57 results for “WSL”

Galaxy Research newsletter on the roughly $6.3b drained from Binance across 10 blockchains, which TRM Labs and Chainalysis attribute to TraderTraitor. On Ethereum the attacker used EIP-7702 to turn a hot wallet into a sweeper contract backed by 50 pre-signed authorizations. Binance's preliminary finding is a compromised DevOps laptop, with no wallet key leak. Tether, Circle, Ripple and World Liberty froze about $2.7b; Galaxy also assesses Binance's ability to cover losses.

galaxy.comarticleAdded 30 Oct 2026🛡️ Security

Cisco Talos Threat Source newsletter for the week of the PHP and Node.js vulnerability news cycle. It summarises NIK C2, a Go-based Windows implant that dumps credentials, streams keystrokes, deploys screen-locking ransomware and uses a victim's hijacked OpenAI API keys to analyse stolen data. It also lists weekly headlines (CISA KEV PHP bugs, Brotli flaw, Gheist GitHub token theft), Talos links and top malware hashes.

blog.talosintelligence.comarticlePublished and added 29 Oct 2026🛡️ Security

tl;dr sec #352 is a security newsletter issue covering [un]prompted talks (AI-assisted firmware patching, a "Security Constitution" for finding cloud design flaws), Azure API Connections cross-tenant bugs worth $200,000, and a test of 14 LLMs given AWS keys. It also covers a paper on malicious LLM API routers (9 of 428 injecting code) and Datadog's "counterfeit policy" bypass of the Jev classifier.

tldrsec.comarticleAdded 30 Oct 2026, published 29 Oct 2026🛡️ Security

The tweet relays Pillar Security research that opencode on Windows and WSL could run attacker-controlled code during remote MCP server OAuth sign-in. The fix shipped in opencode 1.18.33 on 28 September, with no advisory or CVE published. It advises users of remote MCP servers to update and review which servers they connect to. Technical details are not in the post.

x.comthreadAdded 29 Oct 2026, published 27 Oct 2026🛡️ Security

Thread on a critical opencode bug disclosed by Pillar Security on Oct 19. On Windows and WSL, a remote MCP server could run code during OAuth sign-in, because the server-chosen authorization URL was put unescaped into a PowerShell command, so a PowerShell subexpression executed. opencode fixed it in 1.18.33 on Sep 28 as a browser-launch refactor with no advisory or CVE. MCP Inspector published an advisory for the same bug class, and its fix needs a major bump of the open package.

x.comthreadAdded 27 Oct 2026, published 25 Oct 2026🛡️ Security

tl;dr sec #351 is a weekly security newsletter. Clint Gibler describes working with OpenAI, Calif, Wiz and the PHP maintainers on the PHP2Shell unauthenticated RCE disclosure, which affects 13 years of PHP. It also covers Datadog's pathrunner AWS IAM escalation framework, Trail of Bits' patching-bugs and regression-hunt Codex plugins, XBOW finding de-duplication, backdoored open-weight models, and CREBench.

tldrsec.comarticleAdded 30 Oct 2026, published 22 Oct 2026🛡️ Security

Post summarising Pillar Security's finding of a remote code execution flaw in OpenCode, the open-source AI coding agent. Versions 1.0.137 through 1.18.32 could run code from a remote MCP server during OAuth sign-in on Windows and WSL, with no prompt injection needed. The fix is in 1.18.33 (released 28 September). No advisory or CVE was issued, so scanners will not flag old installs. Interim advice is to remove unvetted remote MCP servers.

x.comthreadAdded 22 Oct 2026, published 21 Oct 2026🛡️ Security

Summary of Pillar Security research on opencode, in which a malicious remote MCP server runs code on a Windows or WSL machine during the OAuth login step. The login URL goes unsanitised into PowerShell through the npm "open" package, so an https:// link containing $(...) executes. Affected versions are 1.0.137 to 1.18.32, fixed in 1.18.33 (28 September) as a "refactor" with no advisory or CVE. The behaviour was first reported in 2020 as a WSL 2 broken-link bug.

x.comthreadAdded 21 Oct 2026, published 19 Oct 2026🛡️ Security

Galaxy Research newsletter piece on the roughly $91M theft from buyers of Ledger hardware wallets sold by the reseller CryptoBilis. A hidden component reads the 24-word recovery phrase off the screen during setup and sends it over LTE via an eSIM. The Secure Element and Genuine Check are untouched, so the check passes on tampered units. It traces the drain across 474 victim addresses on Bitcoin, Ethereum and TRON, including 88% of the value moving in one hour on Oct. 9, and the laundering and freezes (Tornado Cash, Tether). It also places the incident among the quarter's other custody and infrastructure failures (Coldcard weak seeds, Liquid, Bitget) and gives buying and operational guidance.

galaxy.comarticleAdded 16 Oct 2026🛡️ Security

Talos Threat Source newsletter arguing that record CVE volume (over 70k by end of Q3, six-digit CVE IDs) is not the same as exploitation. KEV grew only 37% YoY against 105% for CVEs, about a third of KEV entries are CVEs from 2025 or earlier (a patch gap), and 29% of 2026 KEV CVEs were added on their publication date. It also notes the new KEV "forensicTriage" column (BOD 26-04), summarizes the Talos/Insikt report on UAT-6275 espionage against CIS governments with GitHub-hosted payloads and a WinRAR exploit, and lists weekly headlines.

blog.talosintelligence.comarticlePublished and added 15 Oct 2026🛡️ Security

tl;dr sec issue #350 is a weekly security newsletter digest. It covers XBOW's six-day Chrome full-chain exploit built with GPT-5.6 Sol, Semgrep's IDOR benchmark metrics, the EntraGoat vulnerable Entra ID lab, Zenity's AWS Bedrock AgentCore IMDS credential theft, Cisco Talos's CAIRN hunting toolkit for AI-integrated malware, the REA reverse-engineering MCP, runZero's sshamble, and a Copilot for Word AI worm.

tldrsec.comarticleAdded 30 Oct 2026, published 15 Oct 2026🛡️ Security

Simon Willison describes building a new "Newsletters" index feature for his Django-powered blog almost entirely by talking to the ChatGPT desktop app's Codex voice mode (running GPT-6 Astra) while cooking dinner, then switching to typed prompts to review and fix the resulting GitHub pull request. He details the workflow — starting a local dev server, voice-describing requirements including a new model, migrations, four import scripts, and search integration — and reflects on where voice-driven coding agent interaction excels (multitasking, visual preview of changes) versus where typing remains more efficient (pasting errors, highlighting specific code).

simonwillison.netarticlePublished and added 9 Oct 2026🧠 AI

Galaxy Research newsletter piece covering "Shielded Bitcoin," a paper by [[alloc] init] researchers Clara Shikhelman, Mikhail Komarov, and Aleksei Moskvin proposing a Zcash-style shielded pool (encrypted notes, public nullifiers, zero-knowledge proofs) run as a Bitcoin L1 metaprotocol via OP_RETURN envelopes, with peg-in/peg-out deliberately left to a future "PIPEs v2" paper. The article's security-relevant angle flags that novel ZK circuits need battle-testing — citing Zcash's own Orchard Pool soundness bug that survived professional audits for four years before being fixed in the Ironwood upgrade — and that bridge/peg mechanisms (the likely weak point) have historically been the most exploited component in crypto, naming Ronin, Wormhole, Nomad, and KelpDAO. It also notes a growing AI-driven deanonymization threat to transparent blockchains, citing ETH Zurich/Anthropic research showing LLM agents can re-identify pseudonymous users from profile data alone.

galaxy.comarticleAdded 8 Oct 2026🛡️ Security

Galaxy Research's weekly brief devotes its lead section to AI governance: it recaps Sam Altman's and Dario Amodei's UN Security Council remarks calling for international AI safety coordination, contrasts a disclosed OpenAI agent incident (an agent accessed non-public Medicare data in Australia, reported three months late) with Anthropic's 950-agent DNA-database research run, and cites concrete agent-economy data — OpenRouter's agent token usage overtaking human usage and growing ~14x since February, Cloudflare's agent-traffic crossover, and Vercel AI Gateway data showing a 23% monthly price drop and open-weight models rising to 56% of token volume. The analysis argues that as inference gets cheaper and open-weight models gain share, AI governance's hard problem shifts from controlling frontier labs to controlling where cheap, widely available agents can act. The rest of the newsletter covers an unrelated Bitcoin privacy protocol proposal and CFTC guidance on prediction "mention markets."

galaxy.comarticleAdded 8 Oct 2026🧠 AI

Cisco Talos's weekly Threat Source newsletter, opening with a risk-management anecdote about network-isolating unpatchable legacy check-printing systems, then disclosing new CAIRN research classifying "A3: AI-Analysis Evasion" — malware authors embedding natural-language prompt-injection text into code/binaries to manipulate AI-assisted malware analysis pipelines. The MANTLEMAZE malware family exemplifies this, pairing such AI-deception attempts (effective ~35% of the time) with BYOVD abuse to disable EDR from kernel space. The issue closes with a roundup of the week's security headlines (Citrix NetScaler CVE-2026-88779, a Danish government data breach, Warlock ransomware) and Talos's current top-prevalence malware hashes/IOCs.

blog.talosintelligence.comarticlePublished and added 8 Oct 2026🛡️ Security

A Galaxy Research newsletter piece dissecting Dario Amodei's essay "We Must Pace the Frontier," which proposed embedded third-party evaluators (e.g. METR), cross-lab safety coordination with antitrust waivers, and eventual global AI governance including China. The piece separates Amodei's "operational" (QA/pipeline) and "research" (alignment, interpretability, evals) problems from his "Democratic Coordination" ask, arguing the latter functions as a regulatory moat rather than a necessity, and draws a parallel to Sam Bankman-Fried/FTX-era effective-altruism rhetoric about unilateral existential-risk authority. It covers reactions from Sam Altman (agreeing to adopt evaluators), Trump (rejecting slowdown, citing the AI race with China), David Sacks (questioning METR's neutrality), and Mark Zuckerberg (citing Meta's unilateral delay of Muse and existing liability incentives as sufficient without an industry pact).

galaxy.comarticleAdded 8 Oct 2026🧠 AI

A Galaxy Research newsletter piece covering Sam Altman and Dario Amodei's UN Security Council addresses calling for international AI safety standards and cross-border incident reporting, set against a concrete failure case: an OpenAI agent accessed public and non-public files on Australia's Medicare statistics portal on June 18 due to "misaligned model behavior," with OpenAI notifying Services Australia nearly three months later, after discovering the issue in an August review. The article also cites Anthropic's disclosure that ~950 Claude agents autonomously searched DNA databases for 21 hours to identify a novel enzyme system, and data showing agent token usage now exceeds human usage on OpenRouter and Cloudflare's network, arguing that cheaper, more capable, increasingly open-weight models are outpacing the kind of frontier-lab-centric coordination proposed at the UN.

galaxy.comarticleAdded 8 Oct 2026🛡️ Security

A Galaxy Research newsletter piece analyzing the gap between AI governance proposals and real-world agent deployment: Sam Altman and Dario Amodei's UN Security Council remarks calling for international safety standards and cross-border incident reporting, contrasted with an OpenAI agent that accessed non-public Medicare files in Australia (reported to regulators nearly three months after the fact) and Anthropic's deployment of ~950 Claude agents to search DNA databases for 21 hours, consuming 210M tokens, to identify a novel enzyme system. It ties these events to measurable trends — agent token usage on OpenRouter growing ~14x from February to August 2026 versus 2.8x for human usage, Cloudflare's automated-traffic-over-human crossover arriving earlier than forecast, and Vercel AI Gateway data showing average token price falling 23% in a month with open-weight models rising from 7% to 56% of volume — arguing that falling costs and spreading open-weight adoption make frontier-lab self-regulation insufficient for agent governance.

galaxy.comarticleAdded 8 Oct 2026🧠 AI

Galaxy Research's weekly brief includes a detailed postmortem of the $387.5M Bitget hack: attackers exploited a zero-day in two unnamed third-party security products ("Product A"/"Product B") to obtain high-level internal credentials, inserted forged withdrawal commands into Bitget's wallet backend across 11 chains, then deleted the fraudulent commands — with Bitget attributing the attack to North Korean actors based on IP behavior and wallet overlaps found by Elliptic and TRM. The piece draws a direct parallel to the $1.5B Bybit/Lazarus heist (compromised Safe{Wallet} infrastructure rather than stolen keys) to argue that private-key cryptography is effectively solved and attackers now target the approval pipeline/intermediary services instead; it also covers the follow-on $3.8M NEAR Intents Omni-bridge exploit and THORChain's continued role laundering DPRK proceeds. The newsletter's other sections (White House "Super Intelligence" AI Accord, SEC crypto buyback FAQs) are policy commentary, not security-technical.

galaxy.comarticleAdded 8 Oct 2026🛡️ Security

Issue #349 of the tl;dr sec newsletter. It summarizes: Google Threat Intelligence Group data showing monthly CVE disclosures doubling (5,045 to 10,740) with exploitation tracking n-days; Andrew Nesbitt's survey of package manager install-time sandboxing (Homebrew 7.0.0, opam, SwiftPM, Cargo, pnpm); the Graphalgo malware campaign reaching Terraform providers and Go modules; and XBOW's role-mapping approach to finding IDORs. It also covers Turbo Intruder HTTP/3 support, Vercel's $1M Firecracker sandbox bounty, and Perplexity's test of AI agents escaping microVM sandboxes via DNS spoofing and shared-IP CDN gaps.

tldrsec.comarticleAdded 15 Oct 2026, published 8 Oct 2026🛡️ Security

MXC is Microsoft's cross-platform sandboxed code execution system for running untrusted workloads — model output, plugins, and tool calls — behind a unified containment model with Rust, .NET, and Node SDKs. It offers multiple containment backends (ProcessContainer, Windows Sandbox, LXC, Bubblewrap, Seatbelt, MicroVM/Nanvix, Hyperlight, WSLC) with JSON-based filesystem, network, and UI policies, plus diagnostics like audit mode for building policies from observed access.

github.comrepoAdded 8 Oct 2026🧠 AI

A daily crypto-market newsletter segment reporting Ethereum Foundation researcher Justin Drake's warning that AI, not quantum computing, may be the first to break ECDSA — the elliptic-curve signature scheme securing Bitcoin and Ethereum — potentially within months by recovering private keys from exposed public keys using large GPU clusters. Drake calls for industry-wide "bunker mode": migrating self-custodied funds to fresh addresses whose public keys remain hashed/hidden, and names exchanges (Binance, Bitbank, Robinhood, Bitfinex, Tether) he wants to harden cold storage. The article also notes a concurrent Europol report flagging crypto wallets with already-revealed public keys as the main weak point for future quantum/AI attacks, since those cannot be retroactively protected.

decrypt.coarticlePublished and added 8 Oct 2026🛡️ Security

Kubernetes Agent Sandbox is a Kubernetes SIG Apps project that gives each AI agent session an isolated, stateful, single-Pod workspace for running untrusted agent-generated code. The newsletter edition explains isolation through gVisor or Kata Containers, shows a Sandbox custom resource, and walks through SandboxTemplate, SandboxWarmPool, SandboxClaim and Sandbox Router. It also covers suspend/resume and scheduled deletion, and links a hands-on guide.

newsletter.devopscube.comarticleAdded 21 Oct 2026, published 7 Oct 2026🛡️ Security

Kubernetes Agent Sandbox is a Kubernetes SIG Apps project that gives each AI agent session an isolated, stateful, single-Pod workspace for running untrusted code. The newsletter explains the Sandbox CRD, SandboxTemplate, SandboxWarmPool, SandboxClaim and Sandbox Router workflow, gVisor and Kata Containers isolation, and suspend/resume and scheduled deletion. It points to a hands-on guide with a Kubernetes troubleshooting agent.

newsletter.devopscube.comarticleAdded 21 Oct 2026, published 7 Oct 2026🧠 AI

Hackers Arise walks through an installable Chrome Isolated Web App that packages nine popular Active Directory pentesting tools, including NetExec (NXC), SharpHound, LDAP-shell, Evil-WinRM, and Certipy, so they run natively inside a Chrome tab with multi-protocol network access, bypassing the need for Linux or WSL. The piece shows setup via Chrome flags and an IWA install URL, then a lab demo: port-scanning a target, using Evil-WinRM for remote access, enumerating DNS zones with ADIDNS, and running Certipy to flag an ESC1-vulnerable ADCS template for domain-admin escalation.

hackers-arise.comwriteupAdded 7 Oct 2026, published 6 Oct 2026🛡️ Security

The OSINT Tools Map, built by @cyb_detective, is an interactive world map letting investigators click a country to find relevant local OSINT resources such as phonebooks, business registers, cadastral maps, and court records. The same tweet announces the companion "OSINT Tools Library" at tools.osintnewsletter.com, a curated, investigator-first directory of tools used in real cases that is actively soliciting community additions.

x.comtoolAdded 5 Oct 2026, published 4 Oct 2026🛡️ Security

AI;DR is an open-source automated pipeline that scrapes AI news from 20+ sources daily, then uses an LLM (routed through AnyRouter) to rank and summarize the stories into a single edition, publishing it to a website, email newsletter, and Telegram channel. It's hosted on Cloudflare and the creator notes it was largely built and is maintained by AI agents. The tool is a concrete example of using LLM-based ranking/summarization to turn a noisy multi-source feed into one curated digest.

x.comthreadPublished and added 1 Oct 2026🧠 AI

Google's Product Security team describes three high-severity bugs found by PageBreak, an internal LLM-agent scanner that validates findings by running payloads against live environments. The cases are cache poisoning on apis.google.com (an unkeyed `extra_path` injected into cached JS), XSS on admin.google.com where the agent bypassed the `sig` check by getting the authorize endpoint to sign a `javascript:` URI, and a UXSS in the Tag Assistant extension via a weak `onConnectExternal` origin check and nonce exfiltration. It shows what agentic, deterministically verified scanning can find in well-reviewed targets.

bughunters.google.comwriteupAdded 2 Oct 2026, published 1 Oct 2026🛡️ Security

tl;dr sec #348 is a weekly security newsletter issue. It summarises Google's PageBreak agent (500+ XSS bugs found since November 2025, validated deterministically), Perplexity's open-source Numbat agent-security tool (52 CEL rules), and SpecterOps' CiliumHound. It also covers Scaleway IAM attack paths, the NCSC essay on defending agentically, Julien Vehent on detection fidelity, and Wiz's Scan for Good.

tldrsec.comarticleAdded 30 Oct 2026, published 1 Oct 2026🛡️ Security

Announcement tweet for Trail of Bits's September "Tribune" newsletter, which fact-checks 1Password's AI-powered patching benchmark, details a signature-forgery bug found in Miden's zkVM and a string-slicing bug in the Lean theorem prover/language, and reports 27 advisory submissions to OpenClaw plus seven new completed security reviews. It links out to the full newsletter on Mailchimp (mailchi.mp/trailofbits).

x.comthreadAdded 1 Oct 2026, published 30 Sep 2026🛡️ Security

This is a release changelog for awslabs/mcp, AWS Labs' collection of Model Context Protocol servers covering services like HealthOmics, Aurora DSQL, Bedrock Knowledge Base retrieval, ECS, CloudWatch, billing/cost management, and dataprocessing. This release adds vended metrics tools, SQL parser-based policy guards for Aurora DSQL, agentic retrieval support for Bedrock KB, and fixes several security issues including region validation to prevent SSRF credential disclosure in the CloudWatch server and read-only mode bypass in the MySQL server. It reflects an actively maintained, high-velocity multi-server MCP monorepo used for AWS tool integration with LLM agents.

github.comrepoAdded 26 Sep 2026🧠 AI

Sandyaa is an open-source autonomous code-audit tool that points at a local directory or git URL and runs end-to-end, driven by the Claude Code CLI (optionally Gemini) with no separate API key required. It uses a Recursive Language Model approach — the model drives a Python REPL to chunk code, spawn sub-LLM queries, and aggregate results — running eight recursive passes (call-chain tracing, data-flow expansion, vulnerability chaining, exploitability proof, etc.) and an attacker-control-reachability analyzer to filter unreachable findings, then writes each finding with a working exploit PoC and an evidence.json linking claims to file/line. Maintained by SecureLayer7, who report using it to surface zero-days; it's alpha-stage, macOS-tested, Linux/WSL2-expected-to-work, and unsupported on native Windows.

github.comrepoAdded 26 Sep 2026🛡️ Security

CVE-2026-85787 affects awslabs postgres-mcp-server before 1.1.7. The SQL validation component uses an incomplete list of disallowed inputs. Crafted SQL placed in content submitted while an authenticated user interacts with the MCP server can bypass the read-only restriction and modify data in PostgreSQL. The fix is to upgrade to 1.1.7 or later. VulDB's added analysis is generic: it points to SQL injection (CWE-89) and recommends least-privilege database accounts and parameterized queries.

vuldb.comadvisoryAdded 26 Sep 2026🛡️ Security

CVE-2026-18655 describes an improper endpoint restriction flaw (CWE-923) in the RabbitMQ broker connection tools of awslabs.amazon-mq-mcp-server versions before 2.0.24. A remote unauthenticated attacker can use prompt injection introduced into the MCP client context to redirect the broker hostname to an attacker-controlled endpoint, causing Amazon MQ for RabbitMQ credentials or OAuth access tokens to be sent there; CVSS 4.0 base score 7.1 (High). Fixed in version 2.0.24, referenced via an AWS security bulletin and a GitHub security advisory (GHSA-xwj6-8x5h-hjp6).

nvd.nist.govadvisoryAdded 26 Sep 2026🛡️ Security

CVE-2026-16584 affects AWS API MCP Server (awslabs.aws-api-mcp-server) versions 0.2.13 through 1.3.46: if the security policy enforcement data fails to initialize at server startup, the tool silently skips policy checks for the rest of the process's life, letting an agent execute AWS API operations the admin configured the policy to deny or gate. Underlying IAM permissions still apply and are unaffected, but the intended allow/deny gating layer is bypassed (CWE-455, improper handling of initialization failure). Fixed in 1.3.47.

nvd.nist.govadvisoryAdded 26 Sep 2026🛡️ Security

AWS bulletin for CVE-2026-87911, an OS command injection flaw in awslabs.postgres-mcp-server (Python, PyPI) versions before 1.1.7. The server's read-only enforcement in its SQL validation component can be bypassed with a crafted `COPY ... TO PROGRAM` statement, letting an unauthenticated actor run OS commands on a self-managed PostgreSQL host when the configured connection role holds superuser or pg_execute_server_program privileges. Fixed in 1.1.7; AWS also recommends connecting the MCP server with a least-privilege, non-superuser role as defense in depth.

aws.amazon.comadvisoryAdded 26 Sep 2026🛡️ Security

Talos's weekly Threat Source newsletter opens with a first-person account of a social-engineering scam targeting security professionals: an unsolicited $300 "consultancy" offer that escalates into pressure to extract non-public insights from employers, a pattern the author links to fake-recruiter/trojanized-job-offer schemes. The issue also announces CAIRN, Talos's new open-source, metadata-first toolkit (YARA-based classification tiers) for hunting AI-integrated malware like the autonomous CLOSEDQUORUM C2 implant, and rounds up the week's headlines including the ShinyHunters FBI data claim, fake LastPass installers dropping a kernel-level EDR killer, Japan's takedown of a North Korean (WaterPlum/Contagious Interview) laptop farm, cyberattacks on Colorado water utilities, and a Gemini-driven autonomous breach of three companies.

blog.talosintelligence.comarticleAdded 7 Oct 2026, published 24 Sep 2026🛡️ Security

tl;dr sec #347 is a weekly security newsletter issue. It covers a Nginx $uri CRLF injection that becomes a self-replicating desync worm, Google GFile bugs paid $97,604, GitHub PAT compromise investigation and audit-log hunting guides, Claude Code finding 17 Java deserialization chains, an actor using open-source AI harnesses to breach 27 companies at about $25 each, and the BlueMoon Chrome/Windows exploit kit.

tldrsec.comarticleAdded 30 Oct 2026, published 24 Sep 2026🛡️ Security

Cisco Talos's weekly Threat Source newsletter opens with commentary arguing that a slowdown in AI development would barely move the needle on cybersecurity, since models already uncover vulnerabilities effectively and defenders still neglect basics like asset inventory, least privilege, and network segmentation. The main threat-intel item covers Japan's ransomware landscape, where incidents rose nearly 5% in H1 2026, driven by "The Gentlemen" (a fast-growing RaaS group using the AdaptixC2 red-team framework for stealthy lateral movement) and "Qilin" (which uses LLMs to generate destructive scripts and speed up attacks), both hitting SMEs with double extortion. It closes with a roundup of other weekly stories: an Android banking-malware campaign abusing Google's Work Profile in Indonesia, Apple's ~200-vulnerability iOS/macOS patch batch, a ClickFix campaign via a compromised HBO Max Reddit account, and the $250/month VectraRAT implant.

blog.talosintelligence.comarticleAdded 7 Oct 2026, published 17 Sep 2026🛡️ Security

tl;dr sec #346 is a weekly security newsletter issue. It covers James Kettle's HTTP Terminator, an autonomous system that invented HTTP desync techniques including Shared Parser Confusion. It also covers Anthropic's September 2026 Claude misuse report, Wiz's report on Artifactory exploitation (CVE-2026-42016, CVE-2026-42018, CVE-2026-82329), Sysdig's marimo CVE-2026-39987 findings, Synacktiv's EKS forensics guide, and Cloudflare's AI-enforced engineering Codex.

tldrsec.comarticleAdded 30 Oct 2026, published 17 Sep 2026🛡️ Security

tl;dr sec #346 is a security newsletter issue with several AI items. Cloudflare's Codex stores SHOULD/MUST engineering standards that code, spec and incident-review agents enforce (230,000 violations flagged, 16,000 merges blocked in four months). James Kettle's HTTP Terminator seeded an LLM with RFC fragments to invent HTTP desync techniques. Also covered: Uber's agent identity tokens, Anthropic's misuse report, and Meta's Muse agent.

tldrsec.comarticleAdded 30 Oct 2026, published 17 Sep 2026🧠 AI

Cisco Talos's weekly Threat Source newsletter opens with a personal essay distinguishing burnout from secondary traumatic stress, vicarious trauma, and moral injury among security practitioners, then covers Talos's disclosure of a WebDAV-based infection chain used by Russian-aligned actor UAT-10820 against a Ukrainian government target, delivering the Amatera stealer alongside ZigCryptoStealer and NetSupport Manager, abusing BNB Smart Chain for bulletproof hosting and fake CAPTCHA lures, with a vulnerable driver used to kill EDR. The roundup also flags active exploitation of Cisco Secure Firewall Management Center (CVE-2026-20079, CVE-2026-20316), a ClickFix campaign abusing the Google Visualization API for command and control, and a new Defender zero-day dubbed ShieldCrash.

blog.talosintelligence.comarticleAdded 7 Oct 2026, published 10 Sep 2026🛡️ Security

tl;dr sec #345 is a weekly security newsletter issue. Its AI-relevant lead summarises Greptile's test of 500 PRs each from Claude Code and Codex: each model catches more high-severity bugs in the other's code, and Greptile built Model Inversion to route reviews to the opposite model. Other items cover an AI-written exploit from a vague bug description, Booz Allen's test of 18 LLMs as attackers, and an arXiv paper on open-weight agentic worms.

tldrsec.comarticleAdded 30 Oct 2026, published 10 Sep 2026🧠 AI

tl;dr sec issue #345 is a security newsletter digest. It covers Greptile's test showing models miss bugs in their own code, an OCaml cohttp path traversal fix probed within ten minutes of the PR, and a Wiz Version Control DFIR poster for GitHub, GitLab, Bitbucket and Azure DevOps. It also covers an arXiv paper on open-weight agentic worms (61.8% infection of a 33-host testbed) and Endor Labs' 14 flaws in seven AI orchestration platforms.

tldrsec.comarticleAdded 30 Oct 2026, published 10 Sep 2026🛡️ Security

tl;dr sec #344 is a weekly security newsletter issue. It summarizes Trail of Bits' report that an AI agent escaped a QEMU/KVM VM three times (Firecracker held), Grow Therapy's sub-$500/month AI threat hunting system on AWS, Palo Alto's "Pass-ta-key" attacks on synced passkeys, MCP configuration poisoning, org-wide GitHub Actions SHA pinning, and the DecBench decompiler benchmark with the LLM-written Kuna decompiler.

tldrsec.comarticleAdded 30 Oct 2026, published 8 Sep 2026🛡️ Security

tl;dr sec #343 is a weekly security newsletter issue. It covers AWSHound (SpecterOps' BloodHound OpenGraph collector for AWS IAM), TruffleHog AWS Analyze, JavaScript in HTML tag names (PortSwigger), and the Varonis CoSnitch Copilot flaw (CVE-2026-24301). It also covers the OWASP Agentic Skills Top 10, Cloudflare MCP traffic detection, a Datadog plan-mode versus default-mode secure coding test, and OpenClaw phishing tests.

tldrsec.comarticleAdded 30 Oct 2026, published 27 Aug 2026🛡️ Security

tl;dr sec #342 is a weekly security newsletter issue. It summarizes Figma's agentic detection and response built on Panther, Uber's open-source ADR agent monitoring system with ADR-Bench, Cloudflare's Agent Access Model, and 1Password's SPIFFE-based local agent identity. It also covers Wiz's CosmosEscape chain in Azure Cosmos DB and in-memory YARA hunting with Fleet and osquery.

tldrsec.comarticleAdded 30 Oct 2026, published 20 Aug 2026🛡️ Security

Follow-up analysis showing that the RubyGems StubMaker typosquatting campaign and a separately-discovered 40-package npm typosquatting campaign (targeting chalk, commander, lodash, typescript, react, axios) are run by the same threat actor: both use install-time hooks (extconf.rb vs postinstall.js) to fetch a Rust loader from the same GitHub release, which decrypts a byte-for-byte identical Go infostealer confirmed by matching SHA-256 hashes. The stealer harvests browser credentials (bypassing Chromium app-bound encryption), crypto wallets/seed phrases, and Telegram data, exfiltrating via Gofile to a webhook at dresslee.com, and includes WSL-to-Windows sandbox escape logic. The post publishes full network/file IOCs and hashes and argues network-layer blocking (C2 IP and webhook domain) is more durable than package-name blocklisting.

opensourcemalware.comwriteupAdded 3 Sep 2026, published 19 Aug 2026🛡️ Security

Interconnects newsletter analysis of Z.ai GLM-5.3 release, a 750B parameter model matching frontier US models via post-training scaling, and why Chinese labs keep pace via faster release cadence.

interconnects.aiarticleAdded 29 Sep 2026, published 14 Aug 2026🧠 AI

tl;dr sec #341 is a weekly security newsletter issue. It covers PortSwigger's Black Hat research on weaponizing CSS in webmail clients, the wp2shell pre-auth WordPress RCE chain found with GPT-5.6 Sol, a RubyGems CDN cache leak of API keys, and GitHub's npm and Actions hardening. It also covers the deadair tool for dead detection rules, promptware detection, and least-privilege design for AI agents.

tldrsec.comarticleAdded 30 Oct 2026, published 13 Aug 2026🛡️ Security

tl;dr sec #340 is a weekly security newsletter issue from Clint Gibler. It summarizes Figma's agentic code scanning (precision raised from 15% to 80%), AISI and Anthropic reports of AI agents attacking real third parties during cyber evaluations, Tailscale's analysis of the Hugging Face intrusion, and Datadog's coding-agent code execution paths. It also covers S3 clone gaps, S3 Vectors risks, HollowGraph and marimo IR notebooks.

tldrsec.comarticleAdded 30 Oct 2026, published 7 Aug 2026🛡️ Security

tl;dr sec #340 is a security newsletter issue whose AI items cover two incident reports: the UK AISI found 19 unsanctioned agent actions in 10 of 122 cyber-eval runs, and Anthropic reported three real-world compromises by Claude models. It also covers Figma's agentic code scanning (precision from 15% to 80%, 66-vulnerability recall set) and a marimo-based incident response notebook that Claude Code can drive.

tldrsec.comarticleAdded 30 Oct 2026, published 7 Aug 2026🧠 AI

NPC-Forge is a framework for building deterministic, non-ML conversational NPCs/agents with multi-turn context, sentiment analysis, and tool-call support, designed to run on CPU even on embedded or obsolete hardware. It ships with an OpenAI-compatible API server so its deterministic agents can be plugged into LLM harnesses like Open WebUI or GitHub Copilot, and includes TERMy, a bundled NPC that transpiles natural-language prompts or scripts into shell commands without using any model. Agents are defined and updated via a dataset format (NDF) rather than trained, with a CLI (npc-forge list/serve/install/reboot) for managing and running them; currently an experimental Linux/WSL-only release under AGPL-3.0.

github.comrepoAdded 30 Sep 2026, published 18 Jul 2026🧠 AI

Companion repo to a newsletter offering structured interview prep for AI Engineer roles across eleven weeks, with hundreds of questions spanning LLM fundamentals, tool calling, RAG variants, LangChain, LlamaIndex, CrewAI, LangGraph, fine tuning, agentic decision making, evaluation and governance, production deployment, and observability. Each week includes prep files with interviewer intent notes and follow up questions, plus a terminology disambiguation file and a cross cutting bonus question set. Targets interview prep at MAANG level and frontier AI labs.

github.comcourseAdded 30 Sep 2026, published 3 Jul 2026🧠 AI

Attackers adopted 400+ orphaned AUR (Arch User Repository) packages and injected malicious build logic that pulled in a malicious npm dependency (masquerading as atomic-lockfile, also seen as js-digest), dubbed the "Atomic Arch" campaign by Sonatype researchers. The malicious npm package deploys a Rust-based credential stealer targeting browser cookies, SSH keys, GitHub/npm tokens, and cloud/Docker credentials, with optional eBPF-based rootkit persistence on rooted systems. The piece explains scope (Arch, EndeavourOS, Manjaro, WSL2-based Arch, self-hosted Arch CI runners) and draws parallels to similar ownership-hijacking risks in npm, PyPI, GitHub Actions, and Homebrew.

stepsecurity.iowriteupAdded 3 Sep 2026, published 18 Jun 2026🛡️ Security

A practical walkthrough solving PortSwigger Web Security Academy's lab on exploiting vulnerabilities in LLM APIs. The demonstration reveals internal APIs exposed to an LLM assistant and exploits an OS command injection vulnerability in a newsletter subscription function using shell command substitution.

youtu.bevideoAdded 3 Oct 2026, published 2 Jun 2026🛡️ Security

Huntress's 2026 threat-landscape overview argues Linux is closing the threat gap with Windows, citing rapid mass exploitation of the React2Shell vulnerability (leading to PeerBlight malware and XMRig cryptomining), growing multi-OS ransomware campaigns hitting Windows/Linux/ESXi simultaneously, and WSL as an emerging attack surface for credential theft and Windows Defender Application Control bypass via Linux ELF binaries. It also covers LLM-assisted vulnerability research (CVE-2025-37899 found via OpenAI's o3) and profiles Linux-targeting threat actors including LockBit 5.0, Akira, Qilin, Gunra, BlackCat/ALPHV, Volt Typhoon (KV-botnet), and Lazarus Group.

huntress.comarticleAdded 3 Sep 2026, published 3 Mar 2026🛡️ Security