A roundup of 312 items curated from across the security community.

News

Wire-level analysis revealed xAI’s Grok Build CLI was uploading entire git repos, including secrets, to a GCS bucket. On a 12 GB test repo, 5.1 GB was exfiltrated while the task needed 192 KB. Still no advisory from xAI.

The EU formally attributes TURLA and related cyber operations to the FSB’s 16th Centre, alongside its broadest cyber sanctions package yet targeting Russian-linked actors.

Eleven Chrome extensions marketed as “AI Chat Exporters” silently upload full chat content to external servers on PDF export, despite store listings claiming no external uploads.

The EU adds LummaC2 infostealer developers to its sanctions list as part of expanded cyber enforcement actions.

FT reports Iran exploited well-known SS7 vulnerabilities in cell networks to track U.S. military personnel and contractors during the conflict.

The largest Patch Tuesday ever. 570 fixes including 3 zero-days (2 actively exploited) and 141 RCE flaws. Microsoft attributes the surge to AI-assisted vulnerability discovery.

DOJ charges operators of a Russian bulletproof hosting service used to support cybercriminal infrastructure and evade law enforcement takedowns.

Kim Zetter interviews Unit 221B’s Allison Nixon about unmasking Scattered Spider’s Peter Stokes. He was identified in 2023, years before his biggest crimes and eventual arrest in Finland.

Oversecured drops the largest mobile vulnerability disclosure in history: 140 bugs across Samsung preinstalled apps.

Two Scattered Spider members sentenced to five and a half years each for the Transport for London cyberattack, with one also convicted for compromising two US healthcare companies.

More this week (28)

Techniques and Write-ups

Unauthenticated SQL injection via REST API batch-route confusion that chains to full remote code execution on WordPress core. No preconditions required.

Pre-auth RCE in ServiceNow achieved by escaping the Rhino JavaScript sandbox. Now being exploited in the wild with variant gadget chains beyond the published PoC.

Failed D3DKMTCreateAllocation rollback re-reads an allocation handle from user memory and frees whatever it names. Unprivileged double-free in dxgkrnl with writeup and PoC.

SpecterOps guide on relaying NTLM authentication through egress channels when operating from a low-privilege C2 foothold. Covers constraints and workarounds seldom documented elsewhere.

At least 673,000 Shark robot vacuums in a single AWS region confirmed vulnerable to unauthenticated remote code execution. Detailed IoT security writeup.

Registering a malicious AMSI provider delivers persistence that survives reboots and runs in the context of any process loading amsi.dll. Includes detection guidance and a visualization of the attack flow.

ASUS bsitf.sys driver allows arbitrary physical memory mapping from user mode. Full 0-day writeup with working PoC for CVE-2026-13585.

Full Chrome exploit chain from V8 renderer to GPU process, developed with AI assistance. Demonstrates a novel GPU compromise technique on Linux where mitigations are harder to defeat.

Comprehensive walkthrough of every telemetry source EDRs rely on at the kernel level. Covers ETW providers, driver callbacks, object callbacks, and registry callbacks, then shows how a single bit flip can disable monitoring entirely.

win32k maps the desktop heap into every process. Offset 0x100 leaks a raw kernel session pool pointer, readable from Low IL, AppContainer, and zero-capability LPAC. A recurring class of bug that keeps reappearing across Windows builds.

More this week (238)

Tools and Exploits

Windows privilege escalation tool from Project Nightcrawler. Targets legacy components for local privilege escalation with working PoC and detection KQL queries.

Passive Active Directory enumeration using native ADSI/COM interfaces. No .NET, no PowerShell, no managed runtime required.

Curated collection of open-source user-defined reflective loaders that bypass CrowdStrike, Elastic, Defender, and SentinelOne. Compatible with Cobalt Strike, Nighthawk, Havoc, Sliver, and more.

IDA 9.4 ships with Swift decompilation support, Qualcomm Hexagon and MCore processor modules, a rebuilt Dyld Shared Cache workflow, and Pathfinder navigation. idalib now included with IDA Home.

Credential harvesting project focused on living-off-the-land techniques. Useful for both red team operators testing credential exposure and defenders building detection rules.

DLL loader built on Crystal Palace that uses CET-compatible callback trampolining for stack spoofing. Rust implementation with working PoC.

Updated Semgrep ruleset for finding vulnerabilities in C and C++ codebases. Ready for integration into CI pipelines and local scanning workflows.

Major release of the commercial C2 framework with CET-compatible user-defined synthetic frames, new OpSec features, and quality-of-life improvements for operators.

New LOLBAS entries for TextTransform.exe, TextTransformCore.exe, MSTest.exe, and Microsoft.XslDebugger.Host bypass Windows Defender Application Control policies.

Latest Metasploit update adds HTTP to SMB relay, Fetch Multi payloads for automatic architecture identification, and expanded RISC-V support.

More this week (16)