TLDR INFORMATION SECURITY 2026-09-29

Get the guide

CISA SAYS ATTACKERS ARE EXPLOITING TWO CRITICAL CITRIX NETSCALER FLAWS GLOBALLY

CISA added CVE-2026-88771 and CVE-2026-88772 to its KEV catalog after confirming global exploitation. Both have CVSS scores of 9.5. The flaws enable unauthenticated command execution, remote code execution, or denial of service. CVE-2026-88772 requires DTLS, which VPN virtual servers enable by default. Administrators should patch, inspect for compromise, isolate affected appliances, revoke access, rotate secrets, and investigate connected systems.

BOK FACES SCRUTINY OVER CYBERSECURITY AFTER STAFF DATA BREACH

The Bank of Korea (BOK) is facing scrutiny over its cybersecurity program following a data breach earlier this year. The breach occurred in May and June after attackers accessed a GitHub system used by a contractor for an online training program. The exposed data included employees' names, email addresses, phone numbers, positions, duties, and passwords for 186 employees.

ELEMENTOR WORDPRESS FLAW LETS ATTACKERS CREATE ADMIN ACCOUNTS

Security firm Patchstack warns users of the Elementor Website Builder plugin for WordPress about a new CSRF vulnerability that could allow unauthenticated attackers to create admin accounts. The vulnerability is a one-click attack that requires an authenticated admin to click a link that sends a malicious REST API request to create the account.

CONTAINERS ARE NO LONGER A SECURITY BOUNDARY

The traditional view of containers as a strong security and isolation mechanism is being eroded by the plethora of kernel vulnerabilities being uncovered. This article explains how a recent vulnerability in the AF_UNIX subsystem can be leveraged by attackers for container escapes. The authors recommend moving untrusted workloads to MicroVMs like Firecracker or Kata Containers for untrusted workloads.

POLINRIDER IS A/B TESTING ITS WAY PAST YOUR DETECTIONS

DPRK's PolinRider malware spread through GitHub organizations by force-pushing rewritten commits from infected developers' machines, planting VS Code folderOpen tasks that run an obfuscated JavaScript payload disguised as fa-solid-400/500/900.woff2 and, since September 28, fa-solid-300.llf. OpenSourceMalware traced 853 force-pushes across three Binary-Mindz repos and found variants with different paths, obfuscators, and C2-reported build markers running in parallel, which it reads as deliberate A/B testing, while copied author dates and reused commit messages quietly reverted three cleanup attempts. Defenders should flag fake fonts by file content rather than name, scan every branch through bare clones, audit force-push activity logs, and enforce force-push blocking and signed commits on all branches.

FROM EXPOSURE TO LOCKDOWN: HOW AWS NEUTRALIZES COMPROMISED IAM CREDENTIALS THROUGH MANAGED POLICIES

AWS automatically attaches the AWSCompromisedKeyQuarantineV3 managed policy to an exposed IAM user within 10 seconds of a public GitHub push, with the CloudTrail AttachUserPolicy event misleadingly attributed to the victim's IAM user rather than to AWS automation. Each policy version tracked real-world attack evolution, with permissions added to block Lambda-based cryptomining, S3 data deletion for extortion, and Bedrock API abuse after Permiso's research exposed unauthorized InvokeModel calls. Security teams should alert on unexpected AttachUserPolicy events in CloudTrail, treat the quarantine event as confirmation of active key exposure rather than as resolution, and rotate all affected credentials before removing the policy.

SECURITY PATTERNS >

KONTEXT SECURITY (PRODUCT LAUNCH)

Kontext Security runs a runtime enforcement platform that sits between AI agents and the systems they access. It checks each agent's identity, task, target resource, and requested action in real time. Teams can start in observe mode, then switch to enforcement to block unauthorized actions, as the platform logs every agent action and the decisions made, with context.

NVIDIA LAUNCHES OPEN AGENT SAFETY PLATFORM TO SECURE AGENTS FROM TESTING TO DEPLOYMENT

NVIDIA launched the Open Agent Safety Platform with OpenShell runtime controls and Sentry monitoring on BlueField-4 DPUs. OpenShell traces actions, applies policies, and supports NVIDIA, Arm, and Intel systems. Sentry verifies identity, inspects requests, protects data access, and can quarantine agents within milliseconds. Anthropic, Salesforce, SAP, Scale AI, and more than 100 organizations are integrating these controls.

TTURL

tturl is an HTTP/2 CLI for finding tiny timing differences by releasing batches of requests and recording response arrival order, then either showing what happened or helping to distinguish a repeatable arrival-order signal from noise.

SENDER SPOOFING IN PROTON MAIL VIA DISPLAY-NAME HOMOGRAPH

Proton Mail's web interface can show a forged sender that looks identical to a real one. The attacker sets a display name containing an address-shaped string like sundar@gmaiI[.]com where the capital I matches lowercase l in the default UI font. Messages from domains without DMARC arrive in the inbox with no authentication banner, even when SPF fails. A Reply-To header can route responses to an attacker's address without showing it unless the user expands headers, and the spoofed sender also appears unchanged in macOS desktop notifications, outside the app interface. The issue was reported in February 2025, confirmed and bounty-awarded in April 2025, and can still be reproduced as of September 2026.

GOOGLE TO CRITICAL INFRA ORGS: OUR AI SCANNERS WON'T BE EVIL, PROMISE

Google and Wiz launched Scan for Good using Gemini 3.8 Flash Cyber and Red Agent with authorized scans targeting public websites, APIs, and applications, while human researchers validate findings and handle disclosure. Red Agent found a GitHub Actions injection flaw in Snowflake's connector, allowing command execution. Other cases exposed 8.8 million files, hospital systems, elderly residents' data, and railway administrator sessions.

HOUSE OF APPLE 2 ON MODERN GLIBC

This walkthrough breaks down House of Apple 2, a glibc FSOP technique that bypasses the vtable validation added in newer glibc. It points a FILE structure's vtable to legitimate wide-character stream code, which then dispatches to a second vtable that glibc does not range-check. Step by step in GDB, the author turns that unchecked indirect call into an arbitrary call, pivots the stack, and runs a ROP chain to a shell. The technique still works cleanly on glibc 2.43 (Ubuntu 26.04 and Fedora 44). Exact offsets and gadgets vary between builds, but the underlying control-flow trick remains the same.

DC HEALTH AGENCY EXPOSES 400,000 BENEFICIARY RECORDS

The District of Columbia's health agency exposed data linked to 399,086 Medicaid and DC Healthcare Alliance beneficiaries.

FORMER US SOLDIER GETS NEARLY SIX-YEAR SENTENCE FOR HACKING, EXTORTING TELECOMS

Former Army soldier Cameron Wagenius received 70 months in prison and nearly $295,000 in restitution.