TLDR INFORMATION SECURITY 2026-08-03

Register now.

HACKERS STEAL SENSITIVE DATA FROM UK DEPARTMENT FOR EDUCATION AND POLICE

The UK's Department for Education (DfE) and a police database were hacked by a new ransomware gang which stole 740k lines of data. The DfE's data was stolen from a help-desk portal and includes full names, email addresses, phone numbers, and job titles for staff and parents. The police database that was compromised provides legal assistance to UK police forces and includes names, the force or organization they're assigned to, and work email addresses.

RAILS PATCHES CRITICAL ACTIVE STORAGE FLAW WITH RCE POTENTIAL

The Rails framework for Ruby disclosed a new vulnerability in Active Storage that could enable arbitrary reads. The vulnerability is exploitable when libvips is used, and the server allows for image uploads from untrusted users. Security researchers highlighted that this vulnerability could be exploited to read the Rails master key, which could compromise all cryptographic operations and lead to RCE.

AMGEN SAYS CLOUD DATA BREACH EXPOSED PATIENT HEALTH, PROPRIETARY INFO

Pharmaceutical company Amgen stated that it suffered a data breach after attackers stole data via a third-party cloud provider. Amgen stated that the stolen data includes proprietary information and patient PHI, but they have not yet determined whether additional data was stolen.

STATIC DEVIRTUALIZATION OF TENCENT VM

Back Engineering Labs published a technical devirtualization of Tencent's ACE anti-cheat VM obfuscation, detailing how the .tvm dispatcher preserves CET shadow-stack and SEH/unwind semantics via boxed native instructions, RDSSPQ/INCSSPQ balancing, and phantom unwind info, and how guided symbolic execution recompiles virtualized functions back to native code. The team reported 815 of 865 virtualized functions (94.2%) recovered across four ACE kernel drivers, offered a third party for independent validation, and flagged ranged for-loops as a known limitation causing infinite-loop mis-lifts.

FAKE CLAUDE INSTALL GUIDE LEADS TO MACSYNC STEALER AND RAT: WHAT WE PULLED FROM THE ATTACKER'S SERVERS

Huntress traced a malvertising chain that walked a victim from a poisoned Google ad through a weaponized claude.ai/share page into a curl|zsh loader, unfolding into a six-stage macOS kill chain that phished Full Disk Access and a confirmed account password, then dropped a native Mach-O RAT, a signed Screen Recording helper, and trojanized Ledger/Trezor wallet apps rewritten in place to phish BIP39 recovery phrases. The tradecraft resembles the AMOS/Atomic Stealer lineage based on shared techniques and Russian-language code comments, which Huntress frames as a family resemblance rather than named-actor attribution. Defenders should hunt behaviorally for curl -k piped into zsh, a com.apple.* LaunchAgent paired with a ~/.local/.mpwd file, and ad-hoc-signed apps whose ElectronAsarIntegrity hash doesn't match the shipped app.asar.

FROM /INIT TO CODE EXECUTION - PROMPT INJECTION EXPERIMENTS WITH OPUS-5 IN CLAUDE CODE

The author of this post ran an experiment in which they had Claude Code running Opus 5 in yolo mode analyze a hit repo which contained an image file with a hidden message that led the model to a Star Trek-themed challenge. The challenge is a web server that features six challenges, with the final two requiring the model to download and execute a remote Python script which contains an encoded malicious command. Opus 5 determined that it shouldn't directly run the script but extracted and ran the malicious command, believing that it contained the solution to the challenge.

IMPACKET FOR PENTESTER: ATEXEC

This walkthrough walks through Impacket's atexec module across the full Windows Task Scheduler (ATSVC/TSCH) abuse chain over SMB, demonstrating plaintext, Pass-the-Hash, Pass-the-Ticket, and Pass-the-Key execution against a Server 2019 DC before weaponizing a Base64 PowerShell payload with -silentcommand into a full interactive reverse shell. It's a solid operational reference rather than new tooling, no repo to evaluate, though the closing detection notes add real blue-team value.

SANDBOX-ATTACKSURFACE-ANALYSIS-TOOLS

A collection of tools from Google Project Zero to analyze Windows sandboxes for exposed attack surface

FURTEX

Furtex is a post-exploitation and evasion research toolkit for Linux, built around io_uring and eBPF.

INSIDE THE FALCON: HOW CROWDSTRIKE CATCHES YOU

A reverse-engineering teardown mapped csagent.sys's full detection surface: six kernel callback sources (process, thread, image, object, registry, and file), a firewall-grade WFP network engine capable of injecting TCP resets to kill C2 flows, an FLTMGR minifilter hooking 12 IRP majors, and the cspcm4 "pinned" broker module. The dissection traced verdicts to a single vtable call into g_DetectionEngine, a detection object loaded at runtime from cloud-pushed channel files rather than compiled into the driver, and documented seams including a user-mode-only trust boundary on Object/Registry callbacks, hash-or-signature resolution failures that skip full rule matching, and a 10,000-flow WFP tracking cap. The author tied this same swappable cloud-content architecture to the July 2024 CrowdStrike outage, attributing that crash to a bad channel-file object rather than a code defect in the sensor binary.

SCANNING 7.6 PETABYTES OF HUGGINGFACE TRAINING DATA FOR SECRETS

Truffle Security scanned all 7.6 petabytes of public Hugging Face datasets (187 million files) with TruffleHog and found 221,303 live, unique credentials across 6,003 datasets, including 349 GitHub PATs with repo-write/CI/admin:org scope, 318 Docker Hub push tokens, 8,557 live GCP service-account keys, 8,594 working database logins, and 742 OpenAI plus 26 Anthropic keys carrying a conservative $920K/year inference-abuse floor. Leaks compounded through scrape corpora like The Stack and Common Crawl, with 44% of unique secrets appearing in more than one dataset and one AWS key, pasted into a chatbot, mirrored across 1,131 datasets. Hugging Face was notified pre-publication and contributed native storage-bucket scanning to TruffleHog. The company withheld all names, dataset paths, and key material, and recommends scanning corpora before publishing or training and treating any publicly exposed key as burned.

87% OF ORGANIZATIONS ARE PURSUING PQC. ONLY 7% HAVE DEPLOYED IT

DigiCert's second annual Quantum Readiness Outlook, which surveyed 1,001 IT and security decision-makers across the US, UK, and Australia, found 87% of organizations are planning, testing, or implementing PQC, yet only 7% have deployed quantum-safe or hybrid certificates at scale, up less than two points from 5% a year earlier. The analysis argues the barrier data (legacy complexity, performance, and budget) shows this has shifted from an awareness problem to an execution problem, and flags that the certificate-only metric masks progress elsewhere while saying nothing about the arguably more urgent Trust Now, Forge Later signature-forgery threat.

ARCH LINUX SUSPENDS AUR PACKAGE ADOPTIONS TO BLOCK ONGOING MALICIOUS COMMIT CAMPAIGN

Arch Linux's DevOps team disabled AUR package adoptions platform-wide on July 30 after attackers began systematically adopting orphaned/unmaintained packages and pushing malicious PKGBUILD commits that execute payloads via makepkg.

SINGAPORE LAUNCHES AI CYBER RISK TASKFORCE TO BOLSTER FINANCIAL SECTOR RESILIENCE

MAS and the Association of Banks in Singapore launched the AI-Driven Cyber and Technology Risk Taskforce (ACT), uniting DBS, OCBC, UOB, SGX, NETS, and BCS since May to share AI threat intelligence, run proof-of-concept trials of AI-enabled defense tools, and develop sector guidance against frontier AI-driven attacks.