Search the archive

GMAIL GLITCH APPEARS TO BREAK EMAIL FILTERING, TABBED INBOXES

Google resolved a Gmail glitch that caused marketing and promotional emails to flood users' Primary inboxes instead of being routed to the Promotions tab.

1PASSWORD ADDS POP-UP WARNINGS FOR SUSPECTED PHISHING SITES

1Password will now display pop-up warnings when users attempt to enter credentials on typosquatted or suspected malicious domains that don't match URLs stored in their vault.

HIBP ADDS ALLEGED UNDER ARMOUR DATA BREACH IMPACTING 72 MILLION EMAILS

Have I Been Pwned added an alleged Under Armour breach attributed to the Everest ransomware group that exposed 72.7 million unique email addresses along with names, dates of birth, physical addresses, and purchase history from a 343GB exfiltration in November. The data was published after Under Armour reportedly did not pay the ransom, with the dataset now circulating on underground forums and indexed by DeHashed. Affected users should monitor for targeted phishing impersonating order-related communications and change reused passwords.

CISCO FIXES UNIFIED COMMUNICATIONS RCE ZERO-DAY EXPLOITED IN ATTACKS

Cisco has announced a new vulnerability impacting United Communications, Cisco Unity Connection, and Webex Calling Dedicated Instance. The vulnerability is due to improper validation of user-supplied input in HTTP requests that could allow an attacker to obtain access to the underlying system via a sequence of specially crafted HTTP requests. The patches are version-specific, so admins should check the README before applying patches.

HACKERS EXPLOIT SECURITY TESTING APPS TO BREACH FORTUNE 500 FIRMS

Automated pentest company Pentera discovered nearly 2K instances of exposed security testing apps, such as OWASP Juice Shop and DVWA, publicly exposed in the networks of Fortune 500 companies. Many of these web apps are used for security training and are deployed in cloud environments with overly permissive IAM roles and default credentials. Pentera found evidence that 20% of exposed DVWA apps had malicious artifacts such as webshells and cryptominers deployed.

IS THAT ALLOWED? AUTHENTICATION AND AUTHORIZATION IN MODEL CONTEXT PROTOCOL

Remote MCP servers should implement the OAuth 2.1 Authorization Code grant with PKCE for client authentication, leveraging protected resource metadata (RFC 9728) and authorization server discovery (RFC 8414) for the handshake. The 2025-11-25 MCP specification introduces step-up authorization for scope negotiation and recommends Token Exchange for downstream service authentication, while explicitly prohibiting token passthrough. Organizations deploying MCP servers should design granular scopes with clear read/write/delete separation, ensure short-lived access tokens, and implement proper validation, including checks for issuer, audience, and expiration.

VULNERABILITY PRIORITIZATION BEYOND THE CVSS NUMBER

CVSS scores alone fail to capture how vulnerabilities propagate through interconnected systems. Log4Shell is an example in which widespread nested dependencies, not just technical severity-driven impact, are at play. The Unified Linkage Model (ULM) framework evaluates vulnerabilities based on adjacency, inheritance, and trust relationships to identify "blast radius multipliers," such as SSO services or CI/CD pipelines. Security teams should map system dependencies and prioritize patching vulnerabilities near identity systems and shared services that can amplify downstream risk.

KEEPING SECRETS OUT OF LOGS

Secrets often end up in logs from a variety of sources, such as forgotten debugging lines, excessive error logging, and telemetry. Some fixes include architecting to reduce logging sinks, using domain primitives to abstract secrets, using read-once objects, using log preprocessors, adding unit tests, and implementing taint tracking. To prepare for a logging overhaul, teams should first lay the foundations of the initiative, understand the data flow, protect data at choke points, apply defense-in-depth, and plan for response and recovery in the event of leaked secrets.

of cloud orgs. Join the live discussion + Q&A

MITRE LAUNCHES NEW SECURITY FRAMEWORK FOR EMBEDDED SYSTEMS

The Embedded Systems Threat Matrix (ESTM) 3.0 is an ATT&CK-inspired framework that categorizes attack tactics and techniques specific to hardware and firmware environments. The framework supports cyber threat modeling and attack path analysis for industries including energy, robotics, industrial controls, transportation, and healthcare, and integrates with the EMB3D Threat Model. Security teams protecting embedded systems should evaluate ESTM to identify vulnerabilities in their embedded architectures.

PATHFINDING.CLOUD (WEB APP)

Pathfinding.cloud is a web app from DataDog that collects tools and guides to detect IAM-based privilege-escalation attacks in AWS.

APPCONTROL MANAGER

AppControl Manager provides a GUI to manage App Control and Code Integrity on your local or remote devices.

DON'T TRIP[WIRE] YOURSELF: TESTING ERROR RECOVERY IN ZIG

Tripwire is a Zig library for injecting failures at named points in code to test `errdefer` error handling paths, which are typically untested and a consistent source of resource leaks and memory corruption. The library uses comptime to completely optimize away in non-test builds, producing zero runtime cost in production. Integration into Ghostty immediately uncovered approximately six `errdefer` bugs that had never manifested in production.

VULNCHECK STATE OF EXPLOITATION 2026

VulnCheck identified 884 Known Exploited Vulnerabilities in 2025, with 28.96% exploited on or before CVE publication, up from 23.6% in 2024, highlighting the continued prevalence of zero-day and rapid n-day exploitation. Network edge devices such as firewalls, VPNs, and proxies were the most targeted technologies, followed by content management systems and open source software. Organizations should prioritize the timely remediation of newly disclosed vulnerabilities affecting internet-facing infrastructure while maintaining visibility beyond CISA KEV through additional exploitation intelligence sources.

THE PSYCHOLOGY OF BAD CODE

This post is the first part of a series that applies behavioral economics to developer processes. Developers want to write secure code but are often overwhelmed by competing priorities. Security teams should design technical nudges, shift incentives, and push for cultural changes to help developers write secure code.

GOOGLE ROLLS OUT AI DETECTION AND RANSOMWARE DEFENSES FOR SCHOOLS

Google expanded its SecOps data connector to Education Plus and Education Standard tiers, adding AI detection tools and ransomware defenses amid reports that 82% of K-12 organizations experienced cyber threats in the past 18 months.

CLAUDE FINDS 353 ZERO-DAYS ON PACKAGIST

Sansec's AI-powered security pipeline using Claude Opus 4.5 discovered 353 confirmed zero-day vulnerabilities across 5,000 Magento extensions on Packagist, including RCE, SQL injection, and authentication bypass flaws affecting packages with 5.9 million total downloads.

PWN2OWN AUTOMOTIVE 2026 - DAY TWO RESULTS

Day Two of Pwn2Own Automotive 2026 awarded $439,250 for 29 unique zero-day vulnerabilities across EV chargers and in-vehicle infotainment systems, bringing the event total to $955,750 and 66 vulnerabilities.

SCHEDULE YOUR DEMO →

VULNERABILITIES THREATEN TO BREAK CHAINLIT AI FRAMEWORK

Zafran Security disclosed two high-severity vulnerabilities in Chainlit, an open-source AI chatbot framework with over 200,000 weekly PyPI downloads. CVE-2025-22218 (CVSS 7.7) enables arbitrary file reads via the custom elements API, while CVE-2026-21219 (CVSS 7.0) is an SSRF flaw affecting SQLAlchemy implementations. Combined exploitation could allow attackers to steal AWS credentials from EC2 instances running IMDSv1 and achieve cloud account takeover. Version 2.9.4 patches both vulnerabilities.

CLOUDFLARE WHACKS WAF BYPASS BUG THAT OPENED SIDE DOOR FOR ATTACKERS

Cloudflare has fixed a vulnerability in its WAF that could allow attackers to bypass security rules and directly access origin servers. The vulnerability emerged when Cloudflare disabled security features upon receiving an HTTP-01 ACME challenge without verifying that the challenge token was valid. Cloudflare remediated this issue with no customer action by disabling WAF features only when the challenge token matches a legitimate token for that domain.

PROMPT INJECTION BUGS FOUND IN OFFICIAL ANTHROPIC GIT MCP SERVER

Cyata discovered three prompt-injection vulnerabilities in Anthropic's reference MCP server for the git implementation. The vulnerabilities could allow an attacker to execute arbitrary code when the MCP server is used alongside a filesystem MCP, delete arbitrary files, and load arbitrary files into an LLM's context. They arise from mcp-server-git failing to properly validate repository paths or sanitize arguments passed to Git commands.

THREAT HUNTING WITH CLAUDE CODE AND MCP

This guide demonstrates how to use Claude Code with Model Context Protocol servers to compress days of manual threat hunting into hours by connecting AI agents directly to security data lakes for hypothesis-driven investigations. The workflow involves stakeholder alignment on three to five priority threats from threat models, then deploying reusable "Skills" that teach agents hunting methodologies, such as the pivot loop pattern for correlating indicators across time, identity, network, and host dimensions. Hunt outputs include structured findings with confidence assessments and detection coverage gaps that translate directly into detection-as-code rules.

UNAUTHENTICATED CLUSTER TAKEOVER IN AWS ROSA

A security researcher discovered a critical vulnerability in the Red Hat OpenShift Service affecting AWS ROSA Classic clusters that could allow unauthenticated full cluster takeover. The vulnerability lies in the cluster transfer endpoint, which checks only whether the recipient has the ability to accept a cluster, not whether the requester owns the cluster, allowing an attacker to take over a cluster with only the cluster_uuid and username. Unauthenticated requests to the cluster's web console settings endpoint return the cluster_uuid and the owner's email address, which could be used to guess their username.

SDFLGS - THE LOG FIELD I'D BEEN IGNORING THAT UNLOCKED ATTACK PATH DETECTION

SDFlags is a field that controls which security descriptor information is returned in queries and is used extensively in BloodHound and SharpHound. Querying for nTSecurityDescriptor fields (Owner, Group, DACL, or SACL) opens the door to attack path mapping. Conversely, legitimate tools almost never set SDFlags when running AD queries, opening up a new detection opportunity.

Learn more today

NEBULA

Nefarious Execution & Behavioral Unit for LOLBAS Attacks (NEBULA) is an interactive PowerShell TUI for testing and exploring Windows execution techniques, COM objects, WMI methods, and LOLBAS techniques.

DARWIS TAXII

DARWIS TAXII provides a high-performance Trusted Automated eXchange of Indicator Information (TAXII) server written in Rust. It's a Rust port of EclecticIQ OpenTAXII.

INTRODUCING SUPPLY CHAIN ATTACK CAMPAIGNS TRACKING IN THE SOCKET DASHBOARD

Socket launched a Threat Intel page with campaign tracking that identifies whether organizations are affected by active supply chain attack campaigns targeting package registries like npm. The feature groups related malicious packages under single campaigns (such as Shai-Hulud and Contagious Interview), displays Safe/Impacted status for each organization, and provides direct links to affected repositories with ecosystem filtering for npm, PyPI, and Maven. Security teams can immediately assess exposure to coordinated attacks without cross-referencing advisories or running custom scripts.

HONG KONG ISSUES CODE OF PRACTICE UNDER THE PROTECTION OF CRITICAL INFRASTRUCTURES (COMPUTER SYSTEMS) ORDINANCE

Hong Kong's Office of the Commissioner of Critical Infrastructure issued a Code of Practice on January 1 that translated the Protection of Critical Infrastructures Ordinance into specific compliance requirements for critical infrastructure operators. The CoP establishes criteria for Critical Computer System designation (including SCADA and industrial control systems), defines material change notification triggers, mandates security audits and management plans, and clarifies incident reporting timelines—12 hours for serious incidents affecting service levels or causing data breaches, and 48 hours for other security incidents. Critical infrastructure operators should treat the CoP as the operative compliance benchmark and implement structured governance programs aligned with its technical baselines, security audit requirements, and incident response protocols to meet supervisory expectations.

A NOVEL SIDE-CHANNEL ATTACK THAT UTILIZES MEMORY RE-ORDERINGS

Memory DisOrder is a timerless side-channel attack that exploits memory re-orderings in relaxed memory models to infer cross-process activity on mainstream CPUs (X86/Arm/Apple) and GPUs (NVIDIA/AMD/Apple). The technique demonstrated covert channels achieving up to 16 bits/second with 95% accuracy on Apple M3 GPU, reliable DNN architecture fingerprinting, and potential throughput of nearly 30K bits/second on X86 CPUs when exploiting low-level system details. Organizations should monitor for emerging mitigations as this vulnerability class, which affects parallel processing units, becomes better understood.

PHISHING CAMPAIGN ZEROES IN ON LASTPASS CUSTOMERS

An ongoing phishing campaign targeting LastPass customers began around January 19, using LLM-crafted emails with plausible subject lines urging users to "back up their vaults" before scheduled maintenance. The phishing emails direct victims to credential-harvesting sites designed to capture master passwords, potentially compromising entire password vaults. Organizations should alert users to verify email sender addresses, enable MFA on password managers, and report suspicious LastPass-branded emails.

CURL SHUTTERS BUG BOUNTY PROGRAM TO STOP AI SLOP

TRUMP ADMINISTRATION ADMITS DOGE MAY HAVE MISUSED AMERICANS' SOCIAL SECURITY DATA

According to court documents, two members of DOGE may have accessed and shared SSNs in an effort to help an advocacy group “overturn election results in certain states.”

PWN2OWN AUTOMOTIVE 2026 - DAY ONE RESULTS

Pwn2Own Automotive 2026 Day One awarded $516,500 for 37 unique zero-days across IVI systems, EV chargers, and Tesla Infotainment, with Fuzzware.io leading the Master of Pwn competition.

ACF PLUGIN BUG GIVES HACKERS ADMIN ON 50K WORDPRESS SITES

Wordfence detected a new critical vulnerability in the Advanced Custom Fields Extended (ACF Extended) plugin for WordPress that could allow unauthenticated attackers to obtain admin privileges. The vulnerability arises from a lack of enforcement of role restrictions during form-based user creation. The vulnerability is only exploitable on sites that use a “Create User” or “Update User” form with the role field mapped.

MINNESOTA DEPARTMENT OF HUMAN SERVICES DATA BREACH IMPACTS 300K

The Minnesota Department of Human Services is notifying 300K victims that their data was accessed by an unauthorized individual over the course of a month. A user affiliated with a licensed care provider accessed data in the MnCHOICES system without authorization. The data accessed includes names, sex, dates of birth, phone numbers, addresses, Medicaid ID numbers, and the last four digits of SSNs.

APACHE AIRFLOW VULNERABILITIES ENABLE SENSITIVE DATA EXPOSURE

Two new vulnerabilities allow for sensitive data leakage in versions of Apache Airflow prior to 3.16. The first vulnerability arises from Airflow failing to properly mask proxy credentials in log files. The second vulnerability arises from Airflow not applying user-registered secret pattern masking before truncating field templates when dealing with long fields in the Rendered Templates UI.

HOW TO GET SCAMMED (BY DPRK HACKERS)

A security researcher documented a DPRK-linked Contagious Interview campaign in which threat actors posed as recruiters on Discord, delivering malware via fake technical assessments that deployed a multi-stage payload using blockchain-based dead-drop resolvers across Tron, Aptos, and Binance Smart Chain. The final RAT establishes persistence by injecting into VS Code and Cursor IDEs, exfiltrates credentials, and evades analysis by detecting cloud/CI/CD environments. Detection requires monitoring for Node.js processes that spawn with eval flags and API calls to blockchain endpoints such as api.trongrid.io.

CLANG HARDENING CHEAT SHEET - TEN YEARS LATER

Quarkslab has updated its Clang hardening cheat sheet after ten years, documenting new compiler mitigations including FORTIFY_SOURCE level 3, stack clash protection via -fstack-clash-protection, and Intel CET/ARM PAC+BTI for control-flow integrity. The guide covers defenses against ROP/JOP attacks through hardware-assisted mechanisms such as shadow stacks and indirect branch tracking, as well as speculative execution mitigations with -mspeculative-load-hardening. Security teams should adopt the OpenSSF-recommended compiler flags and consider architecture-specific protections (CET for x86 and PAC/BTI for ARM) while balancing performance trade-offs.

SOLYXIMMORTAL: PYTHON MALWARE ANALYSIS

SolyxImmortal is a Python-based spyware that targets Windows systems, focused on long-term surveillance and data theft rather than destruction. It steals browser credentials, harvests documents, logs keystrokes, and captures screenshots, then exfiltrates everything via hardcoded Discord webhooks over HTTPS to blend into normal traffic. It minimizes detection while continuously monitoring victims by persisting through AppData and Run keys, abusing DPAPI to decrypt Chromium credentials, and batching keystrokes and archives.

org, take a look at the most trusted enterprise password manager

ANAMNESIS

Anamnesis is an evaluation framework for studying how LLM agents generate exploits from vulnerability reports, demonstrating that Claude Opus 4.5 and GPT-5.2 agents can independently develop working exploits that bypass ASLR, NX, full RELRO, CFI, Shadow Stack, and seccomp sandboxes when given a QuickJS use-after-free vulnerability and proof-of-concept trigger.

SYZKALLER

Syzkaller is a kernel fuzzer that finds bugs across various operating systems, including Linux and Windows. Originally for Linux, it now supports other OS kernels. It is a coverage-guided tool developed by Google, but it is not an official product.

ADTRAPPER

ADTrapper is a comprehensive security analysis platform designed for cybersecurity professionals to analyze Windows AD authentication logs.