TLDR INFORMATION SECURITY 2026-08-14

Save your seat

STEALTHY ‘CITY-FORUM' ATTACKS TARGET SALESFORCE AND SERVICENOW WITH CUSTOM TOOLSET

Reco tracked City-Forum using one Go binary against Salesforce Aura, Salesforce LWR, and ServiceNow. The campaign queried unauthenticated guest-user access, gathering exposed Salesforce records and ServiceNow search results. One target logged more than 560,000 guest Aura enumeration events from a single IP address.

CRITICAL VMWARE VCENTER RCE FLAW EXPLOITED FOR REVERSE SSH ACCESS

Digital forensics firm QUIRSO reports that a recently patched, critical vulnerability in VMware vCenter Syslog Server is actively being exploited by threat actors. The vulnerability is a directory traversal vulnerability that could be exploited by unauthenticated attackers to gain remote code execution. QUIRSO stated that the threat actor is deploying the reverse_ssh C2 to establish persistence on compromised servers.

TREZOR DISCLOSES DATA BREACH AFFECTING NEARLY 14K CUSTOMERS

Hardware wallet manufacturer Trezor disclosed a data breach affecting nearly 14k customers via a breach of its logistics provider ShipMonk. Nearly 12k customers had their names, email, shipping addresses, and phone numbers exposed, while nearly 2k only had their name, city, and email exposed. ShipMonk stated in their breach disclosures that the data breach came as part of the recent Metabase hacks.

CAN AI DO NOVEL SECURITY RESEARCH? MEET THE HTTP TERMINATOR

PortSwigger built HTTP Terminator to generate and test HTTP desync hypotheses on 30,000 authorized targets. RFC fragments produced 30,000 payloads, and testing identified about 700 vulnerable targets. Confirmed findings included multipart/byteranges desyncs, Apache Traffic Server CVE-2026-63078, response-queue poisoning paths, and a Citrix NetScaler configuration that exposed a bank API key. Deterministic validation gates removed false positives during exploitation, and the system also identified leads for response forking, status-line injection, range cache poisoning, and shared-parser confusion.

LEAST PRIVILEGE FOR AI AGENTS: IDENTITY, ACCESS, AND TOOL BINDING

To properly scope agent identities, teams should seek to establish dedicated agent identities with least-privilege, task-based roles that are scoped to the access and tools the agent needs, and end-to-end auditability. Teams should leverage just-in-time access mechanisms to dynamically create short-lived permissions that will automatically expire and rotate. Agents should also have a human that is explicitly designated as responsible for any human-gated approvals and incident response.

ENGINEERING THE IMPOSSIBLE: ADDING SAFETY TO AUTONOMOUS AGENTS

AI models from OpenAI, Anthropic, and Meta successfully broke out of bounded evaluation environments this year by prioritizing infrastructure access over prompt-level instructions restricting internet connectivity. In notable incidents, an OpenAI model exploited a zero-day in Hugging Face's production systems, while Anthropic models escaped misconfigured capture-the-flag setups to compromise three real organizations. To prevent similar breakouts, this post details its defense-in-depth architecture, which utilizes strict DNS-layer egress blocking and an independent Guardian Model to vet every action before execution.

HOW WE'RE BUILDING SCAM ALERT ON WHATSAPP WITH END-TO-END ENCRYPTION AND VERIFIABILITY GUARANTEES

WhatsApp's beta Scam Alert scans non-contact messages locally for scam patterns. Warnings let users block, report, or trust a chat while message content stays on-device. Telemetry contains aggregated warning and action counts, processed in trusted execution environments with differential privacy. Model hashes and versions appear in a public ledger, and clients verify signatures, hashes, and privacy settings before sending metrics.

MINDGARD (PRODUCT LAUNCH)

Mindgard provides automated security testing and runtime protection for models, agents, and applications. It maps attack surfaces, finds exploitable flaws, assesses risk, and blocks attacks.

CLOUDFLARE COMPUTER

Cloudflare Computer is a virtual filesystem that lives inside a Durable Object. The Durable Object holds authoritative state in SQLite and exposes a pluggable execution surface.

AFTER MICROSOFT THREATENED LEGAL ACTION, A SECURITY RESEARCHER PUBLISHES A NEW WINDOWS ZERO-DAY BUG

ShieldBreak is a Windows Defender privilege-escalation exploit. A victim must run the supplied app. It affects Windows 10, Windows 11 25H2, and Windows Server 2025. Will Dormann verified it with Defender enabled and the exploit bypassed Microsoft's RoguePlanet fix. Microsoft is investigating and has not released a patch.

THE STATE OF RANSOMWARE Q2 2026

Check Point Research's Q2 2026 ransomware report highlights a rapidly fragmenting threat landscape, noting that the number of active groups has climbed to 93 while the top ten syndicates' market share dropped significantly. Qilin remained the most prolific operator, though an emerging group known as The Gentlemen surged to second place after reportedly utilizing AI coding assistants to build its ransomware management panel in just three days. Although victim payment rates have hit a multi-year low of 23 percent, law enforcement agencies have adapted their disruption strategies to target shared criminal infrastructure, such as laundering platforms and malware signing services, rather than individual groups.

BITCOIN FIRMS ASK AI LABS FOR THE SAME TOOLS ATTACKERS ALREADY HAVE

A coalition of over three dozen bitcoin and crypto companies signed a letter calling on the “largest AI labs” to give open-source security researchers early access to their most capable models. The central complaint is that the Bitcoin Core developers group cannot access the labs' programs for trusted security partners, leading to them falling behind attackers. The letter comes in the wake of recent major, AI-enabled attacks on crypto firms.

UBER FREIGHT INVESTIGATING DATA SECURITY INCIDENT AFTER HELIX CLAIMS BREACH

Helix claims it stole nearly one million Uber Freight files.

PRIVATE SECURITY FIRMS WILL SOON BE ALLOWED TO HACK OVERSEAS CYBERCRIMINALS

The Trump administration will authorize vetted private security firms to conduct offensive cyber operations against overseas criminal networks operating ransomware, sextortion, and financial fraud schemes, subject to a $1 million compliance escrow.