The UK Gambling Commission's executive director accused Meta of knowingly allowing illegal gambling advertisements, noting that its own searchable ad library reveals operators using keywords like "not on Gamstop" to target vulnerable users. Meta suggested the regulator deploy AI tools to find and report these ads rather than proactively policing its own platform. The commission's executive director described Meta's ad library as "a window into criminality" and said the company appears "happy to turn a blind eye and continue taking money from criminals."
North Korean operators are posing as recruiters and sending developers fake coding tests that require cloning malicious Git repositories into VS Code. Once the project is opened and trusted, malicious tasks.json configurations fetch obfuscated JavaScript payloads from Vercel to install backdoors such as BeaverTail and InvisibleFerret, enabling remote code execution, keylogging, data theft, and crypto mining.
A seemingly normal calendar invite hides a natural-language payload in the event description, which Gemini processes when a user later asks about their schedule. This triggers Gemini to summarize private meetings, write the summary into a new event visible to the attacker, and reply with a harmless message.
OpenAI's ChatGPT Health product raises data privacy concerns by enabling medical record integration and third-party sharing without confirmed end-to-end encryption or HIPAA protections, and notably excludes regions with stricter data regulations, such as the EEA and the UK.
West Midlands Police chief constable retired after the force used Microsoft Copilot's fabricated report about a non-existent football match to justify banning Israeli fans, highlighting the risks of AI hallucinations in law enforcement decision-making.
A Warwickshire secondary school is reopening after a severe cyberattack disabled critical IT and safety systems, including gates, fire alarms, registers, phones, and internet.
South Korean cybersecurity firm Genians has flagged a new APT campaign led by the North Korean Konni hacking cluster. The attackers are targeting victims with spearphishing emails posing as North Korean human rights activists and South Korean financial institutions. The attackers use common click-tracking services to obfuscate the redirect links used to deliver malware.
Belgian security experts have identified a new flaw in Bluetooth devices using Google's Fast Pair. This vulnerability enables attackers to take control of devices to manage audio, track location, or listen to microphone audio. The issue occurs because devices accept Fast Pair connections even outside pairing mode. An attacker can hijack a device in about 10 seconds from a distance of up to 14 meters.
OpenCode versions before v1.1.10 contained a critical RCE vulnerability via an unauthenticated HTTP server that exposed endpoints for arbitrary shell command execution, interactive terminal session creation, and arbitrary file reads. The vulnerability also enabled prompt injection into the LLM's context window, creating a secondary attack vector to manipulate the AI agent into exfiltrating data or performing malicious actions. Thousands of developers' machines were exposed with near-zero sandboxing, meaning agents had full access to SSH keys, cloud credentials, and browser cookies, with no audit trail of potential compromise.
BodySnatcher is a critical vulnerability in ServiceNow's Now Assist AI Agents and Virtual Agent API that allows unauthenticated attackers to execute agentic workflows as any user by exploiting weak authentication defaults and auto-linking features—potentially creating backdoor admin accounts. ServiceNow patched hosted instances in late October (Now Assist AI Agents 5.1.18/5.2.19+ and Virtual Agent API 3.15.2/4.0.4+), but the underlying misconfigurations may persist in custom code and third-party integrations. Organizations should enforce MFA with proper validation scripts for Virtual Agent API providers, enable AI steward approval in AI Control Tower, and regularly audit and disable unused AI agents.
kubeconfigs can run any executable via the configured exec plugin, which is used to obtain credentials. Kubernetes v1.35 adds two new fields, credentialPluginPolicy and credentialPluginAllowlist, which can be used to restrict the executables that are available to kubectl for obtaining credentials. Currently, the only supported attribute for the allow list is `name` (for an executable name or path), but the SIG is looking to add further support, such as checksums, in the future.
TechCrunch has received a sample of a phishing link that is being sent to those connected to “Iran-related activities” from a UK-based Iranian activist. The initial contact is sent to the victim via WhatsApp and contains a phishing link that directs them to a malicious site that attempts to steal the victim's Gmail credentials, hijack the victim's WhatsApp account, monitor the victim's location, and capture audio and video. The attackers use the DuckDNS dynamic DNS provider to mask their links.
Sponsored
CNAPPs provide visibility into cloud risks but rely on manual remediation after deployment. Pair them with preventive controls and shift from reactive to proactive. Turbot Guardrails [11] doesn't just scan and alert. It blocks misconfigurations in build, at the cloud provider API, and auto-remediates drift in runtime, preventing issues
CoLog is a unified framework for detecting point and collective anomalies in operating system logs via collaborative transformers.
The Agentic Threat Hunting Framework (ATHF) provides a memory and automation layer for threat-hunting programs. It can integrate with any threat-hunting methodology, making existing programs AI-ready.
Heimdall is an AWS security scanner that discovers privilege escalation paths by detecting 50+ IAM privesc patterns, analyzing 85+ attack chains with MITRE ATT&CK mapping, and scanning 10 AWS services for cross-service escalation vectors. The tool includes a Terraform engine for shift-left security that identifies IAM attack paths in infrastructure-as-code before deployment, differentiating it from static config scanners like tfsec or checkov. Features include an interactive TUI, one-command dashboard, multi-hop path detection through role chains, and SARIF export for GitHub Security integration.
AWS will end support for AWS SSE-C as an encryption option for S3, following its discovery in ransomware campaigns. SSE-C was a rarely used encryption method for S3 that allowed customers to supply an encryption key for use in S3 API requests. This was useful for ransomware operators because AWS never had access to the key, and it was quieter than alternative methods like KMS. Organizations can use KMS with customer-managed keys (CMK) or client-side encryption to replace the functionality.
2026.01.20·cloudsecurityalliance.org·3 min read·TLDR InfoSec Let's Encrypt has made 6-day TLS certificates publicly available through its short-lived certificate profile, well ahead of the 2029 industry mandate that reduces maximum validity to 47 days. Google Trust Services also offers short-lived certificates with configurable validity periods as short as a single day. Organizations already using ACME clients for automation can adopt these shorter validity periods with minimal operational changes, since the increased renewal frequency is handled automatically.
Ingram Micro disclosed that the SafePay ransomware group's July 2025 attack compromised the personal data of 42,521 employees and job applicants, including names, identity document numbers (passports, driver's licenses, and SSNs), and employment evaluations. The attackers claimed to have stolen 3.5 TB of data, and the incident forced system shutdowns that prevented MSPs from managing customer services and sent some regional staff home. Customers criticized the distributor's poor communication during the incident, with some unable to locate attack updates without external assistance.
Wiz reviewed 2025's surge in agentic browser adoption alongside numerous prompt-injection vulnerabilities.
A malicious Chrome extension called NexShield impersonates uBlock Origin Lite and crashes the browser to display fake security warnings that trick users into running PowerShell commands, deploying the ModeloRAT trojan on corporate systems.
Go has released emergency patches addressing six security flaws, including DoS vectors in archive/zip and net/http, arbitrary code execution via cmd/go's CgoPkgConfig and VCS toolchain handling, and TLS session key leakage issues.
Sponsored
The industry now has a peer-reviewed risk framework for autonomous, tool-using AI agents. In this live AMA-style webinar [4] on Wed. 1/28, engage with CHRIS HUGHES, STEVE WILSON, MICHAEL BARGURY, AND KAYLA UNDERKOFFLER - security experts who helped shape the new OWASP standard.
READY TO GO DEEPER? Get certified with Zenity's _Learning Lab_ series, Foundations of AI Security, What, Why, and How [5], and equip yourself with the necessary tools to ADOPT SECURE AI AT SCALE.
Claude Cowork is a new general-purpose agent now available in research preview. It is vulnerable to indirect prompt injection via uploaded files and can be abused to exfiltrate sensitive documents. This attack exploits a previously reported, unremediated vulnerability in the Claude sandbox that allows network connections to the Claude API.
Grubhub has confirmed that an unarmed threat actor accessed its systems and stole data. While Grubhub has not confirmed the identity of the threat actor, sources have reported that the ShinyHunters group is extorting the company. The threat actor is reportedly extorting the company to prevent the leak of data from an older Salesforce instance and to prevent the theft of data from the company's current Zendesk platform.
A phishing campaign delivered via WhatsApp targeted Iranian activists, academics, government officials, and business leaders across the Middle East, stealing Gmail credentials with 2FA codes, hijacking WhatsApp accounts via malicious QR codes, and attempting to exfiltrate location data, photos, and audio recordings. An exposed attacker server revealed 850+ records affecting fewer than 50 confirmed victims, with infrastructure registered as early as August 2025 using DuckDNS for domain masking. Security researchers noted hallmarks consistent with IRGC-linked spearphishing, though financial motivations have not been ruled out. Users should avoid clicking unsolicited WhatsApp links and regularly audit linked devices.
Prepared statements are a standard recommendation to solve most SQL injection issues. This post demonstrates a technique discovered while working on a pentest for manipulating prepared statements in JavaScript applications using the mysql or mysql2 package. The packages convert arrays and JSON objects to SQL fragments by default, which could allow an attacker to perform SQL injection.
Prompt injection prompts are akin to 0days and should not be published. Prompt injection prompts that are not customer-specific should be shared because attackers already have access to prompt injection strings, so the benefit to defenders of seeing real-world threats outweighs the risks.
The Shai-Hulud worm demonstrated how attackers weaponize self-hosted GitHub Actions runners as persistent backdoors by installing rogue runners on compromised machines and using GitHub Discussions as a command-and-control channel via intentionally vulnerable workflows with command injection. The technique exploited the RUNNER_TRACKING_ID=0 environment variable to bypass process cleanup and achieve persistence, while all traffic flowed to github.com, evading traditional network defenses. Security teams should audit runner inventories for unauthorized registrations, implement ephemeral runners, restrict self-hosted runners to private repositories only, and deploy runtime detection for persistence techniques.
This repository contains a collection of 10 MCP challenges reproduced from real CVEs and public incident reports.
sigdream provides a sigreturn-oriented programming-based sleep obfuscation library that encrypts PT_LOAD segments and the heap.
Tangled is a phishing platform that weaponizes iCalendar rendering features in Microsoft Outlook and Gmail to automatically add spoofed meeting invites to targets' calendars without user interaction. The tool automates the delivery of social engineering campaigns and runs as Docker containers, with a web-based dashboard for managing phishing operations. Red teams can use this to test an organization's susceptibility to calendar-based phishing attacks that bypass traditional email security controls.
npm has announced a new release strategy called staged publishing to protect against future compromises in the wake of 2025's Shai-Hulud supply chain compromises. Staged publishing will complement npm's previous credentials safety efforts by requiring new project releases to be manually approved via an MFA-verified maintainer. Package maintainers have expressed a need for more registry-level protections after npm's chaotic removal of classic tokens.
2026.01.19·links.tldrnewsletter.com·10 min read·TLDR InfoSec Researchers from Wiz discovered a vulnerability in the way CodeBuild CI pipelines handled build triggers. This vulnerability could have been exploited to take over AWS repositories, including the AWS JavaScript SDK, which powers the AWS console. AWS immediately took steps to remediate the vulnerability before any exploitation occurred.
A security researcher chained multiple vulnerabilities in Facebook's JavaScript SDK to achieve account takeover in the Facebook mobile app, exploiting Math.random() for callback identifier generation, DOM XSS via unsanitized SVG injection in the Customer Chat plugin, and X-Frame-Options bypass in mobile webviews. The attack reconstructed the PRNG state by forcing plugin iframe reinitializations and observing leaked window.name values, enabling prediction of security-critical callback identifiers. Meta awarded a $66,000 bounty and fixed the vulnerability in December 2023.
Ukrainian and German authorities have identified Black Basta's alleged leader as Oleg Nefedov, a 35-year-old Russian national with suspected FSB/GRU ties.
Microsoft released emergency out-of-band updates for Windows 10, Windows 11, and Windows Server to fix credential prompt failures blocking Cloud PC sessions and shutdown issues on Secure Launch-enabled devices caused by the January 2026 Patch Tuesday updates.
Organizations should immediately disable NTLMv1 and enforce NTLMv2-only authentication.
Varonis researchers discovered a now-patched vulnerability in Microsoft Copilot Personal, dubbed "Reprompt," that enabled single-click data exfiltration via indirect prompt injection in legitimate Copilot URLs. The attack allowed the extraction of usernames, locations, and chat history even after the victim closed the chat window. Microsoft 365 Copilot was not affected. The vulnerability has been remediated as of this week.
The Canadian Investment Regulatory Organization (CIRO) says that the data of about 750K Canadian investors was compromised in a breach last year. The compromised data includes social insurance numbers, investment account numbers, and phone numbers. CIRO stated that the breach resulted from a sophisticated phishing attack.
A breach at Eurail B.V., the company behind Eurail and Interrail passes, exposed travellers' personal details, including contact information and ID or passport data, and possibly bank and limited health data for some DiscoverEU participants. Affected systems were secured, passwords reset, and customers have been urged to watch for phishing, change related passwords, and monitor bank accounts for unusual activity.
JFrog's Security Researchers have demonstrated successful remote code execution exploitation of CVE-2025-62507, a stack buffer overflow in Redis 8.2.x's XACKDEL command with a CVSS score of 8.8. Unauthenticated attackers can overwrite the return address using crafted stream IDs, a vulnerability made easier by the lack of stack canary protection in the official Docker image. Shodan detected approximately 2,924 servers running vulnerable versions that are immediately exploitable without authentication, while 183,907 additional instances with authentication could also be at risk. Organizations are advised to upgrade to Redis 8.3.2, enable authentication, and compile with the -fstack-protector option, as the research highlights that CVSS scores alone should not determine patching priorities, since high-severity vulnerabilities can still offer straightforward remote code execution paths.
Slack's security team introduced an agentic system for investigating security issues that involves a Director persona instructing a series of SME personas, with the results checked by a Critic persona. The Director persona reviews the investigation's status and poses a question to the experts, who use their domain expertise to prepare answers. The Director then queries those answers to advance the investigation loop or conclude the investigation. This system also enables cost optimization: expert personas, which process more data, can use cheaper models, whereas the Director persona, which requires more reasoning, can use more expensive models.
Local computer use agents fundamentally shift the endpoint security industry because a properly functioning agent can be indistinguishable from a malicious agent or attacker, diminishing the value of signatures. A previous analogue is the adoption of PowerShell by both attackers and sysadmins, which made context necessary to distinguish attacks from standard use. Successful organizations will need to build contextual defense systems rather than trying to push back on agent adoption.
Sponsored
Consolidating security and IT Ops is no longer just a nice-to-have. By automatically tuning alert thresholds [11] and mapping threats to adversary tactics based on premium threat intelligence feeds, Sumo Logic is helping Dev, Sec, and Ops teams collaborate. Sign up for a demo and get some cool swag [12]!
Rust's cryptography ecosystem has matured significantly, with aws-lc-rs and ring now serving as the official crypto providers for rustls. At least two libraries, aws-lc-rs and boring, offer FIPS 140-3 certification alongside post-quantum KEM support via Kyber algorithms. The ecosystem divides between pure-Rust implementations, such as RustCrypto, dalek-cryptography, and graviola, which offer better auditability and cross-compilation, and C library wrappers that provide assembly-optimized performance. This is a relevant trade-off because 37.2 percent of cryptographic library vulnerabilities stem from memory safety issues. For teams requiring FIPS compliance and performance, aws-lc-rs is recommended. For WebAssembly targets and easier cross-compilation, RustCrypto crates remain the preferred choice.
isVerified offers mobile apps that secure executive and institutional phone calls by detecting AI-generated voice deepfakes in real time and binding a verified user identity to a hardened VoIP channel, protecting enterprises from vishing and voice impersonation attacks.
This GitHub repository contains 65+ tools and resources useful for blue teaming activities.