Blog yazıları

Güvenlik araştırma bloglarından teknik yazılar ve writeup'lar.

Yazı Kaynak Tarih

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it.

Microsoft Security 31 Ekim 2026

“Black October” for AI Developer Platforms A series of agentic attacks on AI Developer Platforms has been leading to LLMJacking at scale.

Wiz Research 30 Ekim 2026

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos.

Microsoft Security 30 Ekim 2026

Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace Cursor removed a malicious Claude Code 2.1.313 extension from its marketplace. Socket examines registry records and the initial claims about its distribution.

Socket 30 Ekim 2026

Tracking AI adoption in North Korean threat actor tradecraft As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified North Korean threat actors expanding their use of AI with varying levels of adoption. This blog breaks down how North Korean threat actors are…

Microsoft Security 29 Ekim 2026

The Rise of Agentic Attacks: What They Look Like, and Where They're Headed AI agents are changing how attackers operate. Explore real-world cases of agentic attacks, learn how to identify their fingerprints, and discover what they mean for the future of cybersecurity.

Wiz Research 29 Ekim 2026

Cohere’s Qwen Story: Looks More Like Model Jaggedness Key findings On October 26, Cohere reported a puzzling incident involving Qwen3.8-Flash-Next, an open-weight model from Alibaba. The task was straightforward: write a detection rule for suspicious curl downloads followed by bash execution. Instead, the model produced a shell command that…

Check Point Research 29 Ekim 2026

A Journey into Claude's Sandbox What started as a question about Claude’s sandbox turned into a connected investigation of container internals, process memory, and authorization tokens. Bishop Fox researcher Chris Davis documents what Claude revealed, what it handed over, and what that means for defense in depth.

Bishop Fox 29 Ekim 2026

NIK C2: The new AI-enabled command-and-control framework Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”

Cisco Talos 29 Ekim 2026

How we detect frontier model misalignment OpenAI uses layered monitoring to detect frontier model misalignment and unauthorized agent behavior so responders can intervene before incidents escalate.

OpenAI 29 Ekim 2026

Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users Intango LTD · 111 extensions · ~2,187,000 users

Socket 29 Ekim 2026

Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder We reproduced CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js and other runtimes, and explain how to detect and remediate it.

Datadog Security Labs 29 Ekim 2026

Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain unauthorized access to affected systems to deploy KeyDrift.

Cisco Talos 28 Ekim 2026

Exploiting LLM prompt injection vulnerabilities Large language models (LLMs) are quickly becoming a standard component of any modern web application nowadays, powering everything from customer support chatbots to internal knowledge assistants. For us, security researchers, this opens a whole new attack surface to explore. In this article,…

Intigriti 28 Ekim 2026

Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Wallet Secrets Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Socket 27 Ekim 2026

Scalable Vector Grief I tested eight popular SVG sanitizers and bypassed six of them. In this post, I'll show you how a response header can run JavaScript in Firefox even when the response body is completely harmless XML.

PortSwigger Research 27 Ekim 2026

PHP2Shell: Exploitation Attempts and Remediation Trends Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.

Wiz Research 27 Ekim 2026

Tricks from the Past deployed via signed ChatGPT and Claude binaries Key Points Introduction Over the past two months, we have been tracking a campaign that abuses the popularity of AI tools such as ChatGPT and Claude to spread a custom malware chain we call Yoba. The attackers use fake GitHub projects that pretend to be AI desktop applications like GPT-5.6 Sol,…

Check Point Research 27 Ekim 2026

Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines Summary Project Zero compared two automated tools used by Google to find vulnerabilities in Chrome’s JavaScript engine, V8, on a regular basis. Fuzzilli is a generative JavaScript engine fuzzer and BigSleep is an LLM-based bug finding system. In the past six months, BigSleep found more…

Google Project Zero 27 Ekim 2026

Discovering and exploiting vulnerabilities in critical, real-world software with Claude Over the past few months, we’ve used an unreleased, internal research model to find critical vulnerabilities in some of the world’s most widely used software, such as browsers and operating systems. In this post, we share details of five attack chains, which led to remote code execution and other critical impacts with little to no user interaction.

Anthropic Frontier Red Team 27 Ekim 2026

The Pwn Request Reckoning: What Still Works Against GitHub Actions GitHub's 2026 Actions changes make pull_request_target attacks harder, but not impossible. Here's the residual attack surface and how to audit for it.

Wiz Research 26 Ekim 2026

Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles An automated campaign is planting secret-dumping workflows in every repository that stolen GitHub tokens can reach. It uses no C2 server, is actively evolving, and has been significantly disrupted by recent GitHub security improvements.

Wiz Research 25 Ekim 2026

Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.

Wiz Research 25 Ekim 2026

New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.

Socket 23 Ekim 2026

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks Microsoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote code loading, detections, and mitigations. The post Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks appeared first on…

Microsoft Security 23 Ekim 2026

Infostealer riding the AI Train Key Points Introduction Infostealers commonly target browser passwords, session cookies, and cryptocurrency wallets. This malware combines those established capabilities with dedicated collection routines for AI applications and development tools. Its targets include Claude, ChatGPT Desktop,…

Check Point Research 23 Ekim 2026

Securing our frontier model training environment OpenAI explains how we strengthened containment for frontier model training and evaluation, including offline environments and high-compute red-teaming.

OpenAI 23 Ekim 2026

An alignment assessment of the UK AISI cybertesting incident In a UK AISI evaluation, Mythos 5 took unsanctioned actions that impacted real people and organizations. In this post, we investigate these behaviors from Claude Mythos 5 further, to understand what they reveal about the model’s alignment.

Anthropic 23 Ekim 2026

EMudhra Intermediate CA Certificates Compromised Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide.

Unit 42 22 Ekim 2026

The Current Landscape of OAuth Attacks Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments.

Unit 42 22 Ekim 2026

ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors Wiz Research is tracking an ARTEX-using actor, overlapping with Storm-0940, across multiple targeted software vendors. Learn how the AI agent attacks Okta, Entra, and Cognito, and what it left behind in the logs.

Wiz Research 22 Ekim 2026

Red-Teaming OpenAI's Internal Agent Monitoring Systems

METR 22 Ekim 2026

LLMs are making formal software verification feasible at a much larger scale Claude formally proved security properties in the compiled code of 123 open-source libraries. Along the way, it found bugs that had eluded detection for years.

Anthropic Frontier Red Team 22 Ekim 2026

Understanding PHP2Shell: Everything you need to know about CVE-2026-109618 & CVE-2026-109619 PHP remains one of the most widely deployed server-side languages on the web. Estimates suggest it powers close to 70% of all websites, from small personal blogs to large-scale government services, banking platforms, and e-commerce applications. With such huge presence, any vulnerability in…

Intigriti 22 Ekim 2026

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse across Microsoft 365 environments.

Microsoft Security 21 Ekim 2026

Two critical RCEs in PHP core Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset.

Cisco Talos 21 Ekim 2026

“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities An investigation into a threat actor bypassing AI safety controls to coordinate credential theft, VoIP fraud planning, and database exfiltration. The post “Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities appeared first on…

Unit 42 21 Ekim 2026

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

Wiz Research 21 Ekim 2026

LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a credential stealer targeting browser, cloud and AI secrets as well as a dormant C2 capability.

Wiz Research 21 Ekim 2026

Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers Adversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed abuse of more than 25 legitimate platforms over the past year, exploiting the built-in trust of collaboration, file-sharing, payment and other services to reach their targets.

Cisco Talos 21 Ekim 2026

LiteLLM supply chain compromise: What you need to know Malicious releases of LiteLLM v1.107.0 were published to PyPI and container registries following multiple maintainer account compromises.

Datadog Security Labs 21 Ekim 2026

PHP2Shell - Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619): detection, analysis, and remediation Learn about the two critical vulnerabilities in PHP dubbed PHP2Shell.

Datadog Security Labs 21 Ekim 2026

Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257.

Unit 42 20 Ekim 2026

From Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage How a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of dollars incurred in unauthorized AI API usage

Wiz Research 20 Ekim 2026

The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations Key Findings Introduction Antidetect browsers conceal their users’ digital identities, enabling a single operator or small team to simultaneously run thousands of isolated accounts across multiple platforms such as Facebook, Instagram, TikTok, YouTube, Twitter/X, Discord, LinkedIn, Reddit, and…

Check Point Research 20 Ekim 2026

Introducing pathrunner: An AWS privilege escalation framework Introducing pathrunner, a modular, cloud-native offensive security framework that automates the exploitation of AWS IAM privilege escalation paths.

Datadog Security Labs 20 Ekim 2026

Using Claude to reduce the attack surface of code Automated attack surface analysis and reduction can meaningfully improve the security of deployed software in the near term. In this post, we preview data we’ve collected from applying attack surface reduction techniques to large open-source codebases using Claude.

Anthropic Frontier Red Team 20 Ekim 2026

Supply Chain Zero Days: Closing the Gap Between Publication and Detection When trusted packages are compromised, malicious code can quickly spread throughout and beyond developer environments. See how Wiz’s supply chain pipeline identifies compromised packages at publication, helping teams detect zero-day supply chain compromises in Wiz Defend before a CVE is published

Wiz Research 19 Ekim 2026

Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack Wiz CIRT responded to AI-driven attacks spanning cloud, Kubernetes, CI/CD, and identity. Learn how these attacks behave and how to detect them.

Wiz Research 19 Ekim 2026

Putting models to the secure coding test: Security rules We tested Sonnet 5, Composer 2.5, and GPT 5.5 using set security rules to see whether using them produces measurably more secure code.

Datadog Security Labs 19 Ekim 2026

AI-Powered Espionage Campaign Targets Government Linux Infrastructure Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft.

Unit 42 15 Ekim 2026

Jev as a judge: How counterfeit policy steers Jev We evaluate Jev's prompt injection detection and show how counterfeit classification policies can steer its decisions and bypass LangChain's tool-risk gating.

Datadog Security Labs 15 Ekim 2026

Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.

Unit 42 14 Ekim 2026

Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy.

Cisco Talos 14 Ekim 2026

The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastructure for large-scale phishing. In collaboration with law enforcement…

Microsoft Security 14 Ekim 2026

Package managers have an integrity problem <p>I tested 25 of the most popular package managers to check whether they detect a compromised package repository injecting malicious code into legitimate packages. This code integrity problem could be solved using cryptographic hashes or signatures, but many package managers are still…

Trail of Bits 14 Ekim 2026

The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk Unit 42 dissects a cyberattack targeting a European bank's IT infrastructure, delivering concrete defense strategies to help organizations detect and counter comparable threats.

Unit 42 13 Ekim 2026

When LLM Gateways Go Wrong: Findings from LiteLLM TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from a missing…

Check Point Research 13 Ekim 2026

Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113) A crafted link, one page load, and no clicks required. Bishop Fox found a reflected XSS in Siemens Teamcenter’s login redirect that auto-submits its own form, turning attribute injection into zero-interaction code execution and a silent surrogate delegation change on the victim’s account.

Bishop Fox 13 Ekim 2026

Playing It SFAPE: Code Execution in Isolated User Mode <p>It is tempting to think of Windows in terms of a simple model: user mode and kernel mode. If a bug lets a user-mode process gain control of the kernel, it’s game over.</p> <p>Well, for a long time it used to be like that. Protected processes, SMEP, PatchGuard and other mitigations surely…

Doyensec 12 Ekim 2026

Strengthening our defenses against distillation attacks Illicit distillation allows model developers to copy frontier AI capabilities without creating proportionally robust safeguards. Here, we describe how we’ve reduced the rate of distillation by more than 90%.

Anthropic 12 Ekim 2026

AI models may be capable of self-replicating without access to a datacenter Small AI models may be only months away from being able to self-replicate across cheap IoT devices like Android TV boxes, with no datacenter needed.

Anthropic Frontier Red Team 12 Ekim 2026

Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) Before we begin, yes - it's confusing. There are more vulnerabilities with watchTowr IDs in this blog post than there are CVE IDs (assigned by PaperCut), due to PaperCut bundling vulnerabilities and then patch bypasses for those same vulnerabilities into singular CVE IDs. Paper! It still…

watchTowr Labs 9 Ekim 2026

Chasing AMMYY at Splunk .conf Discover how Cisco's Encrypted Visibility Engine (EVE) and Endace PCAP uncovered Flawed AMMYY RAT traffic at Splunk .conf without breaking TLS encryption.

Cisco Security 8 Ekim 2026

UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing Cisco Talos identified an APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and impersonated reputable academic and policy institutions.

Cisco Talos 8 Ekim 2026

Disrupting AI-enabled “false front” operations OpenAI disrupted two AI-enabled influence operations that used false-front journalists and a think tank to spread geopolitical messaging.

OpenAI 8 Ekim 2026

Evolution of Web3 in Cloud Supply Chain Attacks Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud environments

Unit 42 7 Ekim 2026

3 lessons from frontier AI vulnerability research Read how How Microsoft Security's FORGE Lab is scaling vulnerability research from Windows to the Linux kernel.

Microsoft Security 7 Ekim 2026

The model isn't cooperating Have you ever felt like a model isn't actually trying to do what you asked? Did you just ask it wrong, or is there something else at play here? In this post, I'll briefly explore this phenomenon, the

PortSwigger Research 6 Ekim 2026

You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) Welcome back to yet another episode of "security was taken seriously". Being who we are (and constantly being exposed to what we see…), we recognize we have been doomed to eternal damnation as we keep on watching security best practices crumble behind “secure by design”

watchTowr Labs 6 Ekim 2026

Why the AI Attack Surface Extends Your Stack Integrating AI into enterprise applications creates risk across every layer of the stack, not just the model. This post maps the full AI attack surface, shows how a prompt injection can chain into credential theft and cross-tenant data exposure, and explains why isolated scanners miss most of it.

Bishop Fox 6 Ekim 2026

Blinder Tunnel Campaign Targets Iraqi Infrastructure Analysis of Blinder Tunnel, an Iran-nexus campaign using fake Dubai Airports recruitment lures and GitHub C2 malware to target critical infrastructure.

Unit 42 6 Ekim 2026

Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access In this post, we share LLM-specific validation patterns that attackers use to test exposed AWS credentials for Amazon Bedrock access.

Datadog Security Labs 6 Ekim 2026

Smashing the token limit with overlapping fragments I'm delighted to introduce Alex, my fellow swigger who I've collaborated with in the past with tools like DOM Invader. He showed me that it's possible to exfiltrate larger tokens than demonstrated in

PortSwigger Research 5 Ekim 2026

Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals We analyzed RBAC bindings across over 65,000 Kubernetes clusters to find dangerous permissions granted to system:anonymous, system:unauthenticated, and system:authenticated.

Datadog Security Labs 5 Ekim 2026

One Port to Root: Weaponizing Check Point Management CVE-2026-93616 An unauthenticated attacker who can reach TCP 19009 on a Check Point management server can take it over completely. Bishop Fox reproduced the full root RCE chain on R81.10 and R82.10, breaks down all three vulnerabilities the patch actually closes, and shares a safe detection tool for defenders.

Bishop Fox 1 Ekim 2026

Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30) Unit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exploited in the wild.

Unit 42 30 Eylül 2026

Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research AI-assisted research is flooding the CVE pipeline with bugs that score critical but depend on configurations almost nobody runs. Bishop Fox tested four high-profile Nginx CVEs in the lab, measured real-world prevalence, and explains how to separate actual risk from well-marketed noise.

Bishop Fox 30 Eylül 2026

Disrupting a coordinated model-distillation campaign Learn how OpenAI disrupted a campaign to extract protected model reasoning and is strengthening defenses against adversarial distillation.

OpenAI 30 Eylül 2026

Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) Part 1 of this week's saga can be found here. This research is a glimpse into the capabilities that power our Preemptive Exposure Management solution, enabling organizations to rapidly react to emerging threats: the  watchTowr Platform. What Is A Citrix NetScaler? NetScaler, from…

watchTowr Labs 29 Eylül 2026

Zilliz / Attu | 2.6.5 Two vulnerabilities in Zilliz Attu 2.6.5 chain into something serious. Missing authentication lets anyone proxy requests unauthenticated, and a regex bypass defeats the private IP block. Bishop Fox turned both into full Kubernetes namespace takeover in a cloud deployment. Update to 3.0.0 now.

Bishop Fox 29 Eylül 2026

The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub See how the Blue Agent investigated a multi-platform attack in minutes, following evidence across AWS and GitHub to uncover compromised credentials, stolen source code, and custom data exfiltration tooling

Wiz Research 29 Eylül 2026

OperTraitors: How Kubernetes Operators Betray Your Security Posture We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities.

Unit 42 29 Eylül 2026

GLM-5.3 and the spread of advanced cyber capabilities GLM-5.3 can autonomously build end-to-end cyber exploits, but unlike other frontier models, it was released without meaningful safeguards to limit misuse.

Anthropic Frontier Red Team 29 Eylül 2026

How we found 24 Android vulnerabilities using our open source AI security agent A look at the targeted AI taskflows behind these findings, the critical Android bugs they uncovered, and how to run the same open-source agent on your own app.

GitHub Security Lab 28 Eylül 2026

Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771) God damn it, we're back in the room again. Yes, that sound in your ears is screaming. The footgun has gone off again, shockingly, and we are yet again dealing with a situation where the entire world apparently knew about Citrix NetScaler CVEs before Citrix had woken up

watchTowr Labs 28 Eylül 2026

Implementing and Evaluating a Basic Per-Action Monitor for Safer Evals

METR 27 Eylül 2026

The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments Wiz Research analyzes NordStellar data to map the credentials targeted by infostealer families and assess their potential impact across cloud, code, and AI environments.

Wiz Research 25 Eylül 2026

Master Key Included: Detecting SolarWinds ARM CVE-2026-28326 A hardcoded authentication secret ships with every SolarWinds Access Rights Manager install, and reaching TCP 55555 is enough to hit a .NET deserialization sink. Bishop Fox confirmed SYSTEM-level code execution, breaks down the root cause, and shares a safe detection tool for defenders.

Bishop Fox 25 Eylül 2026

Don't let TEEs break your MPC <p>Threshold signature schemes, a form of multi-party computation (MPC) that lets a set of parties sign together without any one of them holding the key, are increasingly deployed inside trusted execution environments (TEEs). The combination is intended to amplify security for sensitive…

Trail of Bits 25 Eylül 2026

AI-powered fuzzing with the GitHub Security Lab Taskflow Agent In this blog post, I explain how to use the new fuzzing taskflow based on the GitHub Security Lab Taskflow Agent AI framework.

GitHub Security Lab 24 Eylül 2026

Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications .NET MAUI lets developers write once and ship to both platforms. From an attacker's perspective, that means reverse-engineer once and break everywhere. This post walks through extracting readable assemblies from MAUI apps and the high-impact vulnerability patterns that consistently appear.

Bishop Fox 24 Eylül 2026

Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4) Datadog Security Labs discovered GHSA-632h-h47v-g4x4, a vulnerability in OpenCode's upgrade endpoint that, under certain conditions, allowed malicious webpages to execute code on developers' machines.

Datadog Security Labs 24 Eylül 2026

Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127) Well, well, well, well, well, well, well, well, well, well, well, well, well, well, well. We're back. Sorry. We've been watching the onslaught of vulnerabilities flood the internet. Every man, dog, and their grandmas (apparently?) are now using LLMs to find and reproduce…

watchTowr Labs 23 Eylül 2026

One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts <h2 id="tldr">TL;DR</h2> <p>While testing deep links in Chrome for iOS, we noticed a small but important difference. Opening a third-party app through a custom URL scheme normally produced a confirmation prompt. Shortcuts were an exception. As they’re handled by a native Apple app, Chrome…

Doyensec 23 Eylül 2026

HTTP/3 in Burp Suite - it’s time to find a bigger wordlist How many bugs have you missed because you didn’t send quite enough HTTP requests? Turbo Intruder now supports HTTP/3, can comfortably exceed 100,000 requests per second over Wi-Fi, and auto-tunes for

PortSwigger Research 23 Eylül 2026

How to use Gemini CLI for Bug Bounty research: analyse evidence, validate manually

YesWeHack 23 Eylül 2026

SAML: A fractal of bad design <p>Born out of academia and raised in corporate IT departments, the Security Assertion Markup Language (SAML) authentication protocol continues to be a staple in these organizations. However, it’s time for it to retire. With the rise of software-as-a-service (SaaS) companies in the late…

Trail of Bits 21 Eylül 2026

Windows Exploitation Techniques: Dangling COM Object Registrations This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in Windows, CVE-2026-66804, that I and 14 others reported. This issue is an incomplete fix for CVE-2026-50343, a bug dubbed “Dark Elevator” by Calif. The root cause of the bug was a dangling COM object…

Google Project Zero 21 Eylül 2026

From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion Forking an existing C2 agent sounds faster than building from scratch. Bishop Fox learned otherwise. This post documents what happened when they forked Apollo, built a 16-pass obfuscation pipeline to defeat EDR detection, and spent months fighting an architecture never designed for it.

Bishop Fox 18 Eylül 2026

Auditing in the age of (good enough) AI <p>Security firms have published numerous blog posts describing how they pointed their agent harness at a codebase and found dozens of bugs (<a href="https://blog.trailofbits.com/tags/patch-the-planet/">we’re one of them</a>). However, these posts tend to focus on agentic code review, which is…

Trail of Bits 18 Eylül 2026

Attacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms In this post, we examine two vibe-coded credential harvesting platforms, Loot and UltraVault, and the Amazon Bedrock abuse used to validate stolen secrets.

Datadog Security Labs 18 Eylül 2026

Exploring the new AWS Sign Up experience This post will explore what this new concept does, how it works with the new Account Access capability, and why a strong security posture still requires upgrading out of the sandbox.

Wiz Research 17 Eylül 2026

Building an AI Detection Engine That Understands Agent Intent Analyzing model input and output logs in an AI-native detection pipeline to understand and uncover malicious AI agent behavior

Wiz Research 17 Eylül 2026

MikroTrick: Inside the RouterOS Takeover Chain Attackers were exploiting MikroTik routers before fixes went public. Bishop Fox reproduced the full unauthenticated takeover chain, found persistence artifacts on real compromised devices, and breaks down what defenders need to investigate beyond patching to confirm they are actually clean.

Bishop Fox 17 Eylül 2026

Cache key injection: Smuggling poison through the door

YesWeHack 17 Eylül 2026

The skb that wasn't freed - the Fragnesia primitive via Open vSwitch <p><strong>TLDR:</strong> <a href="https://github.com/doyensec/ovs-pagecache-write">Exploit</a>. <strong>This is a deterministic local privilege escalation affecting the default install of the latest Arch, Fedora, Debian, Amazon Linux and RHEL distributions, having unprivileged user namespaces…

Doyensec 16 Eylül 2026

Mapping out your unknown: A threat hunter’s guide to GitHub In this post, we walk through different threats to GitHub and how to detect them.

Datadog Security Labs 16 Eylül 2026

Multiple Vulnerabilities in Frappe LMS Leading to Remote Code Execution

Rhino Security Labs 15 Eylül 2026

1Password's AI patching benchmark is misleading <p>1Password’s <a href="https://1password.com/blog/why-ai-generated-patches-still-require-human-review">FLAWED report</a>, published on August 6, 2026, gives defenders a misleading picture of AI patching. Its headline says models produced clean fixes only 26% of the time. That figure includes…

Trail of Bits 15 Eylül 2026

CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key A misconfigured cluster join key in JFrog Artifactory's default install lets unauthenticated attackers mint a permanent admin token in one request. Bishop Fox reproduced the full chain, confirmed in-the-wild exploitation, and shares a non-invasive detection check and remediation guidance.

Bishop Fox 11 Eylül 2026

Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 Wiz Research has identified active, in-the-wild exploitation of three critical and high-severity vulnerabilities impacting JFrog Artifactory (CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329). Attackers are chaining these vulnerabilities to bypass authentication and gain administrative control.

Wiz Research 10 Eylül 2026

PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector Executive Summary In this research we introduce a prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A policy-violating payload (e.g. ”encrypt files in ~/Documents”, “give me a biohazard recipe”, “ignore all…

Check Point Research 10 Eylül 2026

Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 A single unauthenticated request bypasses authentication on NetScaler Gateway and AAA virtual servers. Whether that means a dead-end session, a proxy into the internal network, or root on the appliance depends entirely on configuration. Bishop Fox maps every branch and shares a safe detection tool.

Bishop Fox 10 Eylül 2026

How to hack APIs in 2026 Five years is a long time in API security Back in 2021 I wrote a guide on hacking APIs with Farah Hawa. It did well, ...

Detectify Labs 10 Eylül 2026

Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability <h3 id="change-of-plan">Change of Plan</h3> <p>9+ months. One unresolved vulnerability. One disclosure published today.</p> <p>Following a last-minute request from the affected vendor, we’ve temporarily taken the technical details offline and agreed to provide one final, limited window for…

Doyensec 9 Eylül 2026

Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise How default keys, unauthenticated MCP sessions, and custom code guardrails expose cloud AI infrastructure to root-level remote code execution and IAM theft.

Wiz Research 9 Eylül 2026

CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap

YesWeHack 9 Eylül 2026

An alignment assessment of recent cybersecurity incidents We present an alignment assessment of four incidents in which Claude models gained unauthorized access to real third-party systems.

Anthropic 9 Eylül 2026

The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT Research by: Alexey Bukhteyev Key Takeaways Introduction Over the past several years, AI assistants have moved far beyond text generation. Modern systems can execute code, install additional dependencies, analyze user files, and access data through connected services. These capabilities…

Check Point Research 8 Eylül 2026

Testing race conditions with memory access tracing and stack-based delay injection Many security bugs are race conditions, where multi-threaded execution has to occur with the right interleaving for a negative effect to appear. This creates challenges for several use cases: Confirming bug candidates that have been discovered manually or through static analysis. Regression…

Google Project Zero 8 Eylül 2026

Signature Optional - Analysis of CVE-2026-28323 SolarWinds Web Help Desk treated SAML signature verification as optional and skipped every other validation the spec requires. Bishop Fox confirmed the full exploit end to end: one forged POST request, no credentials, full session takeover. Here is the root cause, the fix, and how to detect it.

Bishop Fox 3 Eylül 2026

How to use Codex for Bug Bounty research: explore broadly, validate rigorously

YesWeHack 3 Eylül 2026

Hacking AI customer service agents As AI agents are deployed to automate more tasks, they become more capable. And as the famous quote goes: "With great power comes great responsibility." Assuming that humans in the loop can mitigate that risk turns out to be. At Bug Bounty Village during DEF CON 34, Inti De Ceukelaire, Founding…

Intigriti 2 Eylül 2026

Traefik | Version Through 3.7.11 Traefik's request read timeout is enabled by default and documented without exception, but it has never applied to HTTP/3. Bishop Fox confirmed the gap across four years of releases, measured it against the backend, and reported it to the vendor, who shipped a fix within twelve days.

Bishop Fox 31 Ağustos 2026

Password spraying campaign targets AWS root user accounts across 150+ organizations Datadog Security Research observed a password spraying campaign attempting to authenticate as the AWS root user across more than 150 organizations.

Datadog Security Labs 31 Ağustos 2026

Inside 90 days of attacks on AI infrastructure Wiz honeypots uncover active campaigns targeting LiteLLM, MCP servers, and AI frameworks through RCE, blind prompt injection, and memory credential theft.

Wiz Research 27 Ağustos 2026

Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps A practitioner’s guide to log visibility, incident readiness, and threat hunting across the major version control services.

Wiz Research 27 Ağustos 2026

A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console Two critical vulnerabilities in Veeam Service Provider Console chain into unauthenticated remote code execution on the management server sitting above every tenant's backups. Bishop Fox confirmed the full chain end to end, breaks down both root causes, and shares a safe detection tool and IOCs.

Bishop Fox 26 Ağustos 2026

VMs won't contain cyber-capable agents <p>As part of <a href="https://trailofbits.com/patch-the-planet">Patch the Planet</a>, we received preview access to <a href="https://openai.com/index/expanding-daybreak-as-the-cyber-defense-window-narrows/">GPT 5.6-Cyber</a> with a simple task: evaluate its cyber capabilities. <a…

Trail of Bits 26 Ağustos 2026

Dojo challenge #53 Hacker Club solution

YesWeHack 26 Ağustos 2026

Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident Core takeaways about this incident

METR 26 Ağustos 2026

The Hugging Face incident and the road ahead OpenAI shares findings from the Hugging Face security incident and the steps we’re taking to strengthen AI model security, monitoring, and alignment.

OpenAI 26 Ağustos 2026

What's in a tag name? JavaScript, apparently I was on my laptop, as I often am when there's rubbish on telly, and found myself wondering what characters are allowed in a tag. I knew they had to begin with "a-zA-Z", but what about after that? I t

PortSwigger Research 25 Ağustos 2026

State divergence enables unauthorized access <p>We found and reported a bug in Provenance Blockchain, a public proof-of-stake chain built on <a href="https://docs.cosmos.network/">Cosmos SDK</a>, that lets any user grant themselves admin control over marker accounts without holding a single token. Provenance covers a range of financial…

Trail of Bits 25 Ağustos 2026

Disrupting a new covert influence campaign from Russia OpenAI banned Russia-origin accounts using AI to promote a fake Israel-based think tank and a “sovereignty” index praising Russia and criticizing the West.

OpenAI 25 Ağustos 2026

No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452 CVE-2026-8452 lets an unauthenticated attacker corrupt memory in Citrix NetScaler's SAML parser with a single request, potentially leading to remote code execution. Bishop Fox breaks down the patch, how to safely verify it across a fleet, and what exploitation actually looks like in the logs.

Bishop Fox 21 Ağustos 2026

Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns Malicious versions of the arrayref Rust crate (and others) executed a backdoor at compile time. The campaign's infrastructure overlaps with recent DPRK supply chain attacks, including Mastra and axios.

Wiz Research 20 Ağustos 2026

N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it Datadog Security Research executed a newer N4D Mesh Controller sample in isolated microVMs, uncovering rotated infrastructure, a UPX-packed go-titan agent, MCP tool abuse in action, and direct runtime evidence of multi-service scanning and persistence.

Datadog Security Labs 20 Ağustos 2026

Web fuzzing for hackers Fuzzing has been around for as long as web applications have. In fact, the term itself was coined back in 1988, when Barton Miller, a professor at the University of Wisconsin, was working over a dial-up connection during a thunderstorm and noticed that the resulting line noise was consistently…

Intigriti 20 Ağustos 2026

Putting models to the secure coding test: Plan vs default mode We tested Sonnet 5, Composer 2.5, and GPT 5.5 in plan mode and default mode to see whether plan mode produces measurably more secure code.

Datadog Security Labs 19 Ağustos 2026

How to Spot and Stop Rogue Device Joins Instead of leaving behind recognizable fingerprints from public tooling, adversaries can now generate realistic device names that blend naturally into enterprise environments. This blog explores how that changes Entra ID detection and what are the behavioral signals that still expose these attacks.

Wiz Research 18 Ağustos 2026

Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR Wiz Red Agent independently discovered and exploited a GitHub Actions injection missed by GitHub’s Advanced Security, validated access to sensitive data in Snowflake’s internal Jira, and assessed the blast radius—all without human intervention, five days after the flaw became live.

Wiz Research 17 Ağustos 2026

You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?)) Suddenly, you’re in a room. You look around - oh, you’re surrounded by other new starters at your new job. Yes, it’s Monday, and you’re being onboarded. You know the drill - it’s the typical enterprise “please don’t be

watchTowr Labs 14 Ağustos 2026

How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign A practical playbook for investigating GitHub token compromise, drawn from Wiz CIRT's response to a coordinated multi-organization campaign.

Wiz Research 13 Ağustos 2026

Critical SQL Injection in Metabase via Password Reset: CVE-2026-72898 Immediate action is advised for all organizations running self-hosted Metabase. A critical, unauthenticated SQL injection vulnerability has been disclosed in Metabase's password reset functionality, and Metabase has confirmed active exploitation in the wild.

Bishop Fox 11 Ağustos 2026

Inside the Metabase SQLi: Exploited in the Wild Reverse engineering Metabase CVE-2026-72898 with AI to accelerate defense.

Wiz Research 10 Ağustos 2026

CSS:the bomb inside your inbox Gareth Heyes - gareth.heyes@portswigger.net - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this

PortSwigger Research 6 Ağustos 2026

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

YesWeHack 6 Ağustos 2026

CRLF-Powered Desync Attacks: Beheading HTTP Streams Abstract In this paper we’ll show that HTTP Header Injection is severely underestimated. Forget open redirects or Cross-Site Scripting and instead, embrace the catastrophic potential of the CRLF-Power

PortSwigger Research 5 Ağustos 2026

Can AI do novel security research? Meet the HTTP Terminator Abstract We all know AI can find bugs. After a decade of research, I asked a harder question: can an autonomous system invent new attack techniques, and use them to hack live websites at scale? Buildi

PortSwigger Research 5 Ağustos 2026

Python Software Foundation - Python 3.11.0a3 to 3.15.0b2 Bishop Fox discovered a privilege escalation vulnerability in Python for Windows affecting versions 3.11.0a3 through 3.15.0b2. A low-privilege user can plant malicious files and wait for a privileged account to run the interpreter, inheriting that account's elevated access. Patches are available.

Bishop Fox 5 Ağustos 2026

A few notes on AWS Nitro Enclaves: KMS integration <p>Nitro Enclaves and <a href="https://blog.trailofbits.com/2024/02/14/cloud-cryptography-demystified-amazon-web-services/">Key Management Service</a> (KMS) feel like a natural fit: since the KMS can verify attestation documents generated by the enclaves, developers can offload key management…

Trail of Bits 5 Ağustos 2026

keyv and cacheable npm Package Hijacked in Supply Chain Attack Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages.

Wiz Research 4 Ağustos 2026

'ChainDrop' worm compromises hundreds of popular npm packages On August 4, 2026, several popular npm packages, including 'keyv', were compromised to deliver malware.

Datadog Security Labs 4 Ağustos 2026

Before the first prompt: Code execution paths in trusted coding-agent projects Learn how trusted coding-agent projects can execute repository-controlled code before the first prompt through Codex MCP configuration and Claude Code environment settings.

Datadog Security Labs 3 Ağustos 2026

S3 Clones in the Neoclouds S3 compatible services carry many of the same concerns as the original S3 service. This article highlights which assumptions break and what risks remain.

Wiz Research 31 Temmuz 2026

Disrupting a Cambodia-based criminal scam operation OpenAI disrupted a Cambodia-based scam operation using ChatGPT to support investment, romance, gambling, and impersonation schemes.

OpenAI 31 Temmuz 2026

Four Ways to Deploy More Secure AI Agents Knowledge workers are increasingly integrating AI agents into their workflows. Agents that function as "digital coworkers" offer clear benefits. For example,...

NVIDIA AI Red Team 30 Temmuz 2026

CosmosEscape: Taking Over Every Database in Azure Cosmos DB A critical vulnerability chain in Azure Cosmos DB enabled full read and write access to every Cosmos DB database.

Wiz Research 30 Temmuz 2026

Investigating three incidents in our cybersecurity evaluations We found three cases where a Claude model reached the internet from an evaluation environment and accessed real systems. We share what happened and what we're changing.

Anthropic 30 Temmuz 2026

Testing AI-powered systems at scale via Bug Bounty, part 3: the guardrails

YesWeHack 29 Temmuz 2026

The risk hiding behind exposed MCP servers How unauthenticated Model Context Protocol (MCP) servers are opening doors to sensitive cloud data, IAM, and command execution.

Wiz Research 28 Temmuz 2026

How we use /goal to find bugs in Patch the Planet <p>Codex’s <code>/goal</code> feature amplifies bug hunting, but getting good results requires the right prompt, the right scope, and the right number of outcomes per run. For <a href="https://trailofbits.com/patch-the-planet">Patch the Planet</a>, our joint initiative with OpenAI to find and…

Trail of Bits 28 Temmuz 2026

Discovering cryptographic weaknesses with Claude Anthropic researchers find weaknesses in cryptographic algorithms with Claude Mythos Preview

Anthropic Frontier Red Team 28 Temmuz 2026

Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym See how Wiz built Atlas, an autonomous AI system for vulnerability research that validates every finding with a real, working exploit.

Wiz Research 27 Temmuz 2026

Detection primitives for eBPF rootkits We analyze how VoidLink, LinkPro, and Atomic Arch abuse eBPF helpers to hide from defenders, and show how to detect them at load time, before they can act.

Datadog Security Labs 27 Temmuz 2026

Opening the Black Box: Agentless Threat Detection for Virtual Appliances Mapping appliances event logs to real-world campaigns: A step-by-step researcher’s guide to continuous agentless monitoring.

Wiz Research 22 Temmuz 2026

A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit ManageEngine's SSO ticket was just the millisecond wall-clock time at login, making unauthenticated account takeover theoretically possible. Bishop Fox confirmed the exploit end to end and breaks down why blind exploitation is still impractical and what defenders should do about it.

Bishop Fox 21 Temmuz 2026

OpenAI and Hugging Face partner to address security incident during model evaluation OpenAI and Hugging Face share early findings from a security incident during AI model evaluation, highlighting advanced cyber capabilities and lessons for defenders.

OpenAI 21 Temmuz 2026

Exploitation in the Wild of wp2shell Wiz Research has identified exploitation of "wp2shell", a critical pre-auth RCE vulnerability chain impacting WordPress Core (CVE-2026-63030 & CVE-2026-60137). Attackers are deploying persistent webshells on vulnerable servers. Organizations should prioritize patching or applying WAF mitigations.

Wiz Research 20 Temmuz 2026

Using MCP Agents for Penetration Testing AI agent harnesses are changing how penetration tests get executed. Bishop Fox used MCP agents across external, application, and cloud testing to surface two information leaks totaling over 12 million records in hours rather than days. Here is how the approach works and where it makes sense to use.

Bishop Fox 17 Temmuz 2026

How to use Claude Code for Bug Bounty: find fast, validate manually

YesWeHack 17 Temmuz 2026

The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System Part 3: How the Red Agent bypassed a credit and paywall system by changing a single client-side value from false to true.

Wiz Research 15 Temmuz 2026

GPT-Red: Unlocking Self-Improvement for Robustness Explore GPT-Red, OpenAI’s automated red teaming system that uses self-play to improve AI safety, alignment, and prompt injection robustness.

OpenAI 15 Temmuz 2026

Testing AI-powered systems at scale via Bug Bounty, part 2: AI-specific vulnerabilities

YesWeHack 15 Temmuz 2026

Introducing snowpick: Testing ServiceNow for Public Data Exposure ServiceNow portals can expose backend records through public widgets and API endpoints even when the visible portal looks locked down. Bishop Fox built snowpick to test both surfaces systematically, and across 166 authorized assessments, nearly a third of instances returned data they shouldn't have.

Bishop Fox 14 Temmuz 2026

M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions Detect and mitigate malicious @asyncapi npm packages linked to the latest npm supply chain attack.

Wiz Research 14 Temmuz 2026

Compromised AsyncAPI npm packages: inside a CI supply-chain attack On July 14, 2026, four npm packages in the @asyncapi namespace, totaling over 3 million weekly downloads, were compromised to deliver credential-stealing malware. We investigate how the attack unfolded and how to know if you're affected.

Datadog Security Labs 14 Temmuz 2026

GenAI and Agentic AI Exploit Roundup Q2 2026 April 1 through June 30 2026 Overview Six selected cases show how AI integrations, coding tools, and browser agents can turn ordinary inputs or delegated access into security exposure. Defenders should constrain tool execution and credentials, preserve input provenance, and monitor the actions…

OWASP GenAI 9 Temmuz 2026

Not-so-anonymous telemetry: The @injectivelabs/sdk-ts backdoor A malicious commit disguised as SDK telemetry briefly compromised @injectivelabs/sdk-ts, exfiltrating wallet mnemonics and private keys.

Datadog Security Labs 9 Temmuz 2026

GhostApproval: A Trust Boundary Gap in AI Coding Assistants Uncovering a category-level blind spot in modern AI coding assistants, and why the Human-in-the-Loop safety model fails against this classic threat

Wiz Research 8 Temmuz 2026

Cracking Firmware with Claude: Senior-Level Skill, Junior-Level Autonomy A senior Bishop Fox researcher once cracked SonicWall's proprietary firmware encryption by hand. We gave Claude the same problem, two artifacts, one instruction, and mostly got out of the way. What happened next reveals something important about where AI-assisted security research is heading.

Bishop Fox 8 Temmuz 2026

Coordinated GitHub API enumeration and access token abuse Datadog Security Research has tracked multiple coordinated campaigns enumerating GitHub organizations, repositories, and users through the public GitHub API, abusing leaked access tokens, and cloning private repositories.

Datadog Security Labs 8 Temmuz 2026

An off switch for dual-use knowledge New results on a method of controlling access to potentially dangerous AI capabilities

Anthropic 8 Temmuz 2026

Entra Agent ID: Protect, detect, respond This post continues and concludes our series on Agent ID, by outlining steps that an administrator or security team can take to secure blueprints and agent identities created in their local Entra ID tenant.

Datadog Security Labs 6 Temmuz 2026

It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza) We’re back, melting - we’ve tried shouting, screaming, and throwing things at the Sun, and it is just not working. Before we begin our analysis, we want to be clear - given the number of vulnerabilities fixed (and some not mentioned..), we’ve struggled to have confidence

watchTowr Labs 2 Temmuz 2026

GPT-5.5-Cyber built a zlib fuzzing lab in a day <p>We’re running <a href="https://trailofbits.com/patch-the-planet">Patch the Planet</a>, an ongoing collaboration with OpenAI that pairs Trail of Bits engineers directly with more than 30 open-source projects. Its goal is to front-run a serious problem facing open-source maintainers: highly…

Trail of Bits 2 Temmuz 2026

Fable 5's cyber safeguards and our jailbreak framework What is and isn't blocked by our cyber classifiers, and a first draft of our jailbreak severity framework

Anthropic 2 Temmuz 2026

Don’t eat the ChocoPoCs! How vulnerability researchers were repeatedly targeted by trojanised exploits

YesWeHack 1 Temmuz 2026

CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) Well, well, well - once again, the cat has dragged us in and spat us out. Today, we find ourselves questioning the reality we sit within. Must it be so predictable, and why us? “But watchTowr, what do you mean?” Well, if you’re here, you likely fit

watchTowr Labs 30 Haziran 2026

Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) Welcome back to another watchTowr Labs blog post. This time, we're looking at Progress Kemp LoadMaster, a load balancer that sits at the edge of a lot of enterprise networks. Edge appliances have a habit of becoming the way in rather than the thing keeping people out, and

watchTowr Labs 29 Haziran 2026

The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes

Wiz Research 29 Haziran 2026

Exploiting insecure cookie policies Cookies are one of the most fundamental building blocks of the modern web, and yet they are often overlooked from a security perspective. When misconfigured, they can potentially lead to exposure of sensitive session data, enable several client-side attacks, and in severe cases, even allow…

Intigriti 27 Haziran 2026

MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension By automatically loading MCP servers from workspace files, Amazon Q enabled attackers to execute code and access sensitive cloud environments.

Wiz Research 26 Haziran 2026

AI Finds Vulnerabilities. Security Experts Find Impact. AI got a security consultant 80% of the way through a real web application assessment. The other 20% was where the actual security work happened. This walkthrough shows where AI delivered, where it produced confident but impossible explanations, and why human judgment still drives real findings.

Bishop Fox 24 Haziran 2026

Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond Datadog Security Research investigates a June 2026 adversary-in-the-middle phishing campaign that cloned the AWS console login page to harvest victim credentials and multi-factor authentication codes.

Datadog Security Labs 24 Haziran 2026

Exploiting web cache poisoning vulnerabilities Web (or HTTP) caching is a highly adopted practice to effectively optimize web page loading times for clients. However, as with most technologies, when incorrectly implemented, it may open up a new exploitable attack surface for us to look into. In this article, we'll cover what web cache…

Intigriti 24 Haziran 2026

Detecting the Klue supply chain attack in Salesforce instances We summarize the Klue supply chain attack and provide detection guidance for Salesforce environments monitored by Datadog Cloud SIEM.

Datadog Security Labs 22 Haziran 2026

Shynet | VERSION 0.13.1 The following document describes identified vulnerabilities in the Shynet application version 0.13.1.

Bishop Fox 18 Haziran 2026

Entra Agent ID: Inside a cross-tenant agent compromise Continuing our Agent ID series, this post demonstrates how a privileged agent could be compromised through its third-party blueprint. This leads to a cross-tenant incident similar to Midnight Blizzard, since an attacker with control over an agent blueprint can authenticate as any agent…

Datadog Security Labs 18 Haziran 2026

The Red Agent POV: How it Reasoned its Way to SSRF Part 1: How the Red Agent uncovered a multi-step attack chain allowing SSRF-to-Local-File-Read on a GCP Cloud Run API

Wiz Research 17 Haziran 2026

A Crash, Not a Shell: SolarWinds Serv-U CVE-2026-28318 A single unauthenticated request can kill SolarWinds Serv-U, and the heap corruption underneath it looked like it could be more. Bishop Fox chased three separate roads to remote code execution and hit a wall on every one. Here is what we found, why it matters, and how to detect exposure safely.

Bishop Fox 16 Haziran 2026

Mapping out your unknown: A threat hunter’s guide to Salesforce In this post, we walk through different threats to Salesforce and how to detect them.

Datadog Security Labs 16 Haziran 2026

‘I found a CSRF and could deploy code through an enterprise’s App Store account’: yassine_eal’s Bug Bounty story

YesWeHack 15 Haziran 2026

Holding blobs for ransom: Four methods for Azure Storage ransomware This post explores four vectors for threat actors to abuse Azure Storage to maliciously encrypt victim blobs, including step-by-step explanations and event codes for detection.

Datadog Security Labs 15 Haziran 2026

Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) Three posts? In three days? Are we insane? We're home alone, there's no one to stop us, and we're up past bedtime. So, we need to talk about Splunk. On June 10th, Splunk published this CVE-2026-20253 advisory : It has everything that we

watchTowr Labs 12 Haziran 2026

CVE-2026-48907: Unauthenticated RCE in the Joomla Content Editor extension

YesWeHack 12 Haziran 2026

Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751) It is yet another day in this parallel universe of security, where the devices we bolt onto the edge of our networks to keep the bad people out are, with remarkable consistency, the exact thing that let the bad people in. While we’ve seemingly had a breather from

watchTowr Labs 12 Haziran 2026

Entra Agent ID: The blueprint blast radius Entra Agent ID is an extension of Entra's application model that provides identities for AI agents. Unlike applications, the agent identity model allows linking a single app registration (blueprint) to multiple identities and their associated privileges, increasing the potential blast radius of…

Datadog Security Labs 11 Haziran 2026

PRC-linked influence operations are targeting AI debates in the US A new report from OpenAI details PRC-linked influence operations using AI to target U.S. tech debates, data center narratives, tariffs, and false claims about ChatGPT.

OpenAI 10 Haziran 2026

More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520) Today, Ivanti published an advisory. “No way?” we hear you say. "Yes way!" Today’s advisory outlines two vulnerabilities in Ivanti’s Sentry product, appealing directly to our inner desire for sophisticated server-side, pre-authenticated vulnerabilities. CVE-2026-10520…

watchTowr Labs 10 Haziran 2026

Mythos Doesn't Deploy Itself AI is raising the ceiling for skilled researchers and flooding bug bounty programs with polished but inaccurate submissions at the same time. Both things are true, and the reconciling variable is the harness built around the model and the expertise of the person driving it.

Bishop Fox 9 Haziran 2026

Measuring LLMs' impact on N-day exploits N-days are disclosed but unpatched vulnerabilities. We evaluate how much large language models can accelerate and automate N-day exploit development.

Anthropic Frontier Red Team 8 Haziran 2026

Popping Root on UniFi OS Server: Unauthenticated RCE Chain Detection & Analysis A three-part vulnerability chain in UniFi OS Server lets an unauthenticated attacker bypass the auth gateway, hit a command injection sink, and escalate to root in a single request. Bishop Fox confirmed the chain end to end and breaks down the attack, the impact, and how to detect it safely.

Bishop Fox 5 Haziran 2026

Otto Support - Testing MCP Servers MCP servers introduce a new attack surface, but the security fundamentals are familiar. In this final otto-support post, we use nmap, a Nuclei template, and MCP Inspector to discover, enumerate, and exploit an authorization gap without ever touching an LLM.

Bishop Fox 3 Haziran 2026

Mapping AI-enabled cyber threats A new analysis maps a year of real-world AI-enabled cyberattacks onto the MITRE ATT&CK framework to show how threat actors are weaponizing AI.

Anthropic Frontier Red Team 3 Haziran 2026

Miasma: Supply Chain Attack Targeting RedHat npm Packages Detect and mitigate malicious npm packages linked to the latest npm supply chain attack, based on the open sourced Mini Shai-Hulud malware.

Wiz Research 1 Haziran 2026

“Data Center Bandwagon” Campaign: US-targeted influence activity OpenAI banned a likely PRC-origin cluster using AI to generate social media content criticizing US data centers and AI infrastructure.

OpenAI 1 Haziran 2026

“Tech and Tariffs” Campaign: Influence activity targeting US tech policy OpenAI banned likely PRC-origin accounts using AI to create comments and cartoons about US tech policy, tariffs, and trade restrictions.

OpenAI 1 Haziran 2026

Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557 A CVSS 10.0 path traversal in UniFi Network Application lets unauthenticated attackers read controller backups, extract credentials, and take over every managed device on the network. Bishop Fox breaks down the attack paths, the preconditions, and a safe detection tool to check your exposure.

Bishop Fox 29 Mayıs 2026

Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure Wiz CIRT and Wiz Research detail JINX-0164, a threat actor using LinkedIn social engineering, custom macOS malware, and CI/CD hijacking to target cryptocurrency organizations.

Wiz Research 27 Mayıs 2026

Comparing AI Application Security Testing Platforms <p>Doyensec performed a side-by-side comparison of two leading AI-powered penetration testing platforms: <a href="https://www.aikido.dev/attack/aipentest">Aikido’s Attack AI Pentest</a> and <a href="https://xbow.com/">XBOW’s Lightspeed</a> in order to evaluate their abilities to properly…

Doyensec 26 Mayıs 2026

Sparkplug B Protocol Fuzzing with AI Assistance Sparkplug B is the dominant protocol in ICS and SCADA environments, but no public security fuzzer existed for it until now. Bishop Fox used AI-assisted development to build one from scratch, covering all 9 message types, 19 data types, and 87+ field paths from the full specification.

Bishop Fox 26 Mayıs 2026

How we contain Claude across products As agents grow more capable, so does their potential blast radius. Here's what we learned building containment for claude.ai, Claude Code, and Cowork.

Anthropic 25 Mayıs 2026

Navigating Lax Load Balancers: When an Intersection Gets You Inside <p>After our last episode on <a href="https://blog.doyensec.com/2026/05/05/cloudsectidbits-masso-cognito-sso.html" target="_blank">Multi-SSO Cognito User Pools</a>, we are back with another issue. This time, we are looking at one of those AWS components that is everywhere and rarely questioned…

Doyensec 24 Mayıs 2026

Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass CVE-2026-0265 lets unauthenticated attackers forge a JWT and log in as any trusted user on CAS-enabled PAN-OS deployments. Bishop Fox built a detection tool that returns a definitive verdict from a single anonymous request, and breaks down exactly how the bug works and what to do about it.

Bishop Fox 22 Mayıs 2026

CVE-2026-9082: PostgreSQL SQL Injection in Drupal

YesWeHack 22 Mayıs 2026

CVE-2026-27886: Unauthenticated Boolean-Oracle Exfiltration of Administrator Secrets in Strapi A sanitization bypass in Strapi 4.0.0 through 5.36.1 lets unauthenticated attackers extract an admin's password reset token character by character and take over the account. With over 20,000 internet-facing hosts exposed, Bishop Fox breaks down how the exploit works and how to remediate it.

Bishop Fox 22 Mayıs 2026

Measuring LLMs’ ability to develop exploits Two new academic benchmarks measure AI models' ability to develop exploits, plus an updated benchmark for smart contract exploitation.

Anthropic Frontier Red Team 22 Mayıs 2026

durabletask: TeamPCP's Latest PyPi Compromise Discover the latest on malicious versions of the pypi package durabletask, matching TeamPCP tactics.

Wiz Research 19 Mayıs 2026

The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave Multi-ecosystem supply chain compromise by TeamPCP targets GitHub, NPM, and VSCode to steal credentials and establish persistence.

Wiz Research 19 Mayıs 2026

When Filenames Become Attack Surfaces: Weaponizing NASA's CFITSIO Extended Filename Syntax <p>This research was recently presented at <a href="https://pretalx.com/bsidesluxembourg-2026/talk/WDFHHV/">BSides Luxembourg 2026</a>. This blogpost documents our findings presented during the talk. The BSides slides are posted <a…

Doyensec 18 Mayıs 2026

Otto Support - Logging and Visibility in MCP Servers If any of the MCP attack classes in this series happened in your environment today, would you detect it? Most MCP servers log only a tool name and a timestamp. This post walks through what that gap looks like in practice, how EchoLeak exploited it, and what proper audit logging actually requires.

Bishop Fox 14 Mayıs 2026

Memory Is a Feature. It Is Also an Attack Surface As co-lead of OWASP ASI06: Memory & Context Poisoning entry as part of OWASP Top 10 for Agentic Applications , I have spent a lot of time thinking about a simple question: what happens when an AI agent does not just process untrusted input, but carries it forward? That is the core issue behind…

OWASP GenAI 14 Mayıs 2026

Otto-Support - Supply Chain Risks in MCP Servers What if the MCP server itself is the attacker? Supply chain risk in MCP tools is structural, and the postmark-mcp and ClawHub compromises made it concrete. This post pairs those case studies with otto-support's selfpwn module to show exactly what a hostile MCP server can access the moment it runs.

Bishop Fox 13 Mayıs 2026

Fragnesia: Linux Kernel Local Privilege Escalation via ESP-in-TCP A new page-cache corruption vulnerability in the Dirty Frag family enables unprivileged local attackers to achieve root

Wiz Research 13 Mayıs 2026

A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits. The Dolby 0-click vulnerability existed across all of Android, until it was patched in January 2026. While we had an exploit…

Google Project Zero 13 Mayıs 2026

Our response to the TanStack npm supply chain attack OpenAI details its response to the TanStack “Mini Shai-Hulud” supply chain attack, outlines protections taken to secure systems and signing certificates, and explains why macOS users must update OpenAI apps by June 12, 2026. Learn what happened, what was affected, and how OpenAI is strengthening…

OpenAI 13 Mayıs 2026

Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised Detect and mitigate malicious npm packages linked to the latest Mini Shai-Hulud supply chain campaign targeting high-value developer tooling.

Wiz Research 12 Mayıs 2026

Improving Bash Generation in Small Language Models with Grammar-Constrained Decoding Bash is one of the most flexible and powerful interfaces exposed to AI agents. In the right system, a model that emits grep, curl, tar, or a shell pipeline is...

NVIDIA AI Red Team 8 Mayıs 2026

Otto Support - The Confused Deputy When an agent reads attacker-controlled content and acts on it using its own privileges, the user's name ends up on every audit log entry. From Microsoft Copilot to ConfusedPilot, this post walks through how confused deputy attacks work and the layered controls that help contain them.

Bishop Fox 8 Mayıs 2026

Dirty Frag: Linux Kernel Local Privilege Escalation via ESP and RxRPC Unpatched kernel flaw chain (CVE-2026-43284, CVE-2026-43500) enables root escalation on major Linux distributions.

Wiz Research 8 Mayıs 2026

Otto Support - SSRF and Token Passthrough with MCP SSRF and token passthrough are not new, but MCP servers are reintroducing them at scale. From a chained SSRF-to-RCE in mcp-atlassian to Microsoft's MarkItDown and OpenClaw, this post walks through three recent disclosures and the controls that actually prevent them.

Bishop Fox 7 Mayıs 2026

The Jenkins Threat Landscape What usage patterns, plugin adoption, and configuration choices reveal about the Jenkins attack surface.

Wiz Research 6 Mayıs 2026

CVE-2026-42208: Pre-Authentication SQL Injection in LiteLLM Proxy Bishop Fox researchers confirmed a critical pre-authentication SQL injection in LiteLLM proxy affecting versions 1.81.16 through 1.83.6. Attackers can exploit it without credentials, and it blends into normal logs. In-the-wild exploitation was observed within 36 hours of the advisory going public.

Bishop Fox 6 Mayıs 2026

Otto Support - Excessive Agency and Tool Privileges AI agents connected to too many tools don't just create risk, they've already caused real damage. From deleted databases to mass-wiped mailboxes, excessive agency has a track record. This post breaks down what it looks like in practice and how role-aware tool registration can help contain it.

Bishop Fox 6 Mayıs 2026

Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild Detect and mitigate CVE-2026-0300, a critical vulnerability in Palo Alto Networks PAN-OS User-ID Authentication Portal that allows unauthenticated attackers to achieve remote code execution (RCE) with root privileges.

Wiz Research 6 Mayıs 2026

The Danger of Multi-SSO AWS Cognito User Pools <p>After a small detour, the <strong>CloudSecTidbits</strong> series is back with new episodes. We had the opportunity to present them at the first <a href="https://defcon.org/html/defcon-singapore/dc-singapore-index.html" target="_blank">DEFCON</a> in Singapore few days ago during our <a…

Doyensec 4 Mayıs 2026

Copy Fail: Universal Linux Local Privilege Escalation Vulnerability Detect and mitigate Copy Fail (CVE-2026-31431), an easily exploitable vulnerability in the Linux kernel that allows escalation from an unprivileged local user account to root access.

Wiz Research 1 Mayıs 2026

The (In)security Landscape of AI-Powered GitHub Actions (Part 2/2) When AI meets CI/CD: permission bypasses, prompt injection, and what to do about it.

Wiz Research 30 Nisan 2026

The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940) Hello! Yes, it's all a disaster again! Let's get this party started: No comments today, so imagine this: We wrote something that we find very funny, Nobody else gets it, But everyone humors us Just like a typical watchTowr Labs blog introduction. As with all watchTowr

watchTowr Labs 29 Nisan 2026

Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware Detect and mitigate malicious npm packages linked to the recent Shai-Hulud-style campaign - Mini Shai Hulud.

Wiz Research 29 Nisan 2026

Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854) Details on CVE-2026-3854: A critical flaw in GitHub’s internal git infrastructure enabling RCE on GitHub.com and GitHub Enterprise Server.

Wiz Research 28 Nisan 2026

AI threats in the wild: The current state of prompt injections on the web <span class="byline-author">Posted by Thomas Brunner, Yu-Han Liu, Moni Pande</span><div><br /></div><div><span id="docs-internal-guid-49e83394-7fff-3df2-a974-c7291d12beb8"><p dir="ltr" style="line-height: 1.38; margin-bottom: 10pt; margin-top: 0pt;"><span face="Roboto, sans-serif"…

Google Security Blog 23 Nisan 2026

Context.ai OAuth Token Compromise Compromised Context.ai OAuth tokens enabled attackers to perform a supply chain attack via trusted SaaS integrations. Learn how to assess the risk in your environment and how to prevent the next attack.

Wiz Research 20 Nisan 2026

Mitigating Indirect AGENTS.md Injection Attacks in Agentic Environments AI tools are significantly accelerating software development and changing how developers work with code. These tools serve as real-time copilots, automating...

NVIDIA AI Red Team 20 Nisan 2026

CFITSIO Fuzzing: Memory Corruptions and a Codex-Assisted Pipeline <p>Have you ever wondered how those amazing space photos are taken? Are they exclusive to the big telescopes floating in space or can you take one from your backyard? What does it take to extract hydrogen colors out of a seemingly black sky?</p> <p> <center><img…

Doyensec 19 Nisan 2026

How to Harden GitHub Actions: An Updated Guide Build resilient GitHub Actions workflows with lessons from recent attacks like TeamPCP and Axios.

Wiz Research 15 Nisan 2026

OWASP GenAI Exploit Round-up Report Q1 2026 OWASP GenAI Exploit Round-up Report Q1 2026 Coverage period: January 1, 2026 through April 11, 2026 Overview For the last two years the OWASP GenAI Security Project published a list of the major incidents for the last quarter. This is not designed to be an exhaustive report. This report…

OWASP GenAI 15 Nisan 2026

Primer on GitHub Actions Security - Threat Model, Attacks and Defenses (Part 1/2) Understanding and defending your GitHub Actions - from threat model to security controls.

Wiz Research 14 Nisan 2026

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

YesWeHack 10 Nisan 2026

Protecting Cookies with Device Bound Session Credentials <span class="byline-author">Posted by Ben Ackerman, Chrome team, Daniel Rubery, Chrome team and Guillaume Ehinger, Google Account Security team</span> <p> Following our April 2024 <a href="https://blog.chromium.org/2024/04/fighting-cookie-theft-using-device.html">announcement</a>, Device Bound…

Google Security Blog 9 Nisan 2026

Cloud Threats Retrospective 2026: What AI Changed (and What It Didn’t) Insights from public incidents, cloud telemetry, and investigations into how cloud risk evolved in 2025

Wiz Research 9 Nisan 2026

Claude Mythos Preview's cybersecurity capabilities Technical details on how we tested Claude Mythos Preview, a model strikingly capable at computer security tasks, and what we found.

Anthropic Frontier Red Team 7 Nisan 2026

Six Accounts, One Actor: Inside the prt-scan Supply Chain Campaign After hackerbot-claw, another AI-powered campaign exploiting pull_request_target confirms the threat is here to stay. We trace the attacker back to three weeks before anyone noticed.

Wiz Research 4 Nisan 2026

Google Workspace’s continuous approach to mitigating indirect prompt injections <span class="byline-author">Posted by Adam Gavish, Google GenAI Security Team</span><div><br /></div><div><span id="docs-internal-guid-963e2379-7fff-2c42-f377-675bf409d663"><p dir="ltr" style="line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;"><span face=""Google Sans Text",…

Google Security Blog 2 Nisan 2026

You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701) If you squint and look at the CISA KEV list, you might think it's made up exclusively of vulnerabilities in file transfer solutions. While this would be wrong (and you shouldn’t squint, it’s bad for your eyes), file transfer solutions do play a decent

watchTowr Labs 2 Nisan 2026

Axios NPM Distribution Compromised in Supply Chain Attack A compromised axios maintainer account led to malicious npm releases that propagated across environments. Learn how to assess impact, detect compromise, and secure your development workflows.

Wiz Research 31 Mart 2026

Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild How TeamPCP are leveraging stolen secrets from the recent supply chain attacks to compromise cloud environments

Wiz Research 30 Mart 2026

Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2) Today, we woke up with a nagging feeling: what if Citrix had, in fact, patched multiple Memory Overread vulnerabilities as part of CVE-2026-3055? While we've been using our analysis from Part 1 (please read it first, as this post will be brief) to accurately identify exploitable

watchTowr Labs 29 Mart 2026

Red-Teaming Anthropic's Internal Agent Monitoring Systems

METR 26 Mart 2026

How we built Claude Code auto mode Claude Code users approve 93% of permission prompts. See how auto mode uses classifiers to cut approval fatigue while keeping developers safe.

Anthropic 25 Mart 2026

Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign LiteLLM is the latest victim of TeamPCP’s open-source attack spree. Malicious versions 1.82.7 and 1.82.8 abuse Python’s .pth mechanism for stealthy persistence. The malware exfiltrates cloud credentials, CI/CD secrets, and keys to attacker-controlled domains.

Wiz Research 24 Mart 2026

KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack Checkmarx KICS scanner is the latest victim of a credential-stealing supply chain attack by TeamPCP. Between 12:58–16:50 UTC on March 23, 35 tags were hijacked. Learn how to audit your workflows, identify malicious activity, and secure your GitHub Actions.

Wiz Research 23 Mart 2026

Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack On March 19, 2026, threat actors injected credential-stealing malware into Aqua Security’s Trivy scanner and related GitHub Actions. Learn how "TeamPCP" executed this breach and how to audit your environment.

Wiz Research 20 Mart 2026

Why Codex Security Doesn’t Include a SAST Report A deep dive into why Codex Security doesn’t rely on traditional SAST, instead using AI-driven constraint reasoning and validation to find real vulnerabilities with fewer false positives.

OpenAI 16 Mart 2026

Twenty Years of Cloud Security Research This post will look at the past 20 years of cloud security research, separating the two decades into eras with important milestones defined that resulted in the change of one era to the next.

Wiz Research 13 Mart 2026

OpenClaw at Work: Prompt Injection Risks View promptfooconfig.yaml

Promptfoo 12 Mart 2026

Designing AI agents to resist prompt injection How ChatGPT defends against prompt injection and social engineering by constraining risky actions and protecting sensitive data in agent workflows.

OpenAI 11 Mart 2026

McKinsey's Lilli Looks More Like an API Security Failure Than a Model Jailbreak Public reporting points to exposed API surface, unsafe SQL construction, and broken object-level authorization. The AI layer changed the blast radius.

Promptfoo 10 Mart 2026

How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework GitHub Security Lab Taskflow Agent is very effective at finding Auth Bypasses, IDORs, Token Leaks, and other high-impact vulnerabilities.

GitHub Security Lab 6 Mart 2026

Partnering with Mozilla on Firefox security Claude Opus 4.6 found 22 Firefox vulnerabilities in two weeks, 14 rated high-severity, with proofs-of-concept and candidate patches for Mozilla.

Anthropic 6 Mart 2026

Reverse engineering Claude's CVE-2026-2796 exploit This post dives deep into how Claude wrote an exploit for one of the vulnerabilities it found in Firefox.

Anthropic Frontier Red Team 6 Mart 2026

On the Effectiveness of Mutational Grammar Fuzzing Mutational grammar fuzzing is a fuzzing technique in which the fuzzer uses a predefined grammar that describes the structure of the samples. When a sample gets mutated, the mutations happen in such a way that any resulting samples still adhere to the grammar rules, thus the structure of the…

Google Project Zero 5 Mart 2026

The MCP AuthN/Z Nightmare <p> <center><img src="../../../public/images/MCP-nightmare.png" alt="The MCP AuthN/Z Nightmare" align="center" style="display: block; margin-left: auto; margin-right: auto;max-width: 500px;" /></center> </p> <p>This article shares our perspective on the current state of authentication and…

Doyensec 4 Mart 2026

A Deep Dive into the GetProcessHandleFromHwnd API In my previous blog post I mentioned the GetProcessHandleFromHwnd API. This was an API I didn’t know existed until I found a publicly disclosed UAC bypass using the Quick Assist UI Access application. This API looked interesting so I thought I should take a closer look. I typically start by…

Google Project Zero 26 Şubat 2026

Disrupting malicious uses of AI | February 2026 Our latest threat report examines how malicious actors combine AI models with websites and social platforms—and what it means for detection and defense.

OpenAI 25 Şubat 2026

Detecting and preventing distillation attacks We identified coordinated distillation attacks using ~24,000 fraudulent accounts to extract Claude's capabilities.

Anthropic 23 Şubat 2026

Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs How Wiz Research automates detection of emerging malicious Azure app and consent phishing campaigns.

Wiz Research 18 Şubat 2026

Building a Secure Electron Auto-Updater <h2 id="introduction">Introduction</h2> <p>In cooperation with the <a href="https://www.upv.es/index-en.html">Polytechnic University of Valencia</a> and <a href="https://doyensec.com/">Doyensec</a>, I spent over six months during my internship in a research that combines theoretical foundations…

Doyensec 15 Şubat 2026

Bypassing Administrator Protection by Abusing UI Access In my last blog post I introduced the new Windows feature, Administrator Protection and how it aimed to create a secure boundary for UAC where one didn’t exist. I described one of the ways I was able to bypass the feature before it was released. In total I found 9 bypasses during my research…

Google Project Zero 12 Şubat 2026

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

YesWeHack 6 Şubat 2026

Indirect Prompt Injection in Web-Browsing Agents Test if AI browsing agents follow malicious instructions or leak data with the indirect-web-pwn strategy.

Promptfoo 6 Şubat 2026

LLM-discovered 0 days AI models can now find high-severity vulnerabilities at scale. We're using Claude to find and help fix vulnerabilities in open source software.

Anthropic Frontier Red Team 5 Şubat 2026

Auditing Outline. Firsthand lessons from comparing manual testing and AI security platforms <p>In July 2025, we performed a brief audit of <a href="https://www.getoutline.com/">Outline</a> - an OSS wiki similar in many ways to Notion. This activity was meant to evaluate the overall posture of the application, and involved two researchers for a total of 60 person-days. In parallel, we…

Doyensec 2 Şubat 2026

Hacking Moltbook: The AI Social Network Any Human Can Control 1 exposed database. 35,000 emails. 1.5M API keys. And 17,000 humans behind the not-so-autonomous AI network.

Wiz Research 2 Şubat 2026

“Cyber Special Operations”: China-linked influence planning OpenAI banned an account linked to an individual associated with Chinese law enforcement, using AI to plan influence activity, harassment, and online operations.

OpenAI 1 Şubat 2026

Operation “Date Bait”: AI-enabled scam targeting loveseekers OpenAI banned accounts that very likely originated in Cambodia and used AI for scam outreach to Indonesian loveseekers, including translation and engagement.

OpenAI 1 Şubat 2026

Operation “False Witness”: Fake recovery service impersonating authorities OpenAI banned accounts that very likely originated in Cambodia and used AI to pose as recovery services, law firms, and authorities targeting people affected by fraud.

OpenAI 1 Şubat 2026

Operation “Fish Food”: Russia-origin content farm activity OpenAI banned accounts linked to the Rybar network, some of which likely originated in Russia, that used AI to support multilingual influence activity across websites and social platforms.

OpenAI 1 Şubat 2026

Operation “No Bell”: Coordinated criticism of the US and allies OpenAI banned accounts linked to a previously unreported, likely Russia-origin operation we dubbed "No Bell", using AI to produce criticism of the US and its allies for audiences across Africa.

OpenAI 1 Şubat 2026

Romance scams: AI-enabled romance scam workflows OpenAI banned accounts using AI to support romance scam workflows, including outreach, translation, victim engagement, and investment-fraud lures.

OpenAI 1 Şubat 2026

Silver lining playbook: Likely China-origin activity targeting US persons OpenAI banned likely China-origin accounts using AI to research US persons, locations, and social-engineering tactics.

OpenAI 1 Şubat 2026

Operation “Trolling Stone”: Russia-linked influence activity OpenAI banned accounts linked to a previously unreported operation we dubbed "Trolling Stone", using AI to generate comments about an alleged Russian cult leader’s arrest in Argentina.

OpenAI 1 Şubat 2026

Practical Security Guidance for Sandboxing Agentic Workflows and Managing Execution Risk AI coding agents enable developers to work faster by streamlining tasks and driving automated, test-driven development. However, they also introduce a...

NVIDIA AI Red Team 30 Ocak 2026

Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529 In the first part of this series, I detailed my journey into macOS security research, which led to the discovery of a type confusion vulnerability (CVE-2024-54529) and a double-free vulnerability (CVE-2025-31235) in the coreaudiod system daemon through a process I call knowledge-driven fuzzing.…

Google Project Zero 30 Ocak 2026

AI Agents vs Humans: Who Wins at Web Hacking in 2026? Wiz Research teamed up with Irregular, a frontier AI security lab, to settle this once and for all.

Wiz Research 29 Ocak 2026

Updating Classifier Evasion for Vision Language Models Advances in AI architectures have unlocked multimodal functionality, enabling transformer models to process multiple forms of data in the same context. For...

NVIDIA AI Red Team 28 Ocak 2026

Keeping your data safe when an AI agent clicks a link Learn how OpenAI protects user data when AI agents open links, preventing URL-based data exfiltration and prompt injection with built-in safeguards.

OpenAI 28 Ocak 2026

Bypassing Windows Administrator Protection A headline feature introduced in the latest release of Windows 11, 25H2 is Administrator Protection. The goal of this feature is to replace User Account Control (UAC) with a more robust and importantly, securable system to allow a local user to access administrator privileges only when…

Google Project Zero 26 Ocak 2026

Intercepting OkHttp at Runtime With Frida - A Practical Guide <h3 id="introduction">Introduction</h3> <p><a href="https://square.github.io/okhttp/">OkHttp</a> is the defacto standard HTTP client library for the Android ecosystem. It is therefore crucial for a security analyst to be able to dynamically eavesdrop the traffic generated by this library during…

Doyensec 21 Ocak 2026

AI-supported vulnerability triage with the GitHub Security Lab Taskflow Agent Learn how we are using the newly released GitHub Security Lab Taskflow Agent to triage categories of vulnerabilities in GitHub Actions and JavaScript projects.

GitHub Security Lab 20 Ocak 2026

Agentic Browser Security: 2025 Year-End Review Are agentic browsers the new Flash? A 2025 review of new attacks, vendor security layers, and a roadmap for navigating AI browser risks.

Wiz Research 16 Ocak 2026

AI models on realistic cyber ranges Current Claude models can succeed at multistage attacks on networks with dozens of hosts using only standard, open-source tools.

Anthropic Frontier Red Team 16 Ocak 2026

CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild Wiz Research discovered a critical supply chain vulnerability that abused a CodeBuild misconfiguration to take over key AWS GitHub repositories - including the JavaScript SDK powering the AWS Console.

Wiz Research 15 Ocak 2026

Dojo challenge #47 APICrash solution

YesWeHack 14 Ocak 2026

Finding bugs with Claude and property-based testing We developed a Claude-powered agent that efficiently identifies bugs in large software projects across the Python ecosystem.

Anthropic Frontier Red Team 14 Ocak 2026

Next-generation Constitutional Classifiers We've developed the next generation of Constitutional Classifiers, offering more efficient protection against universal jailbreaks.

Anthropic 9 Ocak 2026

Snipping the Long Tail of Shai-Hulud 2.0 Wiz Research reveals the data behind Shai-Hulud's 2.0 long tail, the massive gap in cloud credential rotation, a potential link to the Trust Wallet incident, and how we finally "snipped the tail" on a month of ongoing infections.

Wiz Research 30 Aralık 2025

MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know Detect and mitigate CVE-2025-14847, an unauthenticated information leak vulnerability in MongoDB. Exploitation has been observed in the wild. Organizations should patch urgently.

Wiz Research 28 Aralık 2025

Continuously hardening ChatGPT Atlas against prompt injection OpenAI is strengthening ChatGPT Atlas against prompt injection attacks using automated red teaming trained with reinforcement learning. This proactive discover-and-patch loop helps identify novel exploits early and harden the browser agent’s defenses as AI becomes more agentic.

OpenAI 22 Aralık 2025

Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra ZDC awarded hackers $320,000 and uncovered a record‑breaking tally of critical CVEs for core cloud infrastructure, underscoring the scale and urgency of securing the open‑source software that underpins the modern cloud.

Wiz Research 16 Aralık 2025

Building a Security Scanner for LLM Apps We built a GitHub Action that scans pull requests for LLM-specific vulnerabilities. Learn why traditional security tools miss these issues and how we trace data flows to find prompt injection risks.

Promptfoo 16 Aralık 2025

Why Attack Success Rate (ASR) Isn't Comparable Across Jailbreak Papers Without a Shared Threat Model Attack Success Rate (ASR) is the most commonly reported metric for LLM red teaming, but it changes with attempt budget, prompt sets, and judge choice. Here's how to interpret ASR and report it so results are comparable.

Promptfoo 12 Aralık 2025

GPT-5.2 Initial Trust and Safety Assessment Day-0 red team results for GPT-5.2. 4,229 probes across 43 risk categories. Baseline safety holds at 96%, but jailbreaks drop it to as low as 22%.

Promptfoo 11 Aralık 2025

Gogs 0-Day Exploited in the Wild Wiz Threat Research has observed exploitation in-the-wild of CVE-2025-8110

Wiz Research 10 Aralık 2025

The Fragile Lock: Novel Bypasses For SAML Authentication TLDR This post shows how to achieve a full authentication bypass in the Ruby and PHP SAML ecosystem by exploiting several parser-level inconsistencies: including attribute pollution, namespace confusi

PortSwigger Research 10 Aralık 2025

Further Hardening Android GPUs <span class="byline-author">Posted by Liz Prucka, Hamzeh Zawawy, Rishika Hooda, Android Security and Privacy Team</span> <p> Last year, Google's Android Red Team partnered with Arm to conduct an <a…

Google Security Blog 9 Aralık 2025

Code to Cloud Attacks: From Github PAT to Cloud Control Plane How attackers are leveraging compromised employee GitHub Personal Access Tokens to compromise cloud environments.

Wiz Research 9 Aralık 2025

Architecting Security for Agentic Capabilities in Chrome <span class="byline-author">Posted by Nathan Parker, Chrome security team</span> <p> Chrome has been advancing the web’s security for well over 15 years, and we’re committed to meeting new challenges and opportunities with AI. Billions of people trust Chrome to keep them safe by default, and…

Google Security Blog 8 Aralık 2025

React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182 We break down the exploit mechanics and detail active in-the-wild attacks observed by our team, from credential harvesting to sophisticated cloud backdoors.

Wiz Research 8 Aralık 2025

Your model upgrade just broke your agent's safety Model upgrades can change refusal, instruction-following, and tool-use behavior. Here's how to prevent safety regressions in agentic apps.

Promptfoo 8 Aralık 2025

Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact A deeper look at the Shai-Hulud 2.0 supply chain attack: reviewing the infection spread, victimology, leaked secrets distribution, and community response so far.

Wiz Research 1 Aralık 2025

AI agents find smart contract exploits On a benchmark of real exploited contracts, AI agents found vulnerabilities worth a combined $4.6 million, underscoring the need for AI-powered defense.

Anthropic 1 Aralık 2025

3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs How OAuth tokens, JWT fields and Entra sign-in logs reveal attacker behavior, and how to turn those signals into reliable detections.

Wiz Research 27 Kasım 2025

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces

YesWeHack 26 Kasım 2025

Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets Detect and mitigate malicious npm packages linked to the recent Shai-Hulud-style campaign. Over 25,000 affected repositories across ~350 unique users.

Wiz Research 24 Kasım 2025

Mitigating prompt injections in browser use Claude Opus 4.5 achieves a 1% attack success rate against prompt injections in browser use, and Claude for Chrome moves to beta.

Anthropic 24 Kasım 2025

How to replicate the Claude Code attack with Promptfoo A recent cyber espionage campaign revealed how state actors weaponized Anthropic's Claude Code - not through traditional hacking, but by convincing the AI itself to carry out malicious operations.

Promptfoo 17 Kasım 2025

Disrupting an AI-orchestrated cyber espionage campaign A report describing a highly sophisticated AI-led cyberattack and how we disrupted it.

Anthropic 13 Kasım 2025

Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks How secure are top private AI companies? Find out from our scans and disclosures.

Wiz Research 10 Kasım 2025

When AI becomes the attacker: The rise of AI-orchestrated cyberattacks Google's November 2025 discovery of PROMPTFLUX and PROMPTSTEAL confirms Anthropic's August threat intelligence findings on AI-orchestrated attacks. Learn about vibe hacking, attack categories, and practical security measures.

Promptfoo 10 Kasım 2025

Understanding prompt injections: a frontier security challenge Prompt injections are a frontier security challenge for AI systems. Learn how these attacks work and how OpenAI is advancing research, training models, and building safeguards for users.

OpenAI 7 Kasım 2025

How Code Execution Drives Key Risks in Agentic AI Systems AI-driven applications are evolving from passive tools to agentic systems that generate code, make decisions, and take autonomous actions. This shift introduces...

NVIDIA AI Red Team 3 Kasım 2025

The ultimate Bug Bounty guide to HTTP request smuggling vulnerabilities

YesWeHack 30 Ekim 2025

Making Claude Code safer with sandboxing Learn how sandboxing in Claude Code uses filesystem and network isolation to protect developers, reduce permission prompts, and increase autonomy.

Anthropic 20 Ekim 2025

The minefield between syntaxes: exploiting syntax confusions in the wild

YesWeHack 17 Ekim 2025

Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces Wiz Research has uncovered 550+ secrets hiding in plain sight. We worked with Microsoft to shut the door.

Wiz Research 15 Ekim 2025

From Assistant to Adversary: Exploiting Agentic AI Developer Tools Developers are increasingly turning to AI-enabled tools for coding, including Cursor, OpenAI Codex, Claude Code, and GitHub Copilot. While these automation...

NVIDIA AI Red Team 9 Ekim 2025

A small number of samples can poison LLMs Anthropic research on data poisoning attacks shows a few hundred malicious documents can "backdoor" large language models of any size.

Anthropic 9 Ekim 2025

ksmbd - Exploiting CVE-2025-37947 (3/3) <h2 id="introduction">Introduction</h2> <p>This is the last of our posts about ksmbd. For the previous posts, see <a href="https://blog.doyensec.com/2025/01/07/ksmbd-1.html">part1</a> and <a href="https://blog.doyensec.com/2025/09/02/ksmbd-2.html">part2</a>.</p> <p>Considering all discovered…

Doyensec 7 Ekim 2025

Disrupting malicious uses of AI: October 2025 Discover how OpenAI is detecting and disrupting malicious uses of AI in our October 2025 report. Learn how we’re countering misuse, enforcing policies, and protecting users from real-world harms.

OpenAI 7 Ekim 2025

RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score Wiz Research discovers vulnerability stemming from 13-year-old bug present in all Redis versions, used in 75% of cloud environments.

Wiz Research 6 Ekim 2025

Practical LLM Security Advice from the NVIDIA AI Red Team Over the last several years, the NVIDIA AI Red Team (AIRT) has evaluated numerous and diverse AI-enabled systems for potential vulnerabilities and security...

NVIDIA AI Red Team 2 Ekim 2025

Cyber Operation: Korean-language malware support OpenAI banned Korean-language accounts using AI for malware development support, debugging, phishing, and credential-theft workflows.

OpenAI 1 Ekim 2025

Cyber Operation: Phishing and scripting support OpenAI banned accounts involved in activity that overlapped with publicly reported threat groups and displayed hallmarks consistent with PRC intelligence requirements, using AI to support phishing and scripting workflows.

OpenAI 1 Ekim 2025

Cyber Operation: Russian-speaking malware tooling OpenAI banned accounts likely linked to Russian-speaking criminal groups, using AI to build malware loaders, evasion layers, credential-theft scripts, and C2 infrastructure.

OpenAI 1 Ekim 2025

Building AI for cyber defenders How we've improved Claude's cyber defense skills.

Anthropic 29 Eylül 2025

Testing AI’s “Lethal Trifecta” with Promptfoo Learn what the lethal trifecta is and how to use promptfoo red teaming to detect prompt injection and data exfiltration risks in AI agents.

Promptfoo 28 Eylül 2025

Why CVEs Belong in Frameworks and Apps, Not AI Models The Common Vulnerabilities and Exposures (CVE) system is the global standard for cataloging security flaws in software. Maintained by MITRE and backed by CISA,...

NVIDIA AI Red Team 26 Eylül 2025

The emerging use of malware invoking AI A closer look at LameHug, the Amazon Q Developer Extension compromise, s1ngularity, and PromptLock.

Wiz Research 26 Eylül 2025

Concurrency exploits: The ultimate Bug Bounty guide to exploiting race condition vulnerabilities in web applications

YesWeHack 26 Eylül 2025

AI agents building security tests – architecture and prompts The Detectify AI Agent Alfred fully automates the creation of security tests for new vulnerabilities, from research to a merge request. In its first six ...

Detectify Labs 25 Eylül 2025

Yet Another Random Story: VBScript's Randomize Internals <p>In one of our <a href="https://blog.doyensec.com/2025/08/19/trivial-exploit-on-C-random.html">recent posts</a>, Dennis shared an interesting case study of C# exploitation that rode on <code class="language-plaintext highlighter-rouge">Random</code>-based password-reset tokens. He demonstrated…

Doyensec 24 Eylül 2025

Dojo challenge #44 Hardware monitor write-up

YesWeHack 24 Eylül 2025

IMDS Abused: Hunting Rare Behaviors to Uncover Exploits When common processes start asking the wrong questions

Wiz Research 22 Eylül 2025

Wiz Research Discovers One in Five Organizations Exposed to Systemic Risks in Vibe-Coded Applications - Here's How to Secure Them New research reveals four common security risks systematically affecting vibe-coded applications - with remediation strategies curated together with Lovable.

Wiz Research 18 Eylül 2025

WebSocket Turbo Intruder: Unearthing the WebSocket Goldmine Many testers and tools give up the moment a protocol upgrade to WebSocket occurs, or only perform shallow analysis. This is a huge blind spot, leaving many bugs like Broken Access Controls, Race condi

PortSwigger Research 17 Eylül 2025

Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware Detect and mitigate a critical supply chain compromise affecting over 100+ packages, organizations should act urgently.

Wiz Research 16 Eylül 2025

Cross-site request forgery: The ultimate Bug Bounty guide to exploiting CSRF vulnerabilities

YesWeHack 12 Eylül 2025

Strengthening safeguards with US CAISI and UK AISI Government red-teamers tested Constitutional Classifiers on Claude Opus 4 and 4.1, uncovering vulnerabilities that strengthened our safeguards.

Anthropic 12 Eylül 2025

Modeling Attacks on AI-Powered Apps with the AI Kill Chain Framework AI-powered applications are introducing new attack surfaces that traditional security models don’t fully capture, especially as these agentic systems gain...

NVIDIA AI Red Team 11 Eylül 2025

Widespread npm Supply Chain Attack: Breaking Down Impact & Scope Across Debug, Chalk, and Beyond A deeper look at the npm debug/chalk supply-chain incident: deobfuscating the wallet-hijacking browser interceptor, quantifying the ~2-hour exposure with Wiz telemetry (~99% package prevalence, ~10% malware presence), and unpacking what made it spread so fast.

Wiz Research 9 Eylül 2025

From Compromised Keys to Phishing Campaigns: Inside a Cloud Email Service Takeover Exposed cloud credentials become the launchpad for mass phishing, highlighting email services as a prime target in cloud exploitation campaigns.

Wiz Research 4 Eylül 2025

Cookie Chaos: How to bypass __Host and __Secure cookie prefixes Browsers added cookie prefixes to protect your sessions and stop attackers from setting harmful cookies. In this post, you’ll see how to bypass cookie defenses using discrepancies in browser and serve

PortSwigger Research 3 Eylül 2025

s1ngularity's Aftermath: AI, TTPs, and Impact in the Nx Supply Chain Attack A deeper look at the Nx supply chain attack: analyzing the performance of AI-powered malware, calculating incident impact, and sharing novel TTPs for further investigation.

Wiz Research 3 Eylül 2025

ksmbd - Fuzzing Improvements and Vulnerability Discovery (2/3) <h2 id="introduction">Introduction</h2> <p>This is a follow-up to the article originally published <a href="https://blog.doyensec.com/2025/01/07/ksmbd-1.html">here</a>.</p> <p>Our initial research uncovered several unauthenticated bugs, but we had only touched the attack surface lightly. Even…

Doyensec 1 Eylül 2025

Referral Beware, Your Rewards are Mine (Part 1)

Rhino Security Labs 27 Ağustos 2025

s1ngularity: supply chain attack leaks secrets on GitHub: everything you need to know Detect and mitigate a critical supply chain compromise affecting the Nx NPM Package. Organizations should act urgently.

Wiz Research 27 Ağustos 2025

Detecting and countering misuse of AI: August 2025 Anthropic's August 2025 threat intelligence report on AI cybercrime and other abuses.

Anthropic 27 Ağustos 2025

Inline Style Exfiltration: leaking data with chained CSS conditionals I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style attributes! Learn how below: Someone asked if you c

PortSwigger Research 26 Ağustos 2025

Claude, GPT, and Gemini All Struggle to Evade Monitors

METR 22 Ağustos 2025

A new type of long-lived key on AWS: Bedrock API keys New AWS Bedrock keys simplify authentication while raising security considerations.

Wiz Research 21 Ağustos 2025

Dojo challenge #43 CCTV Manager winners & writeup

YesWeHack 21 Ağustos 2025

Developing nuclear safeguards for AI With the NNSA and DOE national labs, we co-developed a classifier that distinguishes concerning from benign nuclear-related conversations.

Anthropic 21 Ağustos 2025

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining. This is usually a false positive, but sometimes there's actually a real

PortSwigger Research 19 Ağustos 2025

Trivial C# Random Exploitation <p>Exploiting random number generators requires math, right? Thanks to C#’s <code class="language-plaintext highlighter-rouge">Random</code>, that is not necessarily the case! I ran into an HTTP 2.0 web service issuing password reset tokens from a custom encoding of <code…

Doyensec 18 Ağustos 2025

Prompt Injection vs Jailbreaking: What's the Difference? Learn the critical difference between prompt injection and jailbreaking attacks, with real CVEs, production defenses, and test configurations.

Promptfoo 18 Ağustos 2025

Claude does cyber competitions Throughout 2025, we quietly entered Claude in cybersecurity competitions designed for humans. It often placed in the top 25% of competitors.

Anthropic 9 Ağustos 2025

How Hackers Exploit AI’s Problem-Solving Instincts As multimodal AI models advance from perception to reasoning, and even start acting autonomously, new attack surfaces emerge. These threats don’t just target...

NVIDIA AI Red Team 7 Ağustos 2025

HTTP/1.1 must die: the desync endgame Abstract Upstream HTTP/1.1 is inherently insecure and regularly exposes millions of websites to hostile takeover. Six years of attempted mitigations have hidden the issue, but failed to fix it. This p

PortSwigger Research 6 Ağustos 2025

Estimating worst case frontier risks of open weight LLMs In this paper, we study the worst-case frontier risks of releasing gpt-oss. We introduce malicious fine-tuning (MFT), where we attempt to elicit maximum capabilities by fine-tuning gpt-oss to be as capable as possible in two domains: biology and cybersecurity.

OpenAI 5 Ağustos 2025

Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover Wiz Research discovers a critical vulnerability chain allowing unauthenticated attackers to take over NVIDIA's Triton Inference Server.

Wiz Research 4 Ağustos 2025

Securing Agentic AI: How Semantic Prompt Injections Bypass AI Guardrails Prompt injection, where adversaries manipulate inputs to make large language models behave in unintended ways, has long posed a threat to AI systems since the...

NVIDIA AI Red Team 31 Temmuz 2025

Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding platform Base44 Allowing Unauthorized Access to Private Applications New discovery underscores security implications of AI-powered development and the rise of Vibe Coding Platforms

Wiz Research 29 Temmuz 2025

TraderTraitor: Deep Dive Inside the Lazarus subgroup that’s hijacking cloud platforms, poisoning supply chains, and stealing billions in digital assets.

Wiz Research 28 Temmuz 2025

Soco404: Multiplatform Cryptomining Campaign Uses Fake Error Pages to Hide Payload Wiz Research has identified a new iteration of a broader malicious cryptomining campaign, which we’ve dubbed Soco404.

Wiz Research 23 Temmuz 2025

Introducing OSS Rebuild: Open Source, Rebuilt to Last <span class="byline-author">Posted by Matthew Suozzo, Google Open Source Security Team (GOSST)</span><div><br /></div><div><span id="docs-internal-guid-0d823a3a-7fff-31cb-bbfd-deb41fcd8145"><p dir="ltr" style="line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;"><span face="Arial,…

Google Security Blog 21 Temmuz 2025

NVIDIAScape - Critical NVIDIA AI Vulnerability: A Three-Line Container Escape in NVIDIA Container Toolkit (CVE-2025-23266) New critical vulnerability with 9.0 CVSS presents systemic risk to the AI ecosystem, carries widespread implications for AI infrastructure.

Wiz Research 17 Temmuz 2025

Cyber evaluations of Claude 4 We partnered with Pattern Labs on cybersecurity evaluations of Claude Opus 4 and Sonnet 4, with Opus showing notable improvement over prior models.

Anthropic 15 Temmuz 2025

Dojo challenge #42 - Hex Color Palette winners & writeup

YesWeHack 11 Temmuz 2025

Exposed JDWP Exploited in the Wild: What Happens When Debug Ports Are Left Open Understanding the risks and impact of deploying dev-mode in production environments

Wiz Research 2 Temmuz 2025

Cloud Attacks Retrospective: Evolving Tactics, Familiar Entry Points Let's break down eight attack patterns security teams should be watching in 2025.

Wiz Research 18 Haziran 2025

Leaking Secrets in the Age of AI How has AI-assisted development impacted secrets leakage? Learn the new patterns and emerging trends.

Wiz Research 17 Haziran 2025

Mitigating prompt injection attacks with a layered defense strategy <span class="byline-author">Posted by Adam Gavish, Google GenAI Security Team</span><div><br /></div><div><span id="docs-internal-guid-673cf5ee-7fff-42cb-83fa-7f963bac5563"><p dir="ltr" style="line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;"><span face="Arial, sans-serif"…

Google Security Blog 13 Haziran 2025

Cyber toolkits for LLMs LLMs not fine-tuned for cybersecurity can succeed in multistage attacks on networks with dozens of hosts when equipped with a novel toolkit.

Anthropic 13 Haziran 2025

Critical signature-spoofing vulnerability in OpenPGP.js hits the headlines

YesWeHack 11 Haziran 2025

Rules Files for Safer Vibe Coding Helping LLMs generate safer and more secure code through open-sourced rules files.

Wiz Research 6 Haziran 2025

Disrupting malicious uses of AI: June 2025 Our latest report featuring case studies of how we’re detecting and preventing malicious uses of AI.

OpenAI 5 Haziran 2025

Multiple CVEs in Infoblox NetMRI: RCE, Auth Bypass, SQLi, and File Read Vulnerabilities

Rhino Security Labs 4 Haziran 2025

DevOps Tools Targeted for Cryptojacking The Wiz Threat Research team has identified a widespread cryptojacking campaign targeting commonly used DevOps applications including Nomad and Consul.

Wiz Research 2 Haziran 2025

Deceptive Employment Scheme: IT worker activity OpenAI banned accounts associated with suspected deceptive employment campaigns that used AI to develop materials for potentially fraudulent remote-job applications.

OpenAI 1 Haziran 2025

Operation “ScopeCreep”: Russian-speaking malware development OpenAI banned Russian-language accounts using AI to build malware, refine loaders, and troubleshoot cyber tooling.

OpenAI 1 Haziran 2025

Vixen and Keyhole Panda: China-linked cyber operations OpenAI banned accounts associated with threat actors publicly attributed to the PRC, using AI to support vulnerability research, scripting, translation, and operational troubleshooting.

OpenAI 1 Haziran 2025

Operation “Wrong Number”: AI-assisted task scam OpenAI banned accounts that likely originated in Cambodia and used AI to support scam workflows targeting people in the UK.

OpenAI 1 Haziran 2025

CVE-2025-26147: Authenticated RCE In Denodo Scheduler

Rhino Security Labs 21 Mayıs 2025

Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild Wiz Threat Research has observed exploitation in-the-wild of CVE-2025-4427 and CVE-2025-4428, the latest vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM).

Wiz Research 20 Mayıs 2025

Beyond ‘../../’ - a practical guide to path traversal and arbitrary file read attacks

YesWeHack 15 Mayıs 2025

SCIM Hunting - Beyond SSO <style>ol { list-style-type: decimal }</style> <h2 id="introduction">Introduction</h2> <p>Single Sign-On (SSO) related bugs have gotten an incredible amount of hype and a lot of amazing public disclosures in recent years. Just to cite a few examples:</p> <ul> <li><a…

Doyensec 7 Mayıs 2025

What Analyzing Hundreds of Thousands of Cloud Environments Taught Us About Data Exposure Wiz Research reveals the latest cloud data security trends across hundreds of thousands of real-world environments.

Wiz Research 7 Mayıs 2025

Drag and Pwnd: Leverage ASCII characters to exploit VS Code Control characters like SOH, STX, EOT and ETX were never meant to run your code - but in the world of modern terminal emulators, they sometimes do. In this post, I'll dive into the forgotten mechanics

PortSwigger Research 30 Nisan 2025

Structuring Applications to Secure the KV Cache When interacting with transformer-based models like large language models (LLMs) and vision-language models (VLMs), the structure of the input shapes the...

NVIDIA AI Red Team 29 Nisan 2025

Detecting and countering malicious uses of Claude Anthropic's March 2025 report on detecting and countering malicious uses of Claude.

Anthropic 23 Nisan 2025

New Pacu Module: Secret Enumeration in Elastic Beanstalk

Rhino Security Labs 22 Nisan 2025

Research Briefing: MCP Security The present and future of security for the Model Context Protocol.

Wiz Research 17 Nisan 2025

HTTP header hacks: basic and advanced exploit techniques explored

YesWeHack 15 Nisan 2025

Hacking GraphQL endpoints with introspection, query, mutation, batching attacks

YesWeHack 8 Nisan 2025

CPU_HU: Fileless cryptominer targeting exposed PostgreSQL with over 1.5K victims Cloud environments at risk: Attackers target weak PostgreSQL instances with fileless cryptominer payloads.

Wiz Research 31 Mart 2025

CSPT Resources <p> <center><img src="../../../public/images/CSPTResources.png" alt="New CSPT toys for everyone" align="center" style="display: block; margin-left: auto; margin-right: auto;max-width: 600px;" /></center> </p> <p>As a follow up to Maxence Schmitt’s research on <strong>Client-Side Path Traversal…

Doyensec 26 Mart 2025

CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith

Rhino Security Labs 25 Mart 2025

IngressNightmare: CVE-2025-1974 - 9.8 Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress NGINX Over 40% of cloud environments are vulnerable to RCE, likely leading to a complete cluster takeover.

Wiz Research 24 Mart 2025

Limitations are just an illusion – advanced server-side template exploitation with RCE everywhere

YesWeHack 24 Mart 2025

Progress from our Frontier Red Team What we've learned about the trajectory of national security risks from frontier AI models, and best practices for evaluating those risks.

Anthropic 19 Mart 2025

SAML roulette: the hacker always wins Introduction In this post, we’ll show precisely how to chain round-trip attacks and namespace confusion to achieve unauthenticated admin access on GitLab Enterprise by exploiting the ruby-saml library

PortSwigger Research 18 Mart 2025

!exploitable Episode Three - Devfile Adventures <style>ol { list-style-type: decimal }</style> <h2 id="introduction">Introduction</h2> <p>I know, we have written it <a href="https://blog.doyensec.com/2025/02/11/exploitable-iot.html">multiple</a> <a href="https://blog.doyensec.com/2025/02/27/exploitable-sshd.html">times</a> now, but in case…

Doyensec 17 Mart 2025

New GitHub Action supply chain attack: reviewdog/action-setup A supply chain attack on tj-actions/changed-files caused many repositories to leak their secrets over the weekend. Wiz Research has discovered an additional supply chain attack on reviewdog/actions-setup@v1, that may have contributed to the compromise of tj-actions/changed-files.

Wiz Research 17 Mart 2025

GitHub Action tj-actions/changed-files supply chain attack: everything you need to know A supply chain attack on popular GitHub Action tj-actions/changed-files caused many repositories to leak their secrets. Discover how it unfolded and the steps to mitigate the risk.

Wiz Research 15 Mart 2025

!exploitable Episode Two - Enter the Matrix <style>ol { list-style-type: decimal }</style> <h2 id="introduction">Introduction</h2> <p>In case you are just tuning in, Doyensec has found themselves on a cruse ship touring the Mediterranean. Unwinding, hanging out with colleagues and having some fun. <a…

Doyensec 26 Şubat 2025

Defining LLM Red Teaming There is an activity where people provide inputs to generative AI technologies, such as large language models (LLMs), to see if the outputs can be made to...

NVIDIA AI Red Team 25 Şubat 2025

Agentic Autonomy Levels and Security Agentic workflows are the next evolution in AI-powered tools. They enable developers to chain multiple AI models together to perform complex activities, enable...

NVIDIA AI Red Team 25 Şubat 2025

Disrupting malicious uses of AI

OpenAI 21 Şubat 2025

How Wiz found a Critical NVIDIA AI vulnerability: Deep Dive into a container escape (CVE-2024-0132) Technical details on a critical severity vulnerability (CVE-2024-0132) in NVIDIA Container Toolkit and GPU Operator, affecting cloud service providers .

Wiz Research 11 Şubat 2025

CVE-2025-0693: AWS IAM User Enumeration

Rhino Security Labs 11 Şubat 2025

!exploitable Episode One - Breaking IoT <style>ol { list-style-type: decimal }</style> <h2 id="introduction">Introduction</h2> <p>For our last company retreat, the Doyensec team went on a cruise along the coasts of the Mediterranean Sea. As amazing as each stop was, us being geeks, we had to break the monotony of daily pool parties…

Doyensec 10 Şubat 2025

Top 10 web hacking techniques of 2024 Welcome to the Top 10 Web Hacking Techniques of 2024, the 18th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year

PortSwigger Research 4 Şubat 2025

Constitutional Classifiers A paper from Anthropic describing a new way to guard LLMs against jailbreaking.

Anthropic 3 Şubat 2025

Cyber threat actors: AI-assisted intrusion research OpenAI banned accounts potentially associated with publicly reported DPRK-affiliated threat actors using AI to research intrusion tooling, phishing, malware, and cryptocurrency targeting.

OpenAI 1 Şubat 2025

Romance-baiting scam: AI-assisted pig butchering workflows OpenAI banned accounts that appeared to originate in Cambodia and used AI to translate and generate romance, investment scam conversations.

OpenAI 1 Şubat 2025

Task scam: AI-assisted fake review jobs OpenAI banned accounts that appeared to originate in Cambodia and used AI to translate messages for fake-review job scams that asked victims to pay fees.

OpenAI 1 Şubat 2025

CVE-2024-46506: Unauthenticated RCE in NetAlertx

Rhino Security Labs 30 Ocak 2025

Common OAuth Vulnerabilities <p>OAuth2’s popularity makes it a prime target for attackers. While it simplifies user login, its complexity can lead to misconfigurations that create security holes. Some of the more intricate vulnerabilities keep reappearing because the protocol’s inner workings are not always well-understood.…

Doyensec 29 Ocak 2025

Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History A publicly accessible database belonging to DeepSeek allowed full control over database operations, including the ability to access internal data. The exposure includes over a million lines of log streams with highly sensitive information.

Wiz Research 29 Ocak 2025

CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI)

Rhino Security Labs 29 Ocak 2025

Bypassing character blocklists with unicode overflows Unicode codepoint truncation - also called a Unicode overflow attack - happens when a server tries to store a Unicode character in a single byte. Because the maximum value of a byte is 255, an overflo

PortSwigger Research 28 Ocak 2025

Stealing HttpOnly cookies with the cookie sandwich technique In this post, I will introduce the "cookie sandwich" technique which lets you bypass the HttpOnly flag on certain servers. This research follows on from Bypassing WAFs with the phantom $Version cookie

PortSwigger Research 22 Ocak 2025

Trading inference-time compute for adversarial robustness Trading Inference-Time Compute for Adversarial Robustness

OpenAI 22 Ocak 2025

Tracking cloud-fluent threat actors - Part two: Behavioral cloud IOCs Discover how behavioral cloud IOCs can expose malicious activity as we break down real-world examples to reveal actionable detection techniques.

Wiz Research 15 Ocak 2025

Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603) The Wiz Incident Response team is currently responding to multiple incidents involving CVE-2024-50603, an Aviatrix Controller unauthenticated RCE vulnerability, that can lead to privileges escalation in the AWS control plane. Organizations should patch urgently.

Wiz Research 11 Ocak 2025

CVE-2025-0282 and CVE-2025-0283: Critical Ivanti 0days Exploited in the Wild Detect and mitigate CVE-2025-0282, a critical RCE vulnerability in Ivanti Connect Secure and CVE-2025-0283, exploited as 0day vulnerabilities in the wild. Organizations should patch urgently.

Wiz Research 9 Ocak 2025

Bypassing File Upload Restrictions To Exploit Client-Side Path Traversal <p> <center><img src="../../../public/images/cspt2.png" alt="Doyensec CSPT" align="center" style="display: block; margin-left: auto; margin-right: auto;max-width: 400px;" /></center> </p> <p>In my <a href="https://blog.doyensec.com/2024/07/02/cspt2csrf.html">previous blog post</a>, I…

Doyensec 8 Ocak 2025

ksmbd vulnerability research <h2 id="introduction">Introduction</h2> <p>At Doyensec, we decided to perform a vulnerability research activity on the SMB3 Kernel Server (ksmbd), a component of the Linux kernel. Initially, it was enabled as an experimental feature, but in the kernel version 6.6, the experimental flag was <a…

Doyensec 6 Ocak 2025

Breaking the Chain: Wiz Uncovers a Signature Verification Bypass in Nuclei, the Popular Vulnerability Scanner (CVE-2024-43405) Wiz’s engineering team discovered a high-severity signature verification bypass in Nuclei, one of the most popular open-source security tools, which could potentially lead to arbitrary code execution.

Wiz Research 3 Ocak 2025

Avoiding mistakes with AWS OIDC integration conditions Let’s explore some common missteps in securing your AWS OIDC.

Wiz Research 1 Ocak 2025

The many ways to obtain credentials in AWS Dive into the complexities of AWS IAM credentials and uncover how defenders can stay ahead with in-depth knowledge of SDK behaviors and service-specific mechanisms.

Wiz Research 20 Aralık 2024

Unpacking Diicot - Evolving Campaign Targeting Linux Environments Wiz Threat Research uncovered a new malware campaign targeting Linux environments attributed to the Diicot threat group.

Wiz Research 17 Aralık 2024

Sandboxing Agentic AI Workflows with WebAssembly Agentic AI workflows often involve the execution of large language model (LLM)-generated code to perform tasks like creating data visualizations. However, this...

NVIDIA AI Red Team 16 Aralık 2024

Under the Radar: Exploring Spring Boot Actuator Misconfigurations Wiz Threat Research investigates misconfigurations in Spring Boot Actuator’s endpoints that can leak environment variables, passwords, and API keys, and even lead to remote code execution.

Wiz Research 16 Aralık 2024

Unsafe Archive Unpacking: Labs and Semgrep Rules <h2 id="introduction">Introduction</h2> <p>During my recent internship with Doyensec, I had the opportunity to research <strong>decompression attacks</strong> across different programming languages. As the use of archive file formats is widespread in software development, it is crucial for…

Doyensec 15 Aralık 2024

New Developments in LLM Hijacking Activity Discover the latest in LLM hijacking activity, including a dive into the JINX-2401 campaign targeting AWS environments with IAM privilege escalation tactics.

Wiz Research 15 Aralık 2024

Ultralytics AI Library Hacked via GitHub for Cryptomining A supply chain attack on Ultralytics exploited GitHub Actions to inject malicious PyPI packages. Discover how it unfolded and the steps to mitigate the risk.

Wiz Research 9 Aralık 2024

Bypassing WAFs with the phantom $Version cookie HTTP cookies often control critical website features, but their long and convoluted history exposes them to parser discrepancy vulnerabilities. In this post, I'll explore some dangerous, lesser-known

PortSwigger Research 4 Aralık 2024

CloudGoat Official Walkthrough Series: ‘sqs_flag_shop’

Rhino Security Labs 3 Aralık 2024

CSPT the Eval Villain Way! <p>Doyensec’s Maxence Schmitt recently built a <a href="https://github.com/doyensec/CSPTPlayground">playground</a> to go with his <a href="https://blog.doyensec.com/2024/07/02/cspt2csrf.html">CSPT research</a>. In this blog post, we will demonstrate how to find and exploit CSPT bugs with Eval…

Doyensec 2 Aralık 2024

Wiz observes exploitation in the wild of PAN-OS vulnerabilities Detect and mitigate CVE-2024-0012 and CVE-2024-9474, PAN-OS vulnerabilities which Wiz Threat Research has observed being exploited in-the-wild. Organizations should patch urgently.

Wiz Research 22 Kasım 2024

Kubernetes Audit Log “Gotchas” How to overcome challenges and security gaps when using K8s audit logs for forensics and attack detection.

Wiz Research 14 Kasım 2024

Making Sense of Kubernetes Initial Access Vectors Part 2 - Data Plane Learn about Kubernetes data plane access, including applications running on the cluster, container images, and execution-as-a-service workload types.

Wiz Research 13 Kasım 2024

Making Sense of Kubernetes Initial Access Vectors Part 1 – Control Plane Explore Kubernetes control plane access vectors, risks, and security strategies to prevent unauthorized access and protect your clusters from potential threats.

Wiz Research 12 Kasım 2024

The Rogue Replication Threat Model

METR 12 Kasım 2024

Unmasking Phishing: Strategies for identifying 0ktapus domains and beyond Wiz Research looks at phishing tactics, along with how to trace and investigate these campaigns.

Wiz Research 7 Kasım 2024

Supply chain attack on lottie-player: everything you need to know Supply chain attack in popular lottie-player library compromises websites with malicious Web3 wallet prompts – update or revert the library to avoid the compromised versions.

Wiz Research 31 Ekim 2024

Concealing payloads in URL credentials Last year Johan Carlsson discovered you could conceal payloads inside the credentials part of the URL . This was fascinating to me especially because the payload is not actually visible in the URL in

PortSwigger Research 23 Ekim 2024

White-box penetration testing: How to debug for JavaScript vulnerabilities

YesWeHack 22 Ekim 2024

Critical vulnerabilities in Palo Alto Expedition: everything you need to know Detect and mitigate critical vulnerabilities (CVE-2024-9463, CVE-2024-9464, CVE-2024-9465, CVE-2024-9466, CVE-2024-9467) in Palo Alto Networks’ Expedition tool. Organizations should patch urgently.

Wiz Research 10 Ekim 2024

A Security Review of Gradio 5

Hugging Face 10 Ekim 2024

Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges <h2 id="introduction">Introduction</h2> <p>In this post, we are going to explore a rarely discussed class of vulnerabilities in Ruby, known as <strong>class pollution</strong>. This concept is inspired by the idea of prototype pollution in JavaScript, where recursive merges are exploited to…

Doyensec 1 Ekim 2024

CyberAv3ngers: Iran-linked cyber research activity OpenAI banned accounts that appeared to belong to CyberAv3ngers using AI to research industrial control systems, default credentials, and targets.

OpenAI 1 Ekim 2024

SweetSpecter: China-linked cyber activity OpenAI banned accounts likely belonging to a suspected China-based adversary tracked as SweetSpecter, using AI to research vulnerabilities, write code, and support spear-phishing activity.

OpenAI 1 Ekim 2024

CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Everything you need to know Detect and mitigate CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, and CVE-2024-47177 vulnerabilities impacting CUPS and IPP packages.

Wiz Research 29 Eylül 2024

Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments Critical severity vulnerability CVE-2024-0132 affecting NVIDIA Container Toolkit and GPU Operator presents high risk to AI workloads and environments.

Wiz Research 26 Eylül 2024

Tracking cloud-fluent threat actors - Part one: Atomic cloud IOCs Strategies for tracking and defending against malicious activity and threats in the cloud using atomic indicators of compromise (IOCs).

Wiz Research 23 Eylül 2024

Applying Security Engineering to Make Phishing Harder - A Case Study <h1 id="introduction">Introduction</h1> <p>Recently Doyensec was hired by a client offering a “Communication Platform as a Service”. This platform allows their clients to craft a customer service experience and to communicate with their own customers via a plethora of channels: email, web chats,…

Doyensec 18 Eylül 2024

NVIDIA Presents AI Security Expertise at Leading Cybersecurity Conferences Each August, tens of thousands of security professionals attend the cutting-edge security conferences Black Hat USA and DEF CON. This year, NVIDIA AI security...

NVIDIA AI Red Team 18 Eylül 2024

White-box penetration testing: Debugging for Python vulnerabilities

YesWeHack 12 Eylül 2024

Uncovering Hybrid Cloud Attacks Part 2 – The Attack in this second part of the series, we’ll share the details of a real-world sophisticated, long-term attack in the cloud.

Wiz Research 4 Eylül 2024

Uncovering Hybrid Cloud Attacks Part 3 – The Response In the final section of this blog series on uncovering complex hybrid cloud attacks, we’ll share key elements of the response to the real-world sophisticated cloud attack outlined in Part 2.

Wiz Research 4 Eylül 2024

Introducing the URL validation bypass cheat sheet URL validation bypasses are the root cause of numerous vulnerabilities including many instances of SSRF, CORS misconfiguration, and open redirection. These work by using ambiguous URLs to trigger URL

PortSwigger Research 3 Eylül 2024

Avoiding security incidents due to request collapsing This feature of caching services can result in unexpected behavior. Here's how to prevent sensitive data from being accidentally exposed.

Wiz Research 3 Eylül 2024

AWS Console Session Traceability: How Attackers Obfuscate Identity Through the AWS Console Attackers can take advantage of a quirk of the default AWS configuration (without SourceIdentity configured) to potentially make detecting and attributing their actions more difficult.

Wiz Research 22 Ağustos 2024

Defeating Kubernetes Privilege Escalation: A Cloud Detection & Response Case Study This case study serves to highlight the importance of rapid, heuristic, accurate, and contextualized detection and response in the cloud.

Wiz Research 21 Ağustos 2024

Gotta cache 'em all: bending the rules of web cache exploitation Through the years, we have seen many attacks exploiting web caches to hijack sensitive information or store malicious payloads. However, as CDNs became more popular, new discrepancies between propriet

PortSwigger Research 8 Ağustos 2024

Emerging phishing campaign targeting AWS accounts Wiz Threat Research recently spotted a new phishing campaign targeting AWS accounts.

Wiz Research 8 Ağustos 2024

Splitting the email atom: exploiting parsers to bypass access controls Some websites parse email addresses to extract the domain and infer which organisation the owner belongs to. This pattern makes email-address parser discrepancies critical. Predicting which domain an

PortSwigger Research 7 Ağustos 2024

Listen to the whispers: web timing attacks that actually work Websites are riddled with timing oracles eager to divulge their innermost secrets. It's time we started listening to them. In this paper, I'll unleash novel attack concepts to coax out server secrets

PortSwigger Research 7 Ağustos 2024

SeleniumGreed: Threat actors exploit exposed Selenium Grid services for Cryptomining Wiz researchers discover ongoing threat to popular testing framework.

Wiz Research 25 Temmuz 2024

White-box penetration testing with Xdebug: Debugging for PHP vulnerabilities

YesWeHack 19 Temmuz 2024

Windows Installer, Exploiting Custom Actions <p>Over a year ago, I published my <a href="https://blog.doyensec.com/2023/03/21/windows-installer.html">research around the Windows Installer Service</a>. The article explained in detail how the MSI repair process executes in an elevated context, but the lack of impersonation could lead to…

Doyensec 17 Temmuz 2024

SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts Wiz Research uncovers vulnerabilities in SAP AI Core, allowing malicious actors to take over the service and access customer data.

Wiz Research 17 Temmuz 2024

Defending AI Model Files from Unauthorized Access with Canaries As AI models grow in capability and cost of creation, and hold more sensitive or proprietary data, securing them at rest is increasingly important....

NVIDIA AI Red Team 11 Temmuz 2024

A Race to the Bottom - Database Transactions Undermining Your AppSec <h2 id="introduction">Introduction</h2> <p>Databases are a crucial part of any modern application. Like any external dependency, they introduce additional complexity for the developers building an application. In the real world, however, they are usually considered and used as a black box which…

Doyensec 10 Temmuz 2024

Fickle PDFs: exploiting browser rendering discrepancies Imagine the CEO of a random company receives an email containing a PDF invoice file. In Safari and MacOS Preview, the total price displayed is £399. After approval, the invoice is sent to the accounti

PortSwigger Research 9 Temmuz 2024

Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery - Introducing CSPT2CSRF <p> <center><img src="../../../public/images/cspt2csrf_doyensec.png" alt="Doyensec CSPT2CSRF" align="center" style="display: block; margin-left: auto; margin-right: auto;max-width: 400px;" /></center> </p> <p>To provide users with a safer browsing experience, the IETF proposal named…

Doyensec 1 Temmuz 2024

RCE vulnerability in OpenSSH: everything you need to know Detect and mitigate CVE-2024-6387, a remote code execution vulnerability in OpenSSH. Organizations are advised to patch urgently.

Wiz Research 1 Temmuz 2024

Secure LLM Tokenizers to Maintain Application Integrity This post is part of the NVIDIA AI Red Team’s continuing vulnerability and technique research. Use the concepts presented to responsibly assess and increase...

NVIDIA AI Red Team 27 Haziran 2024

Probllama: Ollama Remote Code Execution Vulnerability (CVE-2024-37032) – Overview and Mitigations Wiz Research discovered CVE-2024-37032, an easy-to-exploit Remote Code Execution vulnerability in the open-source AI Infrastructure project Ollama.

Wiz Research 24 Haziran 2024

Single Sign-On Or Single Point of Failure? <p> <center><img src="../../../public/images/research.png" alt="Doyensec Research" align="center" style="display: block; margin-left: auto; margin-right: auto;max-width: 400px;" /></center> </p> <p>No one can argue with the convenience that single sign-on (SSO) brings to users or the security…

Doyensec 19 Haziran 2024

Challenges in red teaming AI systems In this post we detail insights from a sample of red teaming approaches that we’ve used to test our AI systems. Through this practice, we’ve begun to gather empirical data about the appropriate tool to reach for in a given situation, and the associated benefits and challenges with each approach. We hope this post is helpful for other companies trying to red team their AI systems, policymakers curious about how red teaming works in practice, and organizations that want to red team AI technology.

Anthropic 12 Haziran 2024

onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet The power of our XSS cheat sheet is we get fantastic contributions from the web security community and this update is no exception. We had valuable contributions from Mozilla to remove events that no

PortSwigger Research 11 Haziran 2024

Critical RCE vulnerability in PHP CGI: everything you need to know Detect and mitigate CVE-2024-4577, a critical remote code execution vulnerability in PHP CGI. Organizations are advised to patch urgently.

Wiz Research 10 Haziran 2024

Pause off my cluster: DERO cryptojacking takes a new shape Learn how the threat actors behind the 2023 DERO cryptojacking campaign have adapted their techniques to evade detection, and the best practices for mitigation.

Wiz Research 7 Haziran 2024

Refining your HTTP perspective, with bambdas When you open a HTTP request or response, what do you instinctively look for? Suspicious parameter names? CORS headers? Some clue as to the request's origin or underlying purpose? A single HTTP messag

PortSwigger Research 29 Mayıs 2024

CyberSecEval 2 - A Comprehensive Evaluation Framework for Cybersecurity Risks and Capabilities of Large Language Models

Hugging Face 24 Mayıs 2024

The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate The Wiz Research team's investigations into AI-as-a-service providers reveals a major risk to AI systems.

Wiz Research 23 Mayıs 2024

Introducing SignSaboteur: forge signed web tokens with ease Signed web tokens are widely used for stateless authentication and authorization throughout the web. The most popular format is JSON Web Tokens (JWT) which we've already covered in depth, but beyond t

PortSwigger Research 22 Mayıs 2024

CVE-2024-4040 exploited in the wild: everything you need to know Detect and mitigate CVE-2024-4040, a critical vulnerability in CrushFTP exploited in the wild. Organizations should patch urgently.

Wiz Research 24 Nisan 2024

The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions Today's LLMs are susceptible to prompt injections, jailbreaks, and other attacks that allow adversaries to overwrite a model's original instructions with their own malicious prompts.

OpenAI 19 Nisan 2024

Wiz Research finds architecture risks that may compromise AI-as-a-Service providers and consequently risk customer data; works with Hugging Face on mitigations Wiz researchers discovered architecture risks that may compromise AI-as-a-Service providers and put customer data at risk. Wiz and Hugging Face worked together to mitigate the issue.

Wiz Research 4 Nisan 2024

Defense in depth: XZ Utils We explore assessment, prevention, and detection strategies for protecting your organization from the XZ Utils vulnerability.

Wiz Research 3 Nisan 2024

Many-shot jailbreaking A long-context jailbreak that overrides safety training with hundreds of faux dialogues, and the mitigations that reduce its effectiveness.

Anthropic 2 Nisan 2024

Backdoor in XZ Utils allows RCE: everything you need to know Detect and mitigate CVE-2024-3094, a critical supply chain compromise, affecting XZ Utils Data compression library. Organizations should patch urgently.

Wiz Research 29 Mart 2024

Making desync attacks easy with TRACE Have you ever found an HTTP desync vulnerability that seemed impossible to exploit due to its complicated constraints? In this blogpost we will explore a new exploitation technique that can be used to

PortSwigger Research 19 Mart 2024

A Look at Software Composition Analysis <p> <center><img src="../../../public/images/sca_supplychain.png" alt="Software Supply Chain as a factory assembly line" align="center" style="display: block; margin-left: auto; margin-right: auto;max-width: 450px;" /></center> </p> <h3 id="background">Background</h3> <p>At Doyensec, we…

Doyensec 13 Mart 2024

Authentication bypass vulnerabilities in TeamCity: everything you need to know Detect and mitigate CVE-2024-27198 (CVSS score: 9.8) and CVE-2024-27199 (CVSS score: 7.3), authentication bypass vulnerabilities in JetBrains TeamCity.

Wiz Research 6 Mart 2024

Using form hijacking to bypass CSP In this post we'll show you how to bypass CSP by using an often overlooked technique that can enable password theft in a seemingly secure configuration. What is form hijacking? Form hijacking isn't re

PortSwigger Research 5 Mart 2024

Proof of storage crypto miners We explore “proof-of-storage" cryptocurrencies like Chia, the potential for proof-of-storage cryptojacking attacks, and steps defenders can take to detect them.

Wiz Research 21 Şubat 2024

Unveiling the Prototype Pollution Gadgets Finder <h3 id="introduction">Introduction</h3> <p>Prototype pollution has recently emerged as a fashionable vulnerability within the realm of web security. This vulnerability occurs when an attacker exploits the nature of JavaScript’s prototype inheritance to modify a prototype of an object. By doing…

Doyensec 16 Şubat 2024

Disrupting malicious uses of AI by state-affiliated threat actors

OpenAI 14 Şubat 2024

February Fortinet Advisory: everything you need to know Fortinet offers guidance to detect and mitigate CVE-2024-21762 and CVE-2024-23113, critical RCE vulnerabilities in FortiOS and FortiProxy, including guidance that organizations should patch urgently.

Wiz Research 12 Şubat 2024

New attack vectors in EKS We explore how advancements in EKS Access Entries and Pod Identity have opened new attack vectors and offer examples of how adversaries could exploit them.

Wiz Research 9 Şubat 2024

Midnight Blizzard attack on Microsoft corporate environment: a detailed analysis, detections and recommendations Get a detailed analysis of the entire attack chain of Microsoft's breach by Midnight Blizzard (APT29), as well as detection and mitigation recommendations.

Wiz Research 8 Şubat 2024

New EKS Access Management and Pod Identity features: a security analysis The Wiz research team unpacks the security implications of the new EKS access and identity management features and recommends best practices when using them.

Wiz Research 6 Şubat 2024

Critical Vulnerabilities in Ivanti Exploited in-the-Wild: everything you need to know Detect and mitigate CVE-2023-46805, CVE-2024-21887, CVE-2024-21888 and CVE-2024-21893, critical vulnerabilities in Ivanti VPN products. Organizations should patch urgently, and government agencies are instructed to isolate Ivanti VPN instances.

Wiz Research 6 Şubat 2024

Leaky Vessels: runC and BuildKit container escape vulnerabilities - everything you need to know Detect and mitigate “Leaky Vessels”, container escape vulnerabilities affecting runC and BuildKit. Learn how to prioritize patching and detect exploitation attempts in runtime.

Wiz Research 5 Şubat 2024

Kubernetes Scheduling And Secure Design <p>During testing activities, we usually analyze the design choices and context needs in order to suggest applicable remediations depending on the different Kubernetes deployment patterns. Scheduling is often overlooked in Kubernetes designs. Typically, various mechanisms take precedence,…

Doyensec 22 Ocak 2024

Deceptive LLMs that persist through safety training We trained LLMs with backdoors and found standard safety training failed to remove them, sometimes teaching models to hide them better.

Anthropic 14 Ocak 2024

Challenges in evaluating AI systems Insights from the red teaming approaches we've used to test our AI systems.

Anthropic 4 Ekim 2023

Frontier threats red teaming for AI safety We spent 150+ hours red teaming frontier models with biosecurity experts and found mitigations that meaningfully reduce harmful outputs.

Anthropic 26 Temmuz 2023

Frontier model security Cybersecurity best practices for frontier AI labs, including two-party control and treating frontier AI as critical infrastructure.

Anthropic 25 Temmuz 2023

Red teaming language models to reduce harms Red teaming models across scales shows RLHF models become harder to attack as they grow, with a released dataset of 38,961 attacks.

Anthropic 22 Ağustos 2022