A roundup of 89 items curated from across the security community.
News
- Red Hat npm packages compromised via CI/CD pipeline by Florian Roth.
Multiple @redhat-cloud-services npm packages ship malicious preinstall hooks from a compromised GitHub Actions OIDC pipeline, targeting cloud tokens, /proc/mem secrets, and persisting through Claude Code and VS Code injection.
Dutch police and the NCSC dismantled a 17-million-device botnet operating on 200 servers seized from a local hosting provider.
Pro-Iran hackers hijacked high-profile Instagram accounts, including the Obama White House, by tricking Meta’s AI support bot into resetting passwords with a spoofed hometown IP.
Sonatype maps four npm campaigns running across May and June, including a 176-package set built to beat internal dependency checks, with IOCs and detection notes.
A remote DoS across nginx, Apache, IIS, Envoy, and Cloudflare Pingora: one client pins 32GB of server memory in about 10 seconds. Found by Codex, with no patch at disclosure. Also: Hacker News coverage.
More this week (15)
- Out-of-band SharePoint RCE patch (CVE-2026-45659) by Dominic Chell.
- ESET APT Activity Report Q4 2025 to Q1 2026 by Dominic Chell.
- Severe Starlette vulnerability disclosed.
- Metasploit wrap-up: Dirty Frag LPEs and Citrix NetScaler scanner.
- Iran uses selective internet restoration to track and arrest protesters.
- US military personnel targeted via commercial location data.
- Keycloak secrets disclosure and account takeover by kmkz.
- Vulnerability Disclosure in the Age of AI by Bruce Schneier.
- Dutch server seizure also disrupted Iranian cyber operations.
- BIRD/BIRD2: stack buffer overflow in BGP AS_PATH matching by Solar Designer.
- Microsoft Threatening Security Researcher by Bruce Schneier.
- Dashlane vaults accessed after a 2FA brute-force.
- Google patches 124 Android flaws, one actively exploited.
- EU Cyber Resilience Act 24-hour reporting takes effect in September.
- Quantum Health appears to be handling a breach.
Techniques and Write-ups
Calif runs an AI-driven audit of FreeBSD and surfaces 15 kernel bugs, including 3 RCEs, 5 LPEs, and a bhyve escape.
Praetorian builds a pipeline using LLMs to keep offensive tools alive longer by reducing their EDR signature footprint, compiling Sliver, Chisel, and GhostPack to WASM.
Wiz details DarkReplica, a use-after-free in Redis’s built-in Lua engine that reaches remote code execution, one of five Redis RCEs disclosed in 48 hours.
Sonar exploits an argument injection in Jellyfin using a .NET JIT compiler gadget: the runtime’s memfd-backed code pages turn file writes into shellcode execution.
- 1-click GitHub token theft via a VSCode bug by Jeff McJunkin.
Clicking one link in github.dev hands an attacker an OAuth token with read and write access to all your repos, including private ones. Dropped publicly because the researcher did not want to deal with MSRC.
A four-byte heap overflow in the STB image-parsing library escalated all the way to remote code execution in Minecraft.
More this week (51)
- Keys to the Kingdom: Drupal Core CVE-2026-9082 deep dive by shubs.
- Two bypasses for Chrome’s Sanitizer API by shubs.
- Automating Entra ID tenant destruction with AI by Panos Gkatziroulis.
- StubZero: $148K RCE in Google Cloud production by Sam Curry.
- Vulnerability Spoiler Alert: catching CVEs before publication by spaceraccoon | Eugene Lim.
- z386: an FPGA 386 built from the original microcode by Daax.
- Fake Claude Code, real malware: ACR Stealer campaign targeting AI developers by Malware Unicorn.
- Finding XSS in Shazzer, the XSS testing tool by Gareth Heyes \u2028.
- CIFSwitch: Linux local root via forged cifs.spnego upcall by Solar Designer.
- DICOM heap overflow: a technical deep dive by Emmanuel Tacheau.
- Unpatched RCE in Gogs via git rebase argument injection by Metasploit Project.
- Drupal CVE-2026-9082 to RCE on PostgreSQL superuser by Swissky.
- Visual Studio extensions revisited.
- The word “Toad” gave any website full control of Chrome’s top VPN.
- Fooling around with encrypted reasoning blobs.
- Mapping a botnet by its backend: 1,001 IPs across 64 countries.
- BYOVD to loot LSASS, bypassing HVCI on Windows 11 25H2 by hasherezade.
- Azure Front Door cache poisoning to 0-click XSS by d3d aka dead (dead, мёртв, 死了).
- ThinkPad firmware reverse-engineering toolchain.
- Subnet discovery through multi-protocol TTL tracing.
- Stealing passwords via HTML injection under a strict CSP.
- Poisoning Claude Code: one GitHub issue to break the supply chain.
- RedSun: local privilege escalation via Defender’s remediation workflow by Florian Roth.
- CVE-2026-4387: StrongDM auth state file reuse by Hope Walker.
- Detecting Nimbus Manticore (UNC1549) by Florian Roth.
- CVE-2026-41089 PoC by Chihuahua in charge NotMe.
- Exploiting ML-DSA bugs: post-quantum code as an attack surface by Dave Aitel.
- NuGet code execution as a service.
- The open redirect variant that is actually a vulnerability.
- Chrome exploit mitigations deep dive by kmkz.
- Inside a UEFI bootkit that hides in Hyper-V and manipulates EPT by hasherezade.
- Tracking Kimsuky APT infrastructure by hasherezade.
- CVE-2026-0826: unauthenticated stack overflow in HP Poly VoIP phones by kmkz.
- Unpatched NTLM coercion via the Windows Search URI handler by Rémi GASCOU (Podalirius).
- Device code phishing forensics in BEC investigations.
- Reading kernel MTE panics on Apple Silicon by Stefan Esser.
- Hidden permissions found after adding a detection rule.
- Adobe Acrobat eScript use-after-free RCE by kmkz.
- Bring Your Own RWX Region DLL (BYORWXDLL) by Panos Gkatziroulis.
- Golang code review notes, part two.
- ETW internals deep dive by kmkz.
- Weaponizing legitimate iDEAL payment links in phishing.
- Katana: BadUSB attacks driven through a PC speaker.
- Skill scanners do not catch malicious AI skills.
- What hands-free, LLM-driven vulnerability research looks like.
- FlutterShell: a macOS backdoor that weaponizes AI summarization by Patrick Wardle.
- CVE-2026-46333: a ptrace logic bug for Linux privilege escalation by kmkz.
- CVE-2026-8326: SparkView path traversal to RCE as root by kmkz.
- Fake Ghidra and dnSpy sites push malware through a TDS by hasherezade.
- Exploits were never the point by Halvar Flake.
- The 9.3 critical dependency confusion Microsoft dismissed by Swissky.
Tools and Exploits
A red team PoC pipeline that combines AI-driven telemetry spoofing with WASM sandboxing to evade modern EDR systems.
A VMProtect 3.5 devirtualizer built on Remill that lifts the whole x86 code of the VM, released as code.
HijackLibs.net refreshes with over 600 documented DLL hijacking cases, machine-readable feeds, and Sigma detection content for every DLL.
More this week (9)
- goLoL: scan a host for usable LOLBAS techniques by Panos Gkatziroulis.
- Cowrie 3.0: the SSH/Telnet honeypot now pip-installable by Chris Sanders.
- TinyTracer 4.0: PIN-based binary tracer updated.
- Outpacket: impacket workflows mapped to modern alternatives by Swissky.
- PseudoForge: an IDA plugin for Windows driver analysis by hasherezade.
- LLMReaper: exfiltrating AI conversations via browser extensions.
- Invoke-WindowsSearch: stealthy file enumeration via the Windows Search DB by One punch mander.
- RustyPacker: a Rust shellcode packer with indirect syscalls by kmkz.
- YARA and PowerShell scanner for github.dev token theft artifacts by Ring3API 🇺🇦.