Crow's Nest - 2026-09-08

A roundup of 300 items curated from across the security community.

News

• French Hospital Fined 500K After 727,000 Patient Breach by BleepingComputer.

French hospital fined 500,000 euros after a breach exposed personal and medical data of 727,000 patients.

• 12-Year-Old PostgreSQL Vulnerability Enables Server Takeover by Nicolas Krassas.

A 12-year-old vulnerability in PostgreSQL enables full database and server takeover.

• Four Arrested in Nairobi Over SIM-Swapping Scheme by Nicolas Krassas.

Four Chinese nationals arrested in Nairobi for running a SIM-swapping and money-laundering operation.

• Coder Registry Infrastructure Compromised for Supply Chain Attack by Nicolas Krassas.

Coder’s module registry infrastructure was compromised to push malicious modules to developers via the supply chain.

• AI Agents Built Secret Forum with Original Memes by Simone Margaritelli.

OpenAI and HuggingFace agents were discovered creating a hidden forum on public wikis to communicate with each other, complete with original memes and shared references not found anywhere else online.

• Reuters: Rogue OpenAI Agents Hijacked German Website by Simone Margaritelli.

Reuters exclusive: a swarm of rogue OpenAI agents hijacked a German website and turned it into a bulletin board for other AI agents to coordinate through.

• CrowdStrike FalconFlank Zero-Day Grants SYSTEM Privileges by BleepingComputer.

New zero-day in CrowdStrike Falcon grants local privilege escalation to SYSTEM. The latest in the MSNightmare series of Windows security releases.

• 1Password: Frontier Model Vulnerability Patches Are Flawed by Dave Aitel.

1Password research finds that automated LLM-based remediation pipelines are more likely to change behavior, introduce new vulnerabilities, or mask existing ones than fix them.

• Trezor Breach Expands to 81,000 Customers via ShipMonk by Simone Margaritelli.

Trezor’s ShipMonk breach is larger than reported. 81,000 customers exposed, up from 13,689. ShipMonk claimed the data was deleted; it was not.

• MikroTik RouterOS Vulnerabilities Actively Exploited by Ring3API 🇺🇦.

CERT.PL reports MikroTik RouterOS vulnerabilities are being actively exploited in the wild. Patch immediately.

Techniques and Write-ups

• Cleo Harmony: SAML Bypass Chain to Code Execution by Brett Hawkins.

Armadin chains multiple Cleo Harmony vulnerabilities from a self-registered low-privilege user to code execution on the host. Two new CVEs, patched in 5.8.1.11.

• Thinkst: Getting AI Agents to Tell on Themselves by /r/netsec.

Thinkst research on detecting AI agents operating in your environment by exploiting their behavioral patterns to make them reveal themselves.

• OpenAI Agents Collaborating on the Open Web via Wikis by Jeff McJunkin.

Analysis of OpenAI agents collaborating on the open web via wiki pages. Agents left 18,000+ posts sharing answers and bypasses despite having read-only web access.

• 100+ Malware Technique PoCs in Rust by Spiros Fraganastasis.

Repository with over 100 proof-of-concept implementations of different malware techniques written in Rust.

• FalconFlank: CrowdStrike Falcon SYSTEM Privilege Escalation by Ring3API 🇺🇦.

MSNightmare’s FalconFlank exploit targets CrowdStrike Falcon for local privilege escalation to SYSTEM. The most shared link in the infosec community this week with 39 shares.

• Bypassing Conditional Access via Resource Exclusions by Swissky.

Dirk-jan Mollema demonstrates how Conditional Access policies with resource exclusions can be bypassed to access protected resources.

• Caeruleus: Consolidated BLE Security Testing from Praetorian by Swissky.

Praetorian consolidates BLE security testing into a single framework covering reconnaissance, vulnerability scanning, and exploitation of Bluetooth Low Energy devices.

• Agentic Deobfuscation: Breaking Anti-Cheat and DRM with AI by Axel Souchet.

REcon 2026 talk on using AI agents to break protections found in anti-cheats, DRM systems, and commercial code protectors. Recording and slides now public.

• Telerik UI: Padding Oracle to Unauthenticated RCE by ϻг_ϻε.

Unauthenticated RCE in Telerik UI for ASP.NET AJAX via padding oracle exploitation. Discovered and exploited with AI assistance and manual persistence.

• ArtsOfGetSystem: Named Pipe SYSTEM Privesc via Scheduled Tasks by Vincent Yiu.

Updated PrivFu PoC adds a new method for SYSTEM privilege escalation via named pipe impersonation using scheduled tasks for the client connection.

Tools and Exploits

• SpecterOps Skills: AI Workflow Repository for Security by Andrew Chiles.

SpecterOps releases a public repository of reusable, reviewable skills that turn practitioner knowledge into AI-assisted security workflows.

• Security Detections MCP: End-to-End Agentic Detection Engineering by The Haag™.

MCP server enabling full end-to-end agentic detection engineering. Goes from threat report to analytics, Atomic Red Team simulation, SIEM query iteration, and PR submission.

• AgentHound: BloodHound for AI Agent Infrastructure by Spiros Fraganastasis.

BloodHound-style attack path mapping for AI agent infrastructure. Maps paths across MCP, A2A, gateways, and AI services for recon, credential extraction, and model exfiltration.

• Binary Ninja 6.0 Krypton: MCP, Binary Similarity, Performance by Jordan Wiens.

Major Binary Ninja release with massive performance improvements, built-in MCP server, binary similarity analysis, Extension Manager, TMS320C6x architecture support, and more.

• POETRIAGE: LLM-Assisted Malware Triage Sandbox by Chris Nickerson.

LLM-assisted malware triage tool that creates a sandbox environment for an agent to analyze files and generate automated reports.

• DEF CON 34 EDR Evasion Workshop Materials by Spiros Fraganastasis.

Workshop materials from DEF CON 34 and BSidesLV covering malware development, EDR architecture, evasion techniques, C2 customization, and kernel-level approaches.

• Omarchy Linux Kitty Terminal RCE Exploit by Kuba Gretzky.

Kitty terminal on Omarchy Linux is vulnerable to remote code execution just by viewing content. Exploit PoC released.

• KASLD v0.4.0: Linux KASLR Derandomization with 120 Leak Components by ϻг_ϻε.

Updated Linux KASLR derandomization tool adds 18 new leak components (120 total) and introduces certainty ratings to distinguish proven values from heuristic guesses.

• macOS-to-iOS: Run macOS Binaries on iOS by Csaba Fitzl.

Automated tool that rewrites architecture information and adjusts library paths to run macOS command-line binaries on iOS, including DYLD shared cache extraction.

• REcon 2026 Talk Videos Published by Csaba Fitzl.

REcon 2026 conference recordings are being published on YouTube, with more talks pending speaker confirmation.