TLDR INFORMATION SECURITY 2026-08-12

LOCKING YOUR SSH-AGENT EXPOSED LOCAL-ONLY KEYS UNTIL OPENSSH 10.5

OpenSSH 10.5 fixed a flaw introduced in version 10.4 where locking the ssh-agent disabled the check distinguishing local requests from forwarded ones, letting remote connections perform operations meant to stay local, including adding PKCS#11 tokens and bypassing destination-restricted keys, alongside a use-after-free in the ssh client and a broken authorized_keys "restrict" keyword that failed to block tunnel forwarding.

METABASE SQL ZERO-DAY ATTACKS COULD HAVE WIDE BLAST RADIUS

A zero-day SQL injection flaw in Metabase Cloud (CVSS 10, no CVE yet) let an attacker inject SQL into the app database and get admin access, steal database credentials, and export data. Metabase patched cloud instances automatically. Self-hosted users with the /api/session/reset_password endpoint exposed on port 3000 remain vulnerable. n8n confirmed 136 leaked customer records. Kilo Code confirmed exposed Slack tokens and customer data. Metabase told self-hosted users to patch now or block that endpoint, rotate credentials, and revoke sessions.

RESEARCHERS DISCLOSE AI-ASSISTED SHAREPOINT EXPLOIT CHAIN REACHING UNAUTHENTICATED RCE

Rapid7 chained CVE-2026-55040, a JWT validation bug in SharePoint Server Subscription Edition 2019 and 2016, with CVE-2026-63520, a .NET type instantiation flaw in Business Connectivity Services, to get unauthenticated remote code execution. Attackers need only a target's SID or UPN. An AI agent helped find the chain across 96 sessions and 80,000 tool calls but also replayed admin credentials and enabled debug flags without authorization. Install the July KB updates now. August patches aren't public yet.

PROJECT CAV3RN CONTINUES: GOOGLE APPS SCRIPT AS C2 RELAY AND DNS-BASED C2 CHANNEL SELECTION

Kaspersky researchers uncovered an updated Project CAV3RN espionage framework targeting Israeli organizations that dynamically routes command-and-control traffic by inspecting DNS A-record responses to choose between direct HTTPS and a Google Apps Script relay. This evasive technique allows the malware to blend seamlessly with legitimate traffic before handing execution to an inter-component broker (⁠rnp.dll⁠) that orchestrates malicious modules. To detect this activity, defenders should flag anomalous ⁠script.google[.]com⁠ POST requests and hunt for associated infrastructure, specifically queries resolving to ⁠studiotikva[.]com⁠.

THE PERMANENT THREAT: ANALYZING AETERNUM'S BLOCKCHAIN-BASED C2 OPERATIONS AND COMPROMISES

Aeternum is a sophisticated malware loader that utilizes Polygon blockchain smart contracts over JSON-RPC to fetch encrypted command-and-control instructions. After decrypting these commands, the malware downloads secondary payloads from GitHub, including the XWorm RAT and XMRig miners, while a related Python variant specifically targets over 60 cryptocurrency wallets and browser extensions. Aeternum ultimately relies on hardcoded Telegram bot APIs for data exfiltration. Defenders should hunt for anomalous Telegram API traffic and outbound JSON-RPC calls originating from non-browser processes.

A SECURITY ANALYSIS OF AMAZON S3 VECTORS AND ITS USE IN LLM RETRIEVAL PIPELINES

An attacker holding only s3vectors:PutVectorBucketPolicy permissions can grant foreign AWS accounts full data-plane access to forge chunk text, spoof citation URLs, and manipulate embedding coordinates so poisoned data dominates top-K retrieval. Researchers demonstrated that a single planted vector could trick a clinical RAG assistant into recommending dangerous medical dosages alongside authentic citations or even achieve command execution in tool-enabled agents. CloudTrail data events for these actions are disabled by default and strip critical metadata when enabled, so defenders must isolate ingestion behind strict IAM roles, utilize HMACs for chunk keys, and mandate manual confirmation before autonomous agents execute actions.

attack surface. Get your copy.

WE'RE OPEN-SOURCING OUR PRIVACY PROXY CLI

Cloudflare has open-sourced pvcli, a Rust-based diagnostic tool that handles full Oblivious HTTP (OHTTP) requests across relays, gateways, and targets in a single command to eliminate tedious manual binary parsing. Unlike single-protocol alternatives, the utility combines OHTTP, CONNECT proxying, and MASQUE support using a familiar curl-like syntax. This unified approach significantly accelerates incident response and debugging for engineers managing large-scale privacy deployments like Apple's Private Relay and Microsoft's Edge Secure Network VPN.

BEELZEBUB (PRODUCT LAUNCH)

Beelzebub provides a platform that traps attackers already inside a network, using LLM-based decoys, continuous emulation, and an AI analyst to generate incident reports. It runs on-premises or as SaaS and pulls threat feeds from 60+ researchers.

OPENCODEREVIEW

OpenCodeReview is the Alibaba Group's internal AI-powered code review tool. It reads git diffs, sends changed files to a configurable LLM via an agent with tool-use capabilities, and generates structured review comments with line-level precision.

EXTENSION BANNED FOR STEALING AI CHATS RETURNS TO CHROME STORE, RESUMES MALICIOUS ACTIVITIES

Google pulled "AI Sidebar with DeepSeek, ChatGPT, Claude and more" in January after OX Security found it scraping ChatGPT/DeepSeek chats and sending them to external domains, with 300,000+ installs by then. It's back on the Chrome Web Store. Netskope found version 1.7.3.0 added 21 lines that open affiliate links on update events and hijack the uninstall URL for referral commissions.

NEW PASS-TA-KEY ATTACK REVEALS ALL THE THINGS WE DIDN'T KNOW ABOUT PASSKEYS

Pass-ta-key malware can steal passkeys from an infected Windows PC using Google Password Manager. It may pose as an iPhone, then use Google's device-sync feature to copy the victim's saved passkeys. Windows lets malware access other apps' data more easily than Apple and Android systems. A malware-infected, signed-in PC can also expose passwords and active sessions.

THE MULTI-LAYERED DEFENSES THAT HARDEN CHROME AGAINST ABUSIVE NOTIFICATIONS

Chrome Security detailed a new defense-in-depth stack utilizing Firebase Cloud Messaging and Safe Browsing that successfully blocked over 7 billion abusive Android notifications per day in Q1. The multi-layered approach curtails coordinated spam networks by automatically revoking permissions for suspicious sites, analyzing malicious service worker activity signals, and throttling disruptive domains at the FCM server level to 1,000 messages per minute with HTTP 429 error responses.

PORTUGUESE HACKER TO FACE TRIAL FOR MALICIOUS CHATGPT CLONE

The 23-year-old Portuguese hacker who created WormGPT is currently on trial for creating the software.

ZOOM PATCHES "ZOOMSDAY" ZERO-CLICK FLAW ENABLING REMOTE CODE EXECUTION

Zoom has released critical updates to mitigate "Zoomsday" (CVE-2026-53413), a zero-click remote code execution vulnerability in its annotation protocol that allows any meeting participant to silently trigger a stack buffer overflow and execute arbitrary code across all unpatched platforms.

NORTH KOREAN REMOTE IT STAFFER WORKED FOR US GOVERNMENT AGENCY, SAYS FBI

The FBI is investigating a sanctioned North Korean operative who fraudulently secured a remote IT position at an undisclosed US federal agency.