Parse notes
Enterprise data software provider Alation confirmed unauthorized activity in one system after users experienced degraded availability earlier this week. The service disruption was resolved within an hour. The company has not identified the attack method, root cause, affected customer count, data exposure, notification status, or recommended defensive actions.
Quest identified unauthorized database access on August 17 through a third-party provider. Records from before June 2025 exposed guest names and contact details. Some included dates of birth. The company says it notified affected guests, contained the incident, remediated systems, and began forensic work.
Attackers are actively chaining two critical vulnerabilities (CVE-2026-61979 and CVE-2026-15981) in the miniOrange SAML 2.0 SSO plugin to bypass authentication and gain administrator access to WordPress sites. Malicious actors can successfully forge legitimate SAML responses by manipulating cryptographic algorithms and bypassing OpenSSL signature checks. Administrators must manually verify their plugin version and immediately upgrade to the latest patched release, as the native WordPress dashboard will not surface update warnings for premium editions.
Endor Labs found a type confusion bug in isolated-vm's ExternalCopy transferList handling. A getter returns different values across two validation walks, letting attacker code pass a bad pointer through an unchecked cast. From one shared ivm.Reference, researchers reached the ExternalCopy constructor, crashed the host with SIGSEGV, then built a working exploit that recovers ASLR base, forges a vtable, and redirects an indirect call to invoke a chosen libc function. The vulnerability affects isolated-vm versions below 7.0.1 and 6.2.0, used by n8n, Activepieces, Mastra, Budibase, Directus, and Rocket.Chat. Upgrade immediately and audit which capabilities you pass into any sandboxed Reference.
This post details how attackers utilize macOS dynamic library (dylib) injection to inherit a host process's trust, entitlements, and TCC grants while blinding native security tools. By employing techniques such as DYLD_INSERT_LIBRARIES injection, @rpath hijacking, or trojanizing libraries, threat actors can bypass System Integrity Protection (SIP) and achieve deep persistence. To close this process-level blind spot, the post recommends that security tools statically parse Mach-O LC_LOAD_DYLIB commands for collisions, dynamically enumerate loaded libraries, and subscribe to Endpoint Security's ES_EVENT_TYPE_AUTH_MMAP to intercept malicious dylibs before they map into memory.
A researcher performed a test where they instructed Sonnet 5, Composer 2.5, and GPT 5.5 to construct a webapp using the same prompt in both normal and plan modes to observe if plan mode had any noticeable impact on secure coding practices. All six implementations produced an identical IDOR vulnerability in addition to other vulnerabilities that varied across implementations. While Sonnet 5 produced a much more mature implementation in plan mode and Composer 2.5 produced the most glaring security vulnerability while using plan mode, the experiment proved inconclusive on whether plan mode produced more secure code.
TruffleHog AWS Analyze added an AWS-specific view to TruffleHog Enterprise that resolves the IAM principal behind a leaked access key and maps its policies, group memberships, and assumable-role paths up to two trust-policy hops away.
OpenRisk is a modern, enterprise-grade Risk Management Platform that transforms how organizations identify, assess, mitigate, and monitor risks
Deputy aims to enable dependency management at scale by providing core dependency management primitives along with a unified toolchain
Slovakia's national security service (NBU) discovered that recently installed traffic cameras contain a backdoor granting shell and network access via SMS commands from hardcoded Russian phone numbers. The compromised NERO R-ONE cameras, allegedly purchased through a Cyprus shell company, were identified as rebadged units manufactured by a St. Petersburg-based firm. In addition to the SMS backdoor, the NBU technical report revealed that the devices shipped with SecureBoot disabled and exposed live video streams without authentication.
OWASP released its Agentic Skills Top 10 and Universal Agentic Skill Format v1.0. Malicious skills and supply-chain compromise rank first and second. A Paperclip impersonation campaign used Trojanized packages and skills. The skills exceeded 300,000 installs, and it shows that the skill format should record provenance, permissions, dependencies, hashes, and changes. Security teams should inventory agent skills and quickly disable flagged ones.
Offensive AI is outpacing defensive AI due to a structural asymmetry: offensive exploits provide a clear verification "oracle" (the exploit either lands or fails), allowing reinforcement learning loops to train attackers much faster than defenders. The industry is actively experiencing this imbalance: Anthropic's Project Glasswing recently surfaced over 10,000 high- or critical-severity flaws, far outpacing the two-week average patch time, while OpenAI's Daybreak Red achieved a roughly 95% success rate on advanced offensive security tasks. This rapid offensive acceleration, illustrated by the Hugging Face breach in July and the rise of highly capable open-weight models, highlights a growing threat landscape where AI substitutes human effort on offense but only assists on defense.
Apollo disclosed that attackers accessed its cloud environment from July 6 to 10 through social engineering.
Tata nexarc's login API returned the OTP directly in its response body, letting researcher Eaton take over any account, including Tata Steel's own, just by knowing the target's phone number, until CERT-IN confirmed a fix on July 31.