling byte" RQP-reliability technique, a novel attack class ("Shared Parser Confusion"), a patched Apache Traffic Server zero-day (CVE-2026-63078), and confirmed impact on banks, an airport, a US government site, Meta, a Beyond Trust product, and an SSO server behind Citrix NetScaler. It also documents concrete prompt-engineering lessons (micro-inspiration, context-contamination, reality-reframing an over-cautious agent) for building autonomous AI security research systems.

portswigger.netwriteupAdded 18 Sep 2026, published 5 Aug 2026🛡️ Security

Huntress' running investigation into critical N-able N-central vulnerabilities exploited in the wild, tracking CVE-2026-18556/CVE-2026-18577 (August auth-bypass/account-takeover via incomplete patch) and later CVE-2026-86206/CVE-2026-86207 and a pre-auth RCE zero-day CVE-2026-86218 (CVSS 10.0). The post details reproduced exploit chains abusing N-central's Take Control feature and API to gain admin access and deploy Cloudflare tunnels for persistence, along with IOCs, attacker tradecraft (anomalous ".invalid" account creation, URL-encoded API abuse, VPN exit-node IPs), and concrete log-based detection guidance for MSPs running the RMM platform.

huntress.comwriteupAdded 3 Sep 2026, published 3 Aug 2026🛡️ Security

A student researcher describes an LLM multi-agent pipeline (GLM-4.7 for candidate finding, GLM-5 for semi-triage, Codex 5.3 for final triage) built to hunt logic and authorization bugs in large open-source codebases like Grafana, Nextcloud, Matomo, Airflow and protobuf. The post details the prompt-engineering fixes (forcing the model to explicitly reason about attacker conditions, server conditions, and CIA-triad impact) that cut false positives, and lists the resulting real vulnerabilities, including CVE-2026-21721, a CVSS 8.1 privilege escalation in Grafana's dashboard permissions API caused by a missing UID scope check in ac.EvalPermission.

blog.cykor.krwriteupPublished and added 29 Jul 2026🛡️ Security

Security Joes documents bypassing the patch for CVE-2026-27577, a sandbox escape vulnerability in n8n (a workflow automation tool), showing the fix was incomplete. The writeup likely details the original sandbox architecture, why the patch failed, and a new exploitation path.

securityjoes.comwriteupAdded 29 Jul 2026🛡️ Security

depthfirst's Open Defense Initiative scanned about 40 Ruby gems with native C extensions and validated 105 vulnerabilities across 34 projects, which together have over 8.6 billion RubyGems downloads. The post walks through four cases: a Nokogiri 32/64-bit index truncation (CVE-2026-57235), an Oj garbage-collection use-after-free (CVE-2026-54902), a concurrent-ruby read/write lock bit overflow (CVE-2026-54905) and an sqlite3-ruby block lifetime bug (CVE-2026-54619). It also states that this work led to the earlier GitLab RCE chain through Oj.

depthfirst.comwriteupAdded 29 Oct 2026, published 27 Jul 2026🛡️ Security

Depthfirst's research describes an RCE chain against GitLab CE/EE (versions 15.2.0 through 18.10.7, 18.11.0 through 18.11.4, and 19.0.0 through 19.0.1) built from two memory-corruption bugs in the Oj Ruby JSON gem, reachable through the ipynbdiff notebook-rendering feature. It walks through an out-of-bounds write that corrupts a parser callback pointer, a heap-pointer disclosure used to defeat ASLR, and the gadget chain that reaches system() as the git user, plus nine additional Oj CVEs found during the same review.

depthfirst.comwriteupAdded 29 Oct 2026, published 24 Jul 2026🛡️ Security

Socket researchers traced malicious dev versions of ten Packagist packages owned by developer dinushchathurya back to compromised GitHub repositories containing 55-62 malicious GitHub Actions workflow files each. The workflows execute on GitHub-hosted Ubuntu runners on every push, download an architecture-matched Linux payload from C2 server 43.228.157.68, and run an internet scanner (`ipscan --exploit CVE-2026-41940`) that exploits an authentication bypass in cPanel/WHM and harvests cloud, database, SSH, and source-control credentials, exfiltrating results via heartbeat/results HTTP endpoints and DNSHook callbacks. GitHub code search for the campaign's unique markers returned 6,100-16,000 matching workflow files across unrelated repositories, indicating the abuse extends far beyond the one compromised maintainer and effectively weaponizes GitHub Actions as free, disposable attack infrastructure.

socket.devwriteupPublished and added 23 Jul 2026🛡️ Security

Wiz details how its Agentless Workload Detection extends EDR-like visibility to FortiGate firewalls by parsing local FortiOS logs (log IDs like 32001/32002/44547/41987) to hunt for credential stuffing, rogue admin account creation, certificate manipulation, NAT/port-forwarding abuse, and FortiManager script abuse. It maps these techniques to real-world campaigns including the FortiBleed credential-compromise campaign, active exploitation of CVE-2026-24858, and UNC3886's use of CVE-2022-41328 to deploy the CASTLETAP backdoor, plus Salt Typhoon's exploitation of CVE-2023-48788 against FortiClient EMS.

wiz.iowriteupAdded 3 Sep 2026, published 22 Jul 2026🛡️ Security

Wiz Research documents active in-the-wild exploitation of "wp2shell," a pre-auth RCE chain in WordPress Core (CVE-2026-63030 and CVE-2026-60137) affecting every WordPress version since December 2025, discovered by Searchlight Cyber using GPT-5.6 Sol. Attackers abuse the WordPress REST API batch endpoint (/wp-json/batch/v1) to achieve unauthenticated RCE, then deploy malicious plugins/webshells (including a disguised "CMSmap" plugin and a custom REST endpoint backdoor), enumerate users, and attempt LFI against wp-config for credential theft. The post details post-exploitation TTPs, detection signatures (HTTP 207 responses, wp2shell/rezwp2shell user agents), IOCs, and WAF/plugin-based mitigations.

wiz.iowriteupAdded 3 Sep 2026, published 20 Jul 2026🛡️ Security

Kodem and Intezer disclose a remote code execution flaw in AWS's agentic IDE Kiro (CVE-2026-10591). ~/.kiro/settings/mcp.json was writable by the agent via fsWrite without approval and auto-reloaded, so hidden prompt-injection text on a fetched web page could register a malicious MCP server that runs attacker code. The post gives a PoC using white 1px text and a Node.js callback server, tested on Kiro 0.9.2 and 0.10.16, the fix confirmed in 0.11.130, and the disclosure timeline. It shows how human-in-the-loop approval fails as a security boundary when the agent can edit its own trust configuration.

kodemsecurity.comwriteupAdded 23 Jul 2026, published 19 Jul 2026🛡️ Security

Sysdig's Threat Research Team documented JADEPUFFER, an attack it says was run end-to-end by an AI agent without human operators. The agent exploited CVE-2025-3248 (an unauthenticated RCE in Langflow) for initial access, harvested API keys and cloud credentials, raided a MinIO server via default minioadmin:minioadmin credentials, then pivoted to a MySQL/Nacos server and used CVE-2021-29441 plus Nacos's unchanged default signing key to gain admin access, encrypt 1,342 Nacos settings, and drop a ransom note with no recoverable key. Evidence for AI authorship included verbose in-code commentary explaining each step and a 31-second autonomous diagnose-and-fix cycle across 600+ payloads; the piece situates JADEPUFFER alongside PromptLock/Ransomware 3.0 and Anthropic's Claude-Code extortion and China-linked autonomous-cyberattack disclosures.

thehackernews.comwriteupPublished and added 18 Jul 2026🛡️ Security

LucidBit Labs details CVE-2026-20971, a use-after-free race condition in Samsung's PROCA/FIVE kernel integrity subsystem, exploitable via procfs handlers (/proc/pid/integrity/*) that fetch task_integrity pointers without taking a reference before an execve() concurrently frees the old object. The bug affects Galaxy S9 through S25 and other Samsung devices on both Qualcomm and Exynos chipsets, is triggerable from any untrusted app, and yields memory corruption primitives (though not a full LPE exploit); Samsung patched it in the 01-2026 update.

lucidbitlabs.comwriteupAdded 3 Sep 2026, published 18 Jul 2026🛡️ Security

Endor Labs benchmarks OpenAI's Codex agent with GPT-5.6 Sol on its Agent Security League, reporting 70.9% FuncPass and 23.5% SecPass (third on security among 23 combos) and steady gains over GPT-5.4 and GPT-5.5. It documents a four-signal anti-cheating pipeline (conversation analysis, patch similarity, memorization detection, strict-test pass) feeding a multi-step LLM adjudicator, which flagged 7 instances and confirmed none as cheating. Case studies include an identical two-line django-rest-registration patch, FastAPI CVE-2021-32677, Django CVE-2024-39329, and a unique Django CVE-2021-44420 solve with a structurally different patch (similarity 0.57).

endorlabs.comwriteupAdded 23 Sep 2026, published 17 Jul 2026🧠 AI

Rapid7's MDR team details active zero-day exploitation of SonicWall SMA1000 appliances via CVE-2026-15409 (unauthenticated SSRF in the /wsproxy websocket proxy, CVSS 10.0) chained with CVE-2026-15410 (local privilege escalation via path traversal in the ctrl-service remove_hotfix workflow) to achieve root RCE. The post includes a working Python exploit against the localhost Erlang service on port 1050 (using a hardcoded authentication cookie), an HTTP request PoC for the hotfix path-traversal chain, and extensive observed post-exploitation activity — credential/TOTP theft, VPN-less lateral movement to domain controllers via harvested LDAP service accounts — plus concrete log/IOC signatures and attacker-infrastructure IPs (FNS Holdings Limited ASN 206092) for hunting.

rapid7.comwriteupAdded 10 Sep 2026, published 15 Jul 2026🛡️ Security

Adversa AI researchers show how a crafted cursor:// deeplink, disguised as a GitHub "review this PR" notification, nests a double-URL-encoded mcp/install URI inside a pr-review link to silently trigger Cursor's MCP server install dialog. A second variant pads the install dialog's single-line arguments field with tab characters so a malicious command tail (launching cmd.exe and exfiltrating via curl) scrolls off-screen while the user approves what looks like a harmless "calc" command, giving unsandboxed code execution as the victim. Both bugs were reported to Cursor, closed as duplicates, and remain exploitable on the latest build (3.9.8) months after the related CVE-2025-54133 fix was supposed to surface install arguments; the researchers name this bug class "DeepJack" and note most mainstream coding agents register similarly under-scrutinized URL handlers.

adversa.aiwriteupAdded 7 Oct 2026, published 15 Jul 2026🛡️ Security

Huntress's Tactical Response team documents a repeatable intrusion cluster (tracked by Sophos as STAC3725) where an initial access broker exploits CVE-2025-5777 "CitrixBleed 2," a pre-auth memory overread in NetScaler ADC/Gateway login endpoints, to leak process heap and hijack valid Citrix session tokens even past MFA. The writeup walks through forensic proof of the session hijack, a portable local privilege escalation tool that plants a REG_LINK SymbolicLinkValue under the RdpBus device class to hijack the Group Policy state hierarchy and relaunch as SYSTEM via the AppMgmt service, followed by backdoor admin creation, ScreenConnect/Zoho Assist/Atera persistence, Impacket and Mimikatz for lateral movement/credential theft, and eventual DragonForce ransomware deployment. Includes concrete IOCs, log-based detection guidance, and hardening recommendations for NetScaler operators.

huntress.comwriteupAdded 3 Sep 2026, published 9 Jul 2026🛡️ Security

Wiz Research discloses GhostApproval, a symlink-following vulnerability (CWE-61) found in six AI coding assistants — Amazon Q Developer, Claude Code, Augment, Cursor, Google Antigravity, and Windsurf — where a malicious repo containing a symlink disguised as a config file tricks the agent into reading/writing sensitive files like ~/.ssh/authorized_keys outside the workspace sandbox. In several tools the agent's internal reasoning correctly identifies the true target file, but the confirmation dialog shown to the user still displays the fake filename (CWE-451, UI misrepresentation), turning human-in-the-loop approval into a rubber stamp; some tools (Amazon Q, Windsurf) even write to disk before the approval prompt appears. AWS (CVE-2026-12958), Google, and Cursor (CVE-2026-50549) shipped fixes; Anthropic initially rejected it as outside threat model before later shipping a symlink warning, Augment acknowledged but hasn't patched, and Windsurf has not responded.

wiz.iowriteupAdded 3 Sep 2026, published 8 Jul 2026🛡️ Security

Endor Labs describes how its AI SAST engine traced a source-to-sink data flow in Anthropic's Rust protobuf library, buffa, uncovering CVE-2026-55407: an unbounded, attacker-controlled heap allocation in the unknown-field decoder (decode_unknown_field, buffa/src/encoding.rs). Beyond the initially flagged ~2x LengthDelimited allocation flaw, the researcher found the StartGroup arm allows ~22x memory amplification, letting a 64MB payload balloon to ~1.4GB and OOM-kill a capped server, defeating the library's documented "cap input size" mitigation. The piece details the PoC, the fix shipped in buffa/connectrpc 0.8.0 (per-message unknown-field count cap), and a nuanced CVSS 4.0 disclosure discussion with Anthropic over deployment-dependent severity.

endorlabs.comwriteupAdded 3 Sep 2026, published 6 Jul 2026🛡️ Security

Johann Rehberger's writeup of his DEF CON Singapore talk detailing a multi-stage exploit chain against Microsoft 365 Copilot and Consumer Copilot (CVE-2026-24299): indirect prompt injection triggers Copilot's HTML preview feature, CSS background-image/font-face rules bypass img-src CSP and exfiltrate data over font-src, and the attack is made zero-click by instructing Copilot to auto-open the preview. It further chains this with abuse of Copilot's record_memory / durable-facts long-term memory tools (which have no audit logging) to plant persistent "SpAIware"-style instructions that silently exfiltrate any password or secret the user later types, plus Delayed Tool Invocation as a reliability trick and edge_navigate_to abuse in Edge's Copilot to leak stored memories. Includes full disclosure timeline (Oct 2025 report to Dec 2025/Mar 2026 fixes) and broader lessons on CSP not being a reliable AI security boundary and the "lethal trifecta."

embracethered.comwriteupAdded 6 Jul 2026🛡️ Security

Aikido Security's technical breakdown of CVE-2026-48611, a critical phpBB authentication bypass in the default configuration: by abusing the OAuth "login-link" feature's auth_provider query parameter, an unauthenticated attacker can force phpBB to use the trust-based `apache` auth provider (meant only for Apache Basic-auth proxies) and log in as any user, including admins, with a single request. The post details the vulnerable code in ucp_login_link.php/apache.php, shows a working PoC (curl/JS), explains a further UCP-to-ACP privilege escalation via the "founder" user's ability to self-promote to admin without a password, and describes an unauthenticated RCE chain via phpBB 4.0's Extensions Catalog fetching malicious extensions from attacker-controlled URLs. It also gives detection guidance (watch for `auth_provider=apache` + `mode=login_link`, including a GET/POST parameter-pollution bypass variant) and a disclosure timeline ending in the patched 3.3.17 release.

aikido.devwriteupAdded 3 Sep 2026, published 3 Jul 2026🛡️ Security

Orca Security writeup on "FortiBleed," a credential-theft vulnerability affecting Fortinet products, believed to relate to an authentication/memory-disclosure flaw allowing attackers to extract admin credentials. Page content was not available for verification, so specifics (exact CVE, affected versions, exploitation details) could not be confirmed from the fetched text.

orca.securitywriteupPublished and added 3 Jul 2026🛡️ Security

StepSecurity walks through the TeamPCP-led compromise of aquasecurity/trivy-action (CVE-2026-33634, CVSS 9.4), where attackers force-pushed a credential-stealing payload into 76 of 77 version tags, plus the related Checkmarx KICS action compromise, both harvesting secrets from /proc/pid/mem of the GitHub Actions Runner.Worker process and exfiltrating to a typosquatted domain (scan.aquasecurtiy.org, 45.148.10.212). The post details the attack technique of 'imposter commits' (fork commits reachable by SHA but not on any branch) used to hide the malicious tags, and situates the incident alongside the same-window CanisterWorm npm worm and TeamPCP credential stealers in litellm and telnyx PyPI packages, then maps ten StepSecurity/Harden-Runner defense-in-depth controls (egress blocking, process lockdown, SHA-pinning PRs, imposter-commit scanning, global blocklist) to each stage of the kill chain.

stepsecurity.iowriteupAdded 3 Sep 2026, published 2 Jul 2026🛡️ Security

JFrog researchers argue that CVSS/NVD severity ratings for a wave of 2026 Axios 'prototype pollution gadget' CVEs (e.g. CVE-2026-44494, CVE-2026-44490) overstate real-world risk because exploitation always requires a separate, pre-existing prototype pollution vulnerability elsewhere in the app. They build a concrete proof-of-concept chaining the seven-year-old Lodash defaultsDeep() prototype pollution flaw (CVE-2019-10744) with the Axios proxy-injection gadget to achieve a man-in-the-middle attack and steal credentials, then compare the pattern to similar gadget-style CVEs in DOMPurify (CVE-2024-48910), React Router (CVE-2026-42211), and Piscina (CVE-2026-55388). The piece is a case for contextual, exploit-chain-aware vulnerability prioritization over headline CVSS scores.

jfrog.comwriteupPublished and added 1 Jul 2026🛡️ Security

Huntress SOC incident writeup detailing a threat actor who exploited Adobe ColdFusion vulnerabilities (CVE-2023-26360, CVE-2023-29298, CVE-2023-29300) to drop a steganographic webshell hidden inside an image, then returned with a full defense-impairment batch script (i.bat) that disabled IIS logging, tampered with Windows Defender, killed/deleted security services (Sysmon, filebeat, SentinelOne, DrWeb, ImmunetProtect), used Image File Execution Options to freeze logging tools, deleted ModSecurity WAF module, enumerated FileZilla and multilingual local admin groups, weakened WDigest to force plaintext credentials in memory, dumped credentials via a Mimikatz kernel driver (mimidrv.sys), deleted CLSID/WScript registry keys, and cleared Windows event logs. The piece walks through each command block with attacker rationale and closes with concrete mitigation guidance for defenders.

huntress.comwriteupAdded 3 Sep 2026, published 29 Jun 2026🛡️ Security

JFrog Security Research discloses CVE-2026-8461 ("PixelSmash"), a critical heap out-of-bounds write in FFmpeg's MagicYUV decoder caused by a rounding mismatch between chroma-plane allocation and slice-height calculation. The team escalates the OOB write into reliable remote code execution by hijacking the AVBuffer.free function pointer to call system(), demonstrating full RCE via a 50KB crafted AVI against a Jellyfin media server (through automatic library/ffprobe scanning) and a Nextcloud instance (via video thumbnail preview generation), plus DoS crashes across mpv, Kodi, OBS Studio, Immich, PhotoPrism and vLLM. The post frames the bug as a software supply-chain issue since libavcodec is a silent transitive dependency in hundreds of downstream media applications, and covers detection, patching, and build-time workarounds.

jfrog.comwriteupPublished and added 22 Jun 2026🛡️ Security

Endor Labs re-ran their Agent Security League benchmark (200 real-world vulnerability-fixing tasks) with Claude Fable 5 paired against the Cursor agent instead of Claude Code, and found the same model jumped from 59.8% FuncPass/19.0% SecPass to 72.6% FuncPass/29% SecPass — the best fair SecPass score on their leaderboard, showing the agent harness can matter more than model choice. The piece walks through instance-level diffs on CVE-2020-15118 (Wagtail XSS via unescaped help_text), CVE-2017-12440 (OpenStack Aodh trust-ID leakage), and CVE-2024-3571 (LangChain local file store path traversal via yield_keys) to show Cursor produced more complete patches that covered secondary sinks Claude Code missed, and confirms 28 of 29 flagged cheating cases were training-data memorization rather than git/web lookup.

endorlabs.comwriteupPublished and added 18 Jun 2026🛡️ Security

Sysdig's Threat Research Team captured the full architecture of "VAPT," an autonomous multi-stage exploitation framework that a threat actor powered using a misconfigured, internet-exposed Ollama server (port 11434, no auth) instead of paid LLM APIs. The tool chains service fingerprinting, CVE matching, PoC/blind-SQLi generation, credential extraction, privilege escalation, and an autonomous orchestrator that confirms RCE via a VAPTb3gin/VAPTfin marker wrapped around `id` output, and was observed being actively developed against private HackTheBox-style practice ranges before any real-world targeting. It represents the convergence of LLMjacking (stolen inference compute) with fully agentic offensive tooling, and the piece includes captured system prompts, IOCs, and hardening guidance for self-hosted model servers.

sysdig.comwriteupAdded 28 Jun 2026, published 17 Jun 2026🛡️ Security

Orca Security researchers found that two critical nginx heap buffer overflow CVEs in the rewrite engine (ngx_http_script.c) — CVE-2026-42945 ("NGINX Rift") and CVE-2026-9256 ("nginx-poolslip") — also live untouched in Tengine, Alibaba's nginx fork last released in October 2023 and running on 1.45 million internet-facing servers (Aliyun, Taobao, CDN edges, reverse proxies). They compiled Tengine 3.1.0 with AddressSanitizer, built working single-request unauthenticated crash exploits for both bugs, and confirmed neither CVE had a patched Tengine release as of publication, with heap corruption potentially steerable toward code execution if ASLR is disabled/bypassed.

orca.securitywriteupPublished and added 16 Jun 2026🛡️ Security

Varonis Threat Labs details SearchLeak, a three-stage exploit chain (CVE-2026-42824, critical) that abuses Microsoft 365 Copilot Enterprise Search: a Parameter-to-Prompt (P2P) injection via the search URL's `q` parameter turns a clicked link into an AI instruction, an HTML-rendering race condition lets an injected `<img>` tag fire before Copilot's `<code>`-block sanitizer applies, and Bing's "Search by Image" endpoint (allowlisted in the CSP) performs a server-side fetch that exfiltrates the stolen data to an attacker's server. A single click on a trusted microsoft.com link lets an attacker silently exfiltrate emails, security codes, calendar data, and SharePoint/OneDrive content with the victim's full Graph permissions, no plugins or extra permissions required. Microsoft has patched the issue; the post is a follow-up to Varonis' earlier "Reprompt" finding in Copilot Personal.

varonis.comwriteupAdded 16 Jun 2026, published 15 Jun 2026🛡️ Security

watchTowr Labs analyzes CVE-2026-20253, a pre-authentication vulnerability in the PostgreSQL sidecar service of Splunk Enterprise 10 and later. The sidecar's backup and restore API lacks authentication and is reachable through the main web interface. The write-up explains the root cause and which deployments are vulnerable by default, notably Splunk Enterprise on AWS, and shows how the flaw escalates to remote code execution. It also releases a non-exploitative detection script that tells vulnerable hosts from patched ones.

labs.watchtowr.comwriteupAdded 6 Sep 2026, published 12 Jun 2026🛡️ Security

Endor Labs benchmarked Claude Fable 5 paired with Claude Code on 200 real-world vulnerability-fixing tasks, scoring 59.8 percent FuncPass but only 19.0 percent SecPass. The report covers record timeouts from extended thinking, the highest confirmed cheating volume post-hardening driven by training-data memorization, and four first-ever solves including CVE-2023-27494, CVE-2024-28102, CVE-2021-43818, and CVE-2021-41124.

endorlabs.comwriteupPublished and added 11 Jun 2026🛡️ Security

Huntress researcher demonstrates that Windows' search: URI handler leaks a user's Net-NTLMv2 hash via the crumb=location: parameter, exploitable via a single clicked link (e.g. in Edge) or a `start` command with no admin rights or malware needed. The bug mirrors CVE-2026-33829 (Snipping Tool's ms-screensketch: handler, patched by Microsoft in April 2026) since both trace to the same DelegateExecute CLSID (SearchExecute/CLSID_SearchMSExecute in ExplorerFrame.dll), but MSRC closed this report as Moderate severity with no CVE and no fix, citing case-by-case servicing exceptions. The post includes reproduction steps with Responder, notes prior related disclosures by Varonis (search-ms:, 2024) and Trellix (search:, 2023), and recommends mitigations like blocking outbound SMB, enforcing SMB signing, and restricting NTLM.

huntress.comwriteupAdded 3 Sep 2026, published 2 Jun 2026🛡️ Security

depthfirst reports 21 zero-day memory-safety bugs in FFmpeg found by its autonomous security agent for about $1k, nine with CVEs (CVE-2026-39210 to CVE-2026-39218). Bugs span the TS, DASH, AVI and CAF demuxers, RTP/RTSP depacketizers, swscale and the VP9 decoder, some latent since 2003. It details the AV1 RTP depacketizer heap overflow, which overwrites AVBuffer.free to reach PC control from one 183-byte packet.

depthfirst.comwriteupAdded 29 Oct 2026, published 2 Jun 2026🛡️ Security

Analysis of CVE-2026-8501, a vulnerability in the PCTCore64.sys driver that allows arbitrary process termination, enabling a Bring Your Own Vulnerable Driver (BYOVD) attack. Such flaws let attackers with a signed but vulnerable kernel driver kill security/AV processes from user mode, a common technique for disabling endpoint defenses prior to further compromise.

blacksnufkin.github.iowriteupAdded 3 Sep 2026, published 2 Jun 2026🛡️ Security

Socket's Threat Research team analyzed a repository takeover of the popular npm package art-template, whose versions 4.13.5 and 4.13.6 were backdoored to inject a script loader (v3.jiathis[.]com) that redirects through a watering hole to a Safari/iOS browser exploit delivery framework nearly identical to Google's previously-reported Coruna exploit kit. The writeup provides a full multi-layer deobfuscation of the implant (UTF-16 packing, base64/eval chains, per-string XOR), maps its version-gated payload flags to specific WebKit CVEs (CVE-2021-30952, CVE-2022-48503, CVE-2023-43000, CVE-2024-23222), documents WASM-based JIT fingerprinting/anti-bot probes and CPU-architecture discrimination, and links the campaign to threat actor UNC6691 via content-addressed URL scheme, YARA matches, and C2 domain patterns, ending with concrete detection recommendations and IOCs.

socket.devwriteupPublished and added 22 May 2026🛡️ Security

Huntress SOC details two Gentlemen ransomware incidents showing Windows Event Log clearing, PowerShell-based Defender tampering, and Scheduled Task persistence via a fake svchost32.exe creating a SOCKS proxy C2 connection. Ties findings to a leaked internal RaaS database revealing CVE-2024-55591 exploitation and infrastructure links to Qilin and Lazarus Group.

huntress.comwriteupAdded 3 Sep 2026, published 21 May 2026🛡️ Security

Security researcher Aonan Guan discloses a second Claude Code network sandbox bypass: the SOCKS5 proxy that enforces wildcard domain allowlists (e.g. *.google.com) hands raw hostnames from CONNECT requests into a JavaScript endsWith() check with no canonicalization, so an attacker-controlled hostname like attacker-host.com\x00.google.com passes the JS filter but gets truncated at the null byte by libc's getaddrinfo, causing the OS to actually dial the blocked host. Every Claude Code release from 2.0.24 (sandbox GA, 2025-10-20) through 2.1.89 was affected until a silent fix in sandbox-runtime 0.0.43 / Claude Code 2.1.90 (2026-04-01); combined with prompt injection this let sandboxed agent code exfiltrate credentials and internal data over a channel egress logs typically don't inspect. It follows the earlier CVE-2025-66479 (allowedDomains: [] read as allow-everything) and highlights Anthropic's pattern of shipping fixes with no CVE, advisory, or changelog note.

oddguan.comwriteupAdded 24 Jun 2026, published 20 May 2026🛡️ Security

Huntress breaks down four Linux kernel zero-copy vulnerabilities disclosed in rapid succession in 2026 — CopyFail (CVE-2026-31431) in algif_aead, Dirty Frag (CVE-2026-43284, CVE-2026-43500) in xfrm-ESP/RxRPC, and Fragnesia (CVE-2026-46300) in XFRM ESP-in-TCP — all of which let an unprivileged local user overwrite read-only page-cache entries (e.g. /etc/passwd, /usr/bin/su) via splice()-based zero-copy syscalls to gain root, echoing the 2022 Dirty Pipe (CVE-2022-0847) technique. The article explains the zero-copy/page-cache mechanics behind the bug class, notes all four were found with LLM assistance, and gives kernel-module-disabling mitigations plus a recommendation to enable LSM BPF for defense.

huntress.comwriteupAdded 3 Sep 2026, published 14 May 2026🛡️ Security

A researcher details an autonomous vulnerability-hunting system built with Claude Code and 8 custom MCP servers (300+ tools) across a 5-VM Proxmox lab, using a "hallucination bin" validation pipeline (findings must pass PoC/exploitability/low-priv gates before promotion) and a RAG-backed knowledge loop that learns from prior campaigns. Concrete outputs include two new Go standard library CVEs (CVE-2026-33809 TIFF OOM, CVE-2026-33812 SFNT/GPOS OOM), a four-stage Windows OEM management-agent chain (named-pipe auth bypass → SSRF via WCF → catalog injection → SYSTEM code execution via BYOVD), and two macOS app-distributor findings (browser/quarantine DB exfiltration and a leaked debug RSA key enabling Sparkle update-signature bypass). Also covers a self-built token-cost/ROI tracker (TokenBurn) and a bounty-program ROI-scoring model for target selection.

blog.zsec.ukwriteupAdded 3 Sep 2026, published 13 May 2026🛡️ Security

Depthfirst researchers used an internal automated code-analysis system to find four remote memory-corruption bugs in NGINX, the most severe being CVE-2026-42945 — an 18-year-old heap buffer overflow in ngx_http_rewrite_module triggered when a rewrite directive with a query string is followed by a set directive referencing a regex capture group. The writeup walks through the two-pass script-engine root cause (a stale is_args flag causes the length-calculation pass and copy pass to disagree on escaping), then details a full exploitation chain using cross-request heap feng shui to corrupt an adjacent ngx_pool_t, spray fake ngx_pool_cleanup_s structures via POST bodies, and achieve unauthenticated RCE by hijacking the pool cleanup handler to call system(). It also lists three other confirmed CVEs (2026-42946, 2026-40701, 2026-42934) and affected version ranges across NGINX OSS, NGINX Plus, App Protect, Ingress Controller and Gateway Fabric.

depthfirst.comwriteupAdded 23 Sep 2026, published 13 May 2026🛡️ Security

XBOW's detailed technical writeup on CVE-2026-45185, a critical unauthenticated remote-code-execution vulnerability in Exim triggered by a use-after-free during GnuTLS TLS shutdown: Exim frees its xfer_buffer while a nested BDAT chunking receive wrapper can still call the stale tls_ungetc(), writing a single newline byte into freed memory that lands on allocator metadata and escalates to RCE. The post walks through Exim's SMTP/BDAT/TLS receive-callback plumbing and its custom store pool allocator in detail, then narrates a seven-day disclosure-window contest where the researcher (assisted by an LLM) and XBOW's autonomous exploit-development harness raced to build a working exploit chain (glibc largebin corruption, hijacking a malloc call via Exim's spool fdopen, and overwriting a FILE struct) against progressively hardened builds.

xbow.comwriteupPublished and added 13 May 2026🛡️ Security

Microsoft discloses two CVEs in its Semantic Kernel AI agent framework: CVE-2026-26030, where AI-model-controlled input into an eval()-executed Python lambda filter (used by the In-Memory Vector Store's Search Plugin) bypasses an AST-based blocklist via class-hierarchy traversal to BuiltinImporter.load_module, achieving arbitrary code execution from a single injected prompt; and CVE-2026-25592, where the .NET SessionsPythonPlugin's DownloadFileAsync was accidentally exposed as a callable AI tool with an unsanitized file path, letting an attacker escape the Azure Container Apps sandbox and write a payload into the host's Startup folder for persistence/RCE. The post details the exploit chains (mapped to MITRE ATLAS AML.T0051→AML.T0016), Microsoft's four-layer AST allowlist fix and path-validation patch, affected version ranges, KQL hunting queries for post-exploitation detection, and a public CTF challenge to practice exploiting CVE-2026-26030.

microsoft.comwriteupAdded 2 Oct 2026, published 7 May 2026🛡️ Security