A roundup of 89 items curated from across the security community.
News
Pro-Iran hackers hijacked high-profile Instagram accounts, including the Obama White House, by tricking Meta’s AI support bot into resetting passwords with a spoofed hometown IP.
Dutch police and the NCSC dismantled a 17-million-device botnet operating on 200 servers seized from a local hosting provider.
- Red Hat npm packages compromised via CI/CD pipeline by Florian Roth.
Multiple @redhat-cloud-services npm packages ship malicious preinstall hooks from a compromised GitHub Actions OIDC pipeline, targeting cloud tokens, /proc/mem secrets, and persisting through Claude Code and VS Code injection.
Sonatype maps four npm campaigns running across May and June, including a 176-package set built to beat internal dependency checks, with IOCs and detection notes.
A remote DoS across nginx, Apache, IIS, Envoy, and Cloudflare Pingora: one client pins 32GB of server memory in about 10 seconds. Found by Codex, with no patch at disclosure. Also: Hacker News coverage.
More this week (15)
- Microsoft Threatening Security Researcher by Bruce Schneier.
- Vulnerability Disclosure in the Age of AI by Bruce Schneier.
- Iran uses selective internet restoration to track and arrest protesters.
- Severe Starlette vulnerability disclosed.
- Dutch server seizure also disrupted Iranian cyber operations.
- US military personnel targeted via commercial location data.
- Metasploit wrap-up: Dirty Frag LPEs and Citrix NetScaler scanner.
- Dashlane vaults accessed after a 2FA brute-force.
- ESET APT Activity Report Q4 2025 to Q1 2026 by Dominic Chell.
- Out-of-band SharePoint RCE patch (CVE-2026-45659) by Dominic Chell.
- EU Cyber Resilience Act 24-hour reporting takes effect in September.
- Quantum Health appears to be handling a breach.
- Google patches 124 Android flaws, one actively exploited.
- Keycloak secrets disclosure and account takeover by kmkz.
- BIRD/BIRD2: stack buffer overflow in BGP AS_PATH matching by Solar Designer.
Techniques and Write-ups
Calif runs an AI-driven audit of FreeBSD and surfaces 15 kernel bugs, including 3 RCEs, 5 LPEs, and a bhyve escape.
A four-byte heap overflow in the STB image-parsing library escalated all the way to remote code execution in Minecraft.
Praetorian builds a pipeline using LLMs to keep offensive tools alive longer by reducing their EDR signature footprint, compiling Sliver, Chisel, and GhostPack to WASM.
- 1-click GitHub token theft via a VSCode bug by Jeff McJunkin.
Clicking one link in github.dev hands an attacker an OAuth token with read and write access to all your repos, including private ones. Dropped publicly because the researcher did not want to deal with MSRC.
Sonar exploits an argument injection in Jellyfin using a .NET JIT compiler gadget: the runtime’s memfd-backed code pages turn file writes into shellcode execution.
Wiz details DarkReplica, a use-after-free in Redis’s built-in Lua engine that reaches remote code execution, one of five Redis RCEs disclosed in 48 hours.
More this week (51)
- DICOM heap overflow: a technical deep dive by Emmanuel Tacheau.
- CVE-2026-4387: StrongDM auth state file reuse by Hope Walker.
- NuGet code execution as a service.
- Poisoning Claude Code: one GitHub issue to break the supply chain.
- Stealing passwords via HTML injection under a strict CSP.
- Subnet discovery through multi-protocol TTL tracing.
- ThinkPad firmware reverse-engineering toolchain.
- Mapping a botnet by its backend: 1,001 IPs across 64 countries.
- Fooling around with encrypted reasoning blobs.
- The word “Toad” gave any website full control of Chrome’s top VPN.
- Visual Studio extensions revisited.
- The open redirect variant that is actually a vulnerability.
- Detecting Nimbus Manticore (UNC1549) by Florian Roth.
- RedSun: local privilege escalation via Defender’s remediation workflow by Florian Roth.
- z386: an FPGA 386 built from the original microcode by Daax.
- Exploiting ML-DSA bugs: post-quantum code as an attack surface by Dave Aitel.
- Azure Front Door cache poisoning to 0-click XSS by d3d aka dead (dead, мёртв, 死了).
- Skill scanners do not catch malicious AI skills.
- Katana: BadUSB attacks driven through a PC speaker.
- Weaponizing legitimate iDEAL payment links in phishing.
- Golang code review notes, part two.
- Hidden permissions found after adding a detection rule.
- Device code phishing forensics in BEC investigations.
- Finding XSS in Shazzer, the XSS testing tool by Gareth Heyes \u2028.
- What hands-free, LLM-driven vulnerability research looks like.
- Exploits were never the point by Halvar Flake.
- Fake Ghidra and dnSpy sites push malware through a TDS by hasherezade.
- Tracking Kimsuky APT infrastructure by hasherezade.
- Inside a UEFI bootkit that hides in Hyper-V and manipulates EPT by hasherezade.
- BYOVD to loot LSASS, bypassing HVCI on Windows 11 25H2 by hasherezade.
- Reading kernel MTE panics on Apple Silicon by Stefan Esser.
- Two bypasses for Chrome’s Sanitizer API by shubs.
- Keys to the Kingdom: Drupal Core CVE-2026-9082 deep dive by shubs.
- Bring Your Own RWX Region DLL (BYORWXDLL) by Panos Gkatziroulis.
- Automating Entra ID tenant destruction with AI by Panos Gkatziroulis.
- CVE-2026-41089 PoC by Chihuahua in charge NotMe.
- CVE-2026-8326: SparkView path traversal to RCE as root by kmkz.
- CVE-2026-46333: a ptrace logic bug for Linux privilege escalation by kmkz.
- ETW internals deep dive by kmkz.
- Adobe Acrobat eScript use-after-free RCE by kmkz.
- CVE-2026-0826: unauthenticated stack overflow in HP Poly VoIP phones by kmkz.
- Chrome exploit mitigations deep dive by kmkz.
- Fake Claude Code, real malware: ACR Stealer campaign targeting AI developers by Malware Unicorn.
- Unpatched RCE in Gogs via git rebase argument injection by Metasploit Project.
- FlutterShell: a macOS backdoor that weaponizes AI summarization by Patrick Wardle.
- The 9.3 critical dependency confusion Microsoft dismissed by Swissky.
- Drupal CVE-2026-9082 to RCE on PostgreSQL superuser by Swissky.
- Unpatched NTLM coercion via the Windows Search URI handler by Rémi GASCOU (Podalirius).
- StubZero: $148K RCE in Google Cloud production by Sam Curry.
- CIFSwitch: Linux local root via forged cifs.spnego upcall by Solar Designer.
- Vulnerability Spoiler Alert: catching CVEs before publication by spaceraccoon | Eugene Lim.
Tools and Exploits
HijackLibs.net refreshes with over 600 documented DLL hijacking cases, machine-readable feeds, and Sigma detection content for every DLL.
A VMProtect 3.5 devirtualizer built on Remill that lifts the whole x86 code of the VM, released as code.
A red team PoC pipeline that combines AI-driven telemetry spoofing with WASM sandboxing to evade modern EDR systems.
More this week (9)
- LLMReaper: exfiltrating AI conversations via browser extensions.
- TinyTracer 4.0: PIN-based binary tracer updated.
- Invoke-WindowsSearch: stealthy file enumeration via the Windows Search DB by One punch mander.
- Cowrie 3.0: the SSH/Telnet honeypot now pip-installable by Chris Sanders.
- PseudoForge: an IDA plugin for Windows driver analysis by hasherezade.
- goLoL: scan a host for usable LOLBAS techniques by Panos Gkatziroulis.
- RustyPacker: a Rust shellcode packer with indirect syscalls by kmkz.
- YARA and PowerShell scanner for github.dev token theft artifacts by Ring3API 🇺🇦.
- Outpacket: impacket workflows mapped to modern alternatives by Swissky.