Parse notes
CVE-2026-18963 (CVSS 9.1) lets an unauthenticated attacker send a crafted request to Keycloak's reset-credentials endpoint, bypassing the email verification via recovery token and allowing the attacker to update the account password, enabling full account takeover. Administrators should update Keycloak and disable "Forgot password" in every realm until servers are patched.
ShinyHunters ran a phishing campaign using "company.claims" domains, then called ReliaQuest staff posing as security employees to push them to a fake SSO page. One employee entered a password and approved a push notification, giving attackers a brief session on the identity dashboard. ReliaQuest says access was view-only, all further access attempts were blocked, no other identities or business apps were reached, no customer data was taken, and no ransomware was involved.
Threat actors are leveraging sponsored Google Search ads to position fake OpenAI Codex download pages above legitimate results. The campaign utilizes a ClickFix-style social engineering trick to convince macOS users to paste a malicious Terminal command that decodes a Base64 URL, strips quarantine attributes using xattr -c, and drops a universal Mach-O payload linked to Atomic macOS Stealer (AMOS) infrastructure. Security teams should proactively block associated domains like brightlinks[.]com and configure SIEM alerts for any curl-to-zsh pipelines paired with xattr -c execution.
T4 template files (.tt) run C# or VB code at build time through TextTransform.exe, TextTransformCore.exe, t4.exe, and MSBuild.exe. Attackers can plant malicious .tt files on developer machines or in build pipelines to trigger code execution, including supply chain scenarios. This post provides working PoC templates that spawn calc.exe or a MessageBox, and shows how tampering a .csproj with TextTemplatingFileGenerator entries lets MSBuild.exe compile and run arbitrary .tt code via the /t:Transform flag. Detection relies on Sysmon: process creation for the four binaries, image loads of three Microsoft.TextTemplating DLLs (only with MSBuild), and file creation in %Temp% during MSBuild transforms, since t4.exe also spawns dotnet.exe and csc.dll to compile the payload.
Citizen Lab found two surveillance vendors exploiting SS7 and Diameter signalling to track phones globally. One campaign hit a VVIP executive's phone across 11 operator identities in nine countries in four hours, switching protocols to dodge firewalls. A second used a malicious SMS with hidden SIM commands to turn a phone into a tracking beacon.
Microsoft's unified Defender SecOps portal contains a critical logging gap: changes to security-critical settings, such as Tamper Protection and Intune device policies, do not generate default alerts. To maintain a reliable audit trail of configuration changes, security teams must manually engineer custom detections. This requires enabling Unified Audit Log integration, forwarding Purview audit data into the CloudAppEvents table via Defender for Cloud Apps, and actively routing Intune operational logs to Log Analytics for KQL-based hunting.
Decompile, deobfuscate, and unpack almost anything. Disrobe is a universal, deterministic, single-binary reverse-engineering toolkit in Rust for Python, JVM/Android, .NET, WebAssembly, JS, Go, and native packers (UPX/PyArmor/PyInstaller/Nuitka) and 20+ more. It was built for malware analysis, CTFs, and security research.
Mandiant's Agentic Vulnerability Discovery Harness (AVDH) is a Gemini-powered multi-agent pipeline built on Google's Agent Development Kit. The tool conducts deep source code reviews by autonomously chaining threat modeling, entry-point discovery, and hypothesis generation before escalating confirmed findings for human validation. Mandiant positions the harness as a point-in-time, deep-dive complement to continuous scanning tools like CodeMender, establishing a robust two-layered defensive strategy.
Blacklight is a cross-platform toolkit for mapping, analyzing, and understanding the local AI agent attack surface.
A KQL threat hunting technique built on Microsoft's pair_probabilities_fl() user-defined function calculates how statistically unusual a categorical pair (like a binary and its execution directory) is across a dataset, surfacing outliers such as cmd.exe launching from a user's Desktop instead of System32. The author extended the function to return top co-occurring values, per-device context, and occurrence counts alongside the core probability metrics (P_A|B, Lift, and Jaccard), making rare pairings easier to triage. The approach is explicitly framed as a statistical rarity detector rather than a maliciousness classifier, useful for narrowing investigation scope but unreliable on small datasets or environments where malicious activity has already been baked into the baseline.
Security researchers at Mysk publicly disclosed three WebKit vulnerabilities that leak users' DNS traffic and real IP addresses, successfully bypassing privacy protections in iCloud Private Relay and proxy-based browsers like Tor. Frustrated by Apple's historically slow patch cycles, the team bypassed standard coordinated disclosure, opting to publicly release the details after privately securing mitigations for Psylo and the Onion Browser. While Apple patched iCloud Private Relay within two weeks of the announcement, the underlying WebKit proxy flaws remain active, forcing affected users to rely on full-device VPNs for comprehensive protection.
Anshuman Bhartiya details his setup and experience with a largely AI-driven bug bounty workflow. Bhartiya uses a custom-built harness that uses the pi coding-agent harness to monitor source code changes and route security-relevant diffs through 18 deterministic, vulnerability-specific detectors. The report was then generated and submitted by Claude, with the researcher only reviewing and guiding the agent.
WhatsApp now supports longer two-step verification passwords with letters, numbers, and special characters.
Marimo patched CVE-2026-75149 (CVSS 8.8), a code injection flaw in versions before 0.23.15 that let a crafted notebook launch an attacker-controlled MCP server command as a local subprocess the moment the notebook opened in edit mode, before any cell executed, so users should upgrade to 0.24.0.