Cybersecurity, AI, etc.
Red teaming (offensive research, new TTPs, exploitation techniques, PoC releases, adversary simulation findings)
Summary Security researcher Joshua Rogers has disclosed “Squidbleed” (CVE-2026-47729), a memory leak vulnerability in the Squid web proxy that has existed in the codebase since 1997 — making it 29…
Summary Microsoft researchers have disclosed “AutoJack,” an exploit chain that allows a single malicious webpage to hijack an AI browsing agent and achieve full remote code execution on the host…
Summary Security researchers at Paradigm Shift have publicly disclosed “usbliter8,” a new unpatchable BootROM exploit affecting Apple’s A12 and A13 chips along with S4 and S5 SoCs. The exploit and…
Summary Microsoft has attributed a sweeping supply chain attack on the Mastra AI npm ecosystem to North Korea’s Sapphire Sleet group (also tracked as BlueNoroff/UNC1069). Over 140 packages within the…
Summary Researchers at OALABS (Open Analysis) have published a damning report detailing how a low-skilled attacker successfully breached at least 14 companies using Anthropic’s Claude Code and OpenAI’s Codex as…
Summary Prolific exploit researcher Nightmare Eclipse (also known as Chaotic Eclipse) has publicly released “GreatXML,” a zero-day exploit that bypasses Windows BitLocker encryption by abusing the trust boundary between the…
Summary The DragonForce ransomware group has been caught deploying a custom Go-based backdoor called “Backdoor.Turn” that abuses Microsoft Teams TURN (Traversal Using Relays around NAT) relay servers to disguise command-and-control…
Summary Equixly, an AI-powered offensive security platform, has launched a Model Context Protocol (MCP) integration that embeds continuous penetration testing capabilities directly into AI coding assistants like GitHub Copilot and…
Summary ShinyHunters — the prolific data-theft and extortion group tracked by Mandiant as UNC6240 — has exploited a critical zero-day vulnerability in Oracle PeopleSoft to breach more than 100 organizations,…
Summary The Miasma supply chain worm — an evolved variant of the Mini Shai-Hulud worm family — has dramatically expanded its reach beyond the initial Red Hat NPM compromise. On…