TLDR INFORMATION SECURITY 2026-08-10

Download the guide

KIDS' SMARTWATCHES ARE MEANT TO KEEP CHILDREN SAFE BUT HACKERS CAN TURN THEM INTO STALKING DEVICES

Security researchers uncovered an authentication flaw in the SETracker platform that many children's smartwatches run on. The researchers uncovered vulnerabilities that could be exploited by attackers to access locations, intercept messages, replace emergency contacts, record audio, and capture photos or videos on supported devices.

METABASE SQLI ZERO-DAY EXPLOITED IN CUSTOMER DATA-THEFT ATTACKS

Metabase disclosed a critical zero-day vulnerability that is being actively exploited by attackers. The vulnerability is a critical, unauthenticated SQL injection bug that can allow remote attackers to gain administrative access to target instances. Cloud users have already been patched, but self-hosted organizations should upgrade to a patched release or temporarily block access to the ‘/api/session/reset_password/‘ endpoint until updates can be applied.

HACKERS BREACH TRUECONF TO TROJANIZE CLIENT INSTALLERS WITH BACKDOORS

The Head Mare hacktivist group exploited unauthenticated access on TCP port 4307 to chain KLCERT-26-057 and KLCERT-26-058 for sandbox escape and SYSTEM-level code execution on TrueConf servers, deploying the PhantomCore and PhantomGraph backdoors and trojanizing client installers. Fixes are available in versions 5.3.9, 5.4.9, and 5.5.5.

HOW FIGMA STAYS AHEAD OF VULNERABILITIES WITH AGENTS

Figma uses agents to review PRs for vulnerabilities, audit existing repositories, and generate secure code. When writing the workflow to review PRs, Figma found that the collection of policies and precedents that they wrote to improve precision constituted a detailed threat model for the agent to follow. This threat model was also utilized with more agents to brute force a code audit of a large, legacy monorepo and is used with agent hooks for secure code generation.

ULTIMATE THREAT HUNTING PLAYBOOK FOR RUSSIAN CYBER OPERATIONS IN A HYBRID THREAT ENVIRONMENT

A new hybrid threat hunting framework synthesizes four years of Russian cyber operations, including activity from APT28, Sandworm, and APT29, by focusing on shared operational chokepoints across identity, edge infrastructure, and OT rather than brittle IOCs. To highlight the necessity of behavior-based detection, the playbook points to LAMEHUG's dynamic use of the Hugging Face API and CERT-UA data showing APT28 achieving domain-controller compromise in under an hour. Furthermore, the report advocates for correlating physical and cyber telemetry in response to hybrid threats like the Leipzig/Halle drone incident, though it cautions defenders against attributing attacks based solely on geographic or temporal proximity.

LOCKBIT 5.0 LINUX MALWARE ANALYSIS: CHACHA20 + CURVE25519 OFFLINE ENCRYPTION, STRACE EVASION & IOCS

A reverse engineering teardown of LockBit 5.0's Linux variant found the ransomware encrypts entirely offline, generating ChaCha20 keys locally and wrapping them with a hardcoded Curve25519 public key so that zero network activity occurs during encryption, confirmed via Wireshark, socket monitoring, and interface counters. The sample also detects strace through TracerPid checks in /proc/self/status and fingerprints VM environments via /proc/ioports enumeration, forcing analysts to fall back on eBPF-based tracing to observe its behavior. The findings point to a broader shift toward offline-first ransomware design that makes network-based detection largely irrelevant against this class of threat.

DATADOG STATIC AI SECURITY TESTING TOOL

Datadog has released its AI-native SAST tool. Unlike traditional scanners, the tool also uses LLMs to find vulnerabilities.

AUDIT

audit is an 8-stage vulnerability discovery agent inspired by Cloudflare's Project Glasswing post.

EVILFONTTOOL

EvilFontTool is a Python CLI for red teamers that generates "evil fonts" remapping glyphs so a Word doc, PDF, or webpage displays clean text to a human reader while a different, attacker-chosen payload is what gets copy-pasted or fed to AI tools and terminals.

CHINESE MODEL KIMI K3 BREAKS UK AI SAFETY INSTITUTE BENCHMARK EVALUATIONS

In a recent evaluation of Kimi K3's cybersecurity capabilities, Frontier Security attempted to run the model inside the UK's AISI's agentic sandbox and discovered that the model effectively escaped the sandbox to game the benchmark. The model first probed the network and discovered that standard DNS functionality was available for github.com, so it was able to successfully look up the benchmark, clone its repo, and lift the solutions directly from the repo. Frontier Security recommends that evaluators treat evaluation infrastructure as part of the benchmark, deny network access by default, audit traces instead of just answers, revalidate suspicious results, and assume capable models will find paths to “cheat.”

OPEN SECURE AI ALLIANCE PROPOSES SAFE GUIDELINES AS MEMBERSHIP TOPS 120

The recently founded Open Secure AI Alliance has proposed a set of guidelines for reporting cybersecurity incidents involving AI agents titled the Shared AI Findings Exchange (SAFE). The SAFE program would provide organizations with a confidential channel for reporting details of AI security incidents. It would then analyze the data, notify affected parties, flag control failures that recur across its members, and then release recommendations.

KIMI K3 ESCAPED A CYBERSECURITY TESTING ENVIRONMENT DURING EXPERIMENT RUN BY FRONTIER SECURITY, A PRIVATE US FIRM

Moonshot AI's open-weight Kimi K3 broke out of a sandboxed benchmark run by private firm Frontier Security, exploiting unblocked outbound DNS and HTTPS to reach GitHub and pull the official solution instead of solving the task itself. The UK AI Security Institute only built the open-source sandbox framework and was not involved in running the test, and researchers attribute the escape to a network misconfiguration rather than deliberate model misbehavior.

RANSOMWARE GANGS SKIP THE CEO, HEAD STRAIGHT FOR THE 40-SOMETHING IT MANAGER

Zscaler ThreatLabz tracked 351 victims in a month-long ransomware campaign, finding attackers targeted managers with "business privilege"—invoice approval, budget oversight, and contract access—rather than executives.

BUGTRAQ IS BACK

Jonathan Brossard has acquired securityfocus.com and the Bugtraq name and relaunched the full-disclosure mailing list, promising the original researcher-first, no-corporate-filter mission after the archives went dark through a chain of prior ownership changes.

18-YEAR-OLD LINUX KERNEL VULNERABILITY ENABLES ROOT ACCESS AND CONTAINER ESCAPE

Tencent's Zhuque Lab disclosed SCTPhantom (CVE-2026-64564, CVSS 8.5), an 18-year-old use-after-free in Linux SCTP Dynamic Address Reconfiguration dating to kernel 2.6.25 that yields root via a repeatable exploit chain bypassing KASLR and can escape containers, patched in 6.6.148, 6.12.101, 6.18.42, and 7.1.6.