Rosecurify - Seclog

Seclog - #186

2026-07-13T00:00:00Z

In this week's Seclog, the security landscape is heavily influenced by the rapid advancements and inherent risks of artificial intelligence, alongside the persistent threat of deep-seated system vulnerabilities. A critical new attack vector demonstrates remote code execution against major LLMs like Claude and Codex through prompt injections hidden in third-party libraries, highlighting significant supply chain risks in AI integration. Concurrently, a 15-year-old stack-UAF vulnerability, GhostLock, has been revealed in the Linux kernel, enabling widespread privilege escalation and container escapes. The community is also releasing powerful new offensive and defensive tools, ranging from multi-architecture Linux LPE kits and weaponized SSO IdPs to rule-based SAST scanners and AWS attack path playgrounds. Discussions further explore the dual nature of LLMs in cybersecurity, evaluating their benefits for blue teams and vulnerability analysis against concerns about hallucinations, cost, and the diminishing uniqueness of traditional security reports.

📰 SecLinks #

GhostLock: 15-Year-Old Linux Kernel UAF - nebusec.ai

Details the GhostLock (CVE-2026-43499) vulnerability, a stack Use-After-Free (UAF) flaw present in all major Linux distributions for 15 years. This critical bug enables stable privilege escalation and container escape with a 97% success rate, requiring no special kernel configuration or privileges to trigger. The write-up provides deep technical insights into exploiting this long-standing kernel weakness, indicating its significant impact on Linux security.

Redis 8.6 RCE via Stream PEL UAF - zerotistic.blog

Explores a remote code execution (RCE) vulnerability in Redis 8.6, stemming from a Stream PEL Use-After-Free (UAF) bug. The exploit chain combines a specific Redis stream PEL ownership flaw, a malformed RESTORE payload, and a jemalloc size class collision. This intricate combination turns a shared NACK condition into reliable code execution, providing a detailed breakdown of a complex application-level RCE.

Vulnify: Giving AI Agents a CVE Brain - trustedsec.com

Introduces Vulnify, an open-source tool designed to provide AI agents with a "CVE brain" by stitching together data from eight authoritative vulnerability sources. This aims to enhance AI agents' ability to understand, contextualize, and act upon vulnerability information, improving automated security analysis and response.

ModHeader Extension Exfiltrates Browsing History - aydinnyunus.github.io

A security researcher detailed how the popular ModHeader browser extension silently exfiltrates users' browsing history. The data is sent to api.stanfordstudies.com after being encrypted with AES-GCM and stored in IndexedDB, as revealed by a full reverse engineering analysis. This highlights the significant risk posed by malicious browser extensions to user privacy and data security.

ObfusGit Protects Public Repo from AI Training - trustedsec.com

TrustedSec introduced ObfusGit, a Python tool designed to keep public repositories out of AI training data. The tool aims to protect intellectual property and sensitive code from being inadvertently used by AI models, without altering the standard commit workflow.

George Hotz on LLMs and Hype - geohot.github.io

George Hotz shares his perspective on large language models (LLMs), expressing appreciation for their capabilities while criticizing the associated hype. The post provides insights into the practical aspects and potential future of LLMs from a prominent industry figure.

Vulnerability Reports No Longer Special - filippo.io

Filippo Valsorda argues that vulnerability reports are losing their unique value due to the capabilities of large language models (LLMs). He suggests that LLMs can now generate similar insights and analysis, potentially democratizing access to security information that was once exclusive to specialized researchers.

Cotool: AI for Blue Team Security - cotool.ai

Cotool introduces its platform for leveraging AI in blue team operations, focusing on scaling detection, response, and threat hunting. The platform aims to enable security teams to build AI agents across their entire security stack to improve coverage, reduce MTTR, and automate repetitive tasks.

Caeruleus: Consolidated BLE Security Tester - praetorian.com

Praetorian released Caeruleus, a new Go binary designed to consolidate Bluetooth Low Energy (BLE) security testing. It replaces the need for multiple tools like hcitool, bettercap, gatttool, and custom Bleak scripts, streamlining BLE security assessments.

LLMs in SAST: Benefits and Drawbacks - asecurityengineer.com

An analysis of where large language models (LLMs) genuinely assist in static analysis (SAST), specifically in triage, explanations, and hybrid recall/precision. The post also highlights the significant challenges, including hallucinations, concept drift, and the quiet financial burn rate of LLMs at scale in SAST applications.

Recurring Package Manager CWEs Explored - nesbitt.io

An article discussing recurring weakness classes (CWEs) found in various package managers. This research provides insights into common security pitfalls and patterns in package management systems.

LangGraph SQLi to RCE Exploit - research.checkpoint.com

Details an exploit chain transforming a SQL injection (SQLi) into remote code execution (RCE) within LangGraph's checkpointer mechanism. The vulnerability arises from an unsecured persistence layer used by LangGraph, an open-source framework for stateful AI systems, to store execution state. This demonstrates a critical attack vector in AI agent frameworks where memory persistence is not adequately secured.

Web Security Trends: Top 1 Million Sites - scotthelme.co.uk

Scott Helme's latest "Top 1 Million Analysis" provides a comprehensive look at web security trends over the past decade. The report examines the adoption and impact of various security mechanisms across the internet's most visited websites.

🐦 SecX #

Hijacking LLMs for Remote Code Execution - x.com

Researchers demonstrated Remote Code Execution (RCE) against major large language models (LLMs) like Claude (Sonnet/Opus) and Codex (GPT5.5). The exploit leverages prompt injections disseminated within an open-source/third-party library, achieving RCE when the LLM is used for defensive code assessment. This attack requires no specialized skills, JSON, MCP, or config files, highlighting a novel and concerning vulnerability in LLM interaction with external codebases.

💻 SecGit #

Multi-Architecture Linux LPE Toolkit Released - github.com

This open-source toolkit provides 24 pre-built and runtime-compilable exploits for Linux privilege escalation, supporting multiple architectures. It automates kernel version detection and intelligently filters out patched exploits, streamlining the LPE process for penetration testers and red teamers.

Corgea's Rule-Based SAST Scanner - github.com

Introduces Sighthound, Corgea's open-source, rule-based Static Application Security Testing (SAST) scanner. The tool is designed for analyzing codebases to identify vulnerabilities based on predefined rules.

DataDog AWS Attack Path Playground - github.com

DataDog released pathfinding-labs, a multi-account AWS attack path playground. This tool helps security professionals simulate and understand potential attack paths within complex AWS environments.

maSSO: Malicious IdP for SSO Testing - github.com

maSSO is a weaponized Single Sign-On (SSO) Identity Provider (IdP) for security testing of OIDC and SAML 2.0 Service Providers. The tool also supports the SCIM protocol, enabling comprehensive security assessments of SSO implementations.

ScreenScrub: Redact Credentials in Screenshots - github.com

ScreenScrub is an OCR-based tool designed to automatically find credentials in screenshots, save them to a secret manager, and irreversibly redact them from the image. The tool operates locally and offline, ensuring sensitive data doesn't leave the environment during processing.

Coder: Secure Environments for Developers - github.com

The coder project offers secure development environments for developers and their agents. This aims to provide isolated and controlled spaces, enhancing security posture during software development.

Seclog - #185

2026-07-07T00:00:00Z

In this week's Seclog, the dominant story is the collision of AI and offensive security with the classic web-vulnerability grind. On the AI front, autonomous tooling matured sharply: an LLM-driven hackbot logged 126 findings in five months, Claude Opus was walked through a full V8 Chrome exploit chain, and a TOCTOU race showed that computer-use agents can be tricked into clicking something other than what they "see." The rapidly expanding MCP ecosystem emerged as a first-class attack surface, with open Dynamic Client Registration abuse and a Google-assigned CVE (CVE-2026-11719) bypassing scope enforcement via protocol-version selection. Meanwhile, tried-and-true bugs dominated real-world impact — three SQL injections (Control Web Panel, Front Gate Tickets, and a PostgreSQL dollar-quote bypass), stored XSS through storage content-type override, a zero-click CSS oracle exfiltrating Slack DMs, and origin-validation bypasses via IP normalization. Cloud and supply-chain infrastructure took hits too, including unauthenticated RCE in Argo CD (found with CodeQL) and OS command injection in aws-cdk-lib. The throughline: AI is compressing both exploit development and mass discovery, even as fundamental input-validation and access-control flaws remain the bugs that actually get owned.

📚 SecMisc #

Portable Cloud Malware Analysis Lab on AWS - viuleeenz.github.io

Moves a malware analysis environment off fragile local VMs and into AWS to solve snapshot staleness, host slowdown, and "is this box still clean?" uncertainty — a pain point amplified on Apple Silicon where emulation makes local detonation heavy. The rapid-deploy, disposable model gives analysts a known-clean, reproducible environment on demand and scales beyond a single laptop. Practical blueprint for anyone standing up repeatable detonation/sandbox infra in the cloud.

📰 SecLinks #

Control Web Panel userRes SQL Injection - karmainsecurity.com

Egidio Romano (EgiX) discloses a SQL injection in Control Web Panel (CWP) ≤ 0.9.8.1224 via the userRes parameter. CWP is a widely deployed hosting/server control panel, so DB compromise here is high-value and often a stepping stone toward fuller server takeover. Operators should patch/upgrade CWP instances immediately and restrict panel exposure.

Google Messages Leaks Contact Photos Without Permission - blog.devploit.dev

A confused-deputy bug: an app holding no READ_CONTACTS permission coerces the privileged Google Messages app into loading contact photos on its behalf via AvatarContentProvider. This bypasses Android's permission model to exfiltrate contact avatar data through a pre-installed, over-trusted ContentProvider. A reminder to audit exported/privileged ContentProviders for caller-permission enforcement.

TOCTOU Race Tricks Computer-Use Agents - embracethered.com

Reproduces a time-of-check/time-of-use race against computer-use AI agents (in the spirit of the ChatGPT Operator bug) where the UI state the agent evaluates differs from the state at click time. Enables silent redirection/deception of autonomous agents into unintended actions. Argues agentic browsing needs atomic verify-then-act and human confirmation on sensitive operations.

Autonomous Hackbot Finds 126 Vulnerabilities - josephthacker.com

rez0 and xssdoctor detail an autonomous hackbot that surfaced 126 vulnerabilities across five months, evidencing that AI-driven bug discovery now scales meaningfully. The takeaway for defenders: expect higher-volume, automated testing against your assets and treat bounty programs as increasingly essential intake. For hunters, it signals a shift toward orchestrating agents rather than manual-only recon.

MCP Dynamic Client Registration Is a New Attack Surface - blog.voorivex.team

Open Dynamic Client Registration (DCR) on MCP servers exposes a fresh, under-scrutinized surface enabling XSS, OAuth token theft, SSRF, and direct access to "AI-only" tools. As MCP adoption accelerates, loosely-scoped or unauthenticated registration endpoints hand attackers a foothold into LLM tool infrastructure. Lock down DCR, validate redirect URIs, and tightly scope issued tokens.

response-content-type Turns Public Objects Into Stored XSS - blog.voorivex.team

A single response-content-type query parameter on public bucket objects flips a forced image/png into text/html, yielding stored XSS on the target's own origin. MinIO grants it directly; S3 needs one extra step. Any app serving user-controlled bucket content from its own origin is an XSS sink — serve untrusted files from an isolated, sandboxed domain.

Unauthenticated SQL Injection in Front Gate Tickets - ian.sh

Sam Curry finds unauthenticated SQLi in Front Gate Tickets, the Live Nation/Ticketmaster subsidiary handling ticketing/payments for EDC, Bonnaroo, Outside Lands and more. Because many festivals funnel back to the same aging FGT domains, one legacy backend becomes a single point of mass PII/payment exposure. Textbook consolidated-legacy-infrastructure risk in the events industry.

Unauthenticated RCE in Argo CD Found via CodeQL - synacktiv.com

Synacktiv chains an unauthenticated remote code execution in Argo CD, surfaced using CodeQL static analysis. As core GitOps CD infrastructure with cluster-level privileges, a pre-auth RCE here equals full Kubernetes cluster compromise. Doubles as a demonstration of CodeQL's value for deep Go-codebase auditing — patch Argo CD and restrict its network exposure.

Zero-Click CSS Oracle Exfiltrates Slack DMs - iglu.blog

A Slack Block Kit validation bypass via salesforce_record reaches unsanitized client-side sinks, enabling a blind CSS oracle that leaks private DM attributes with zero user interaction. Shows that CSS injection remains a potent exfiltration primitive even in hardened, mature chat platforms. Validation bypass plus a client sink is enough for silent data theft — sanitize rendered attributes and constrain Block Kit inputs.

Dollar-Quote Bypass for Blind PostgreSQL Injection - jrbusiness.github.io

Combines PostgreSQL dollar-quoting to evade quote-based filters, scalar subquery injection, and zero-knowledge blind extraction against PL/pgSQL. Adds a concrete WAF/sanitizer-evasion technique tailored to Postgres backends. Valuable for testers facing quote-focused input filtering, and a reminder that parameterization — not quote escaping — is the real fix.

LLM Writes a Full V8 Chrome Exploit Chain - hacktron.ai

The author drove Claude Opus to build a full V8 exploit chain against Discord's bundled Chrome (v138, nine versions behind) using a Chrome 146 V8 OOB, ultimately popping calc. Cost: ~2.3B tokens, ~$2,283, and ~20 hours of human unsticking — heavy but declining guidance. Two lessons: LLMs are nearing practical browser-exploit development, and outdated bundled Chromium in Electron apps stays dangerously exploitable.

Google MCP Toolbox scopesRequired Authorization Bypass - skypoc.wordpress.com

CVE-2026-11719 (CWE-862) is an authenticated authorization bypass / vertical privilege escalation in Google's MCP Toolbox for Databases, where selecting an older protocol version sidesteps scopesRequired enforcement. Another concrete example of MCP access-control gaps emerging as the ecosystem grows. Update mcp-toolbox and ensure scope checks are enforced uniformly across every supported protocol version.

IP Normalization Bypasses postMessage targetOrigin - lab.ctbb.show

An integer/decimal-encoded IP host slips past a subdomain-matching regex, redirecting postMessage data to an attacker-controlled origin. Demonstrates that regex-based origin validation is bypassable through alternate IP representations. Validate targetOrigin against an exact allowlist of canonical origins rather than pattern matching.

OS Command Injection in aws-cdk-lib - hackerone.com

An AWS VDP report discloses a High-severity OS command injection (CWE-78) in the aws-cdk-lib npm package. Injection in such widely-used Infrastructure-as-Code tooling can execute commands in developer workstation and CI/CD contexts, making it a supply-chain-adjacent risk. Update aws-cdk-lib and audit CDK usage in build pipelines for untrusted input reaching command execution.

Seclog - #184

2026-06-30T00:00:00Z

In this week's Seclog, a dominant theme is the expanding role of Artificial Intelligence across the security landscape, presenting both powerful defensive and offensive capabilities, alongside novel attack surfaces. We observe critical vulnerabilities in widely used software like FFmpeg, which can turn benign media files into weapons, and complex exploit chains in applications like Discuz leading to Remote Code Execution. The discussion around AI extends to its impact on development velocity and security testing, with reports highlighting how AI-assisted coding is outstripping traditional security efforts and how AI is being leveraged for autonomous vulnerability hunting and OSINT. Concurrently, new attack vectors targeting AI models, such as prompt injection framed as role confusion, are gaining prominence, necessitating advanced guardrails. The week also features debates on vulnerability disclosure and CVE allocation, supply chain compromises impacting NPM packages, and new HTTP methods, all contributing to a rapidly evolving threat and defense paradigm.

📚 SecMisc #

New HTTP QUERY Method RFC - rfc-editor.org

RFC 10008 formally introduces the HTTP QUERY method, defining a new standard for data retrieval that could influence future API designs and data interaction models. This development may require security professionals to re-evaluate web application firewall rules, API security policies, and potential new attack vectors associated with a distinct querying mechanism.

📰 SecLinks #

AI Transforming Penetration Testing Report - aikido.dev

This report, based on insights from 400 security and engineering leaders, reveals how AI is fundamentally changing penetration testing practices. Traditional testing methods are struggling to keep pace with modern development speeds, driving expectations for AI-driven solutions to enhance and accelerate vulnerability discovery and assessment.

curl Project's CVE Authority Explained - daniel.haxx.se

The curl project, acting as a CVE Numbering Authority (CNA), maintains autonomous control over allocating CVE identifiers for vulnerabilities within its scope. This authority ensures that decisions regarding CVE assignment are made by project experts, aiming to prevent the proliferation of inaccurate or irrelevant CVEs and streamline the disclosure process.

Comparing AI AppSec Testing Platforms - doyensec.com

This post offers a comparative analysis of AI-powered Application Security Testing (AST) platforms, evaluating their effectiveness and methodologies. Security teams can use this information to assess which AI AST solutions are best suited for integrating into their CI/CD pipelines to proactively identify and mitigate application vulnerabilities.

Hacking an AI Assistant Experiment - fernandoi.cl

An experiment where 2,000 participants attempted to hack an AI assistant provides practical insights into common adversarial techniques against AI models. This highlights the real-world attack surface of AI systems and the types of vulnerabilities, such as prompt injection, that security practitioners need to defend against.

GitHub Actions Read-Only Cache Security - github.blog

GitHub has implemented a read-only Actions cache for workflows triggered by untrusted sources, enhancing CI/CD supply chain security. This change prevents malicious actors from poisoning the cache with arbitrary data, thereby mitigating a significant vector for injection attacks within automated build processes.

Immobiliarelabs NPM Packages Compromised - github.com

A GitHub issue reports the compromise of Immobiliarelabs NPM packages, signaling a potential software supply chain attack. Organizations using these packages must immediately assess their dependency trees for indicators of compromise and prepare for remediation to prevent malicious code execution or data exfiltration.

FFmpeg Vulnerability Exploits Media Files - jfrog.com

A critical vulnerability in FFmpeg, dubbed "PixelSmash," enables attackers to craft malicious media files that can execute arbitrary code upon processing. This transforms commonly shared media into a potent attack vector, posing a significant risk to applications that rely on FFmpeg for media handling.

Discuz RCE via Chained Race Condition - karmainsecurity.com

This write-up demonstrates how to achieve Remote Code Execution (RCE) in Discuz by chaining multiple vulnerabilities, specifically exploiting a race condition. This showcases the critical impact of Time-of-Check to Time-of-Use (TOCTOU) vulnerabilities when combined with other flaws, enabling a complete system takeover.

Google's "Not a Vulnerability" Blind Spot - medium.com

A 19-year-old researcher details a significant security concern in Google's systems that was allegedly dismissed as "not a vulnerability." This incident highlights potential challenges in vulnerability disclosure processes and the disparity between a researcher's assessment of impact and a vendor's internal classification, potentially leaving critical issues unaddressed.

Incident Report: CVE-2026-LGTM Details - nesbitt.io

This incident report details CVE-2026-LGTM, providing insights into a specific vulnerability and its impact. Such reports are invaluable for security professionals to understand the root causes, exploitation techniques, and mitigation strategies for recently disclosed flaws, aiding in proactive defense.

OpenClinic GA XSS to RCE - partywave.site

This research outlines a critical vulnerability, CVE-2026-25860, in OpenClinic GA, demonstrating how a reflected Cross-Site Scripting (XSS) can be escalated to Remote Code Execution (RCE). This illustrates the severe consequences of even seemingly client-side vulnerabilities when they can be leveraged to compromise server-side operations.

AI Coding Impact on Cybersecurity Report - projectdiscovery.io

ProjectDiscovery's 2026 report, based on a survey of 200 cybersecurity practitioners, highlights that while AI-assisted coding significantly speeds up development, it also places immense strain on security teams. This suggests an urgent need for security practices and tools to adapt to the accelerated pace of software delivery to prevent increased vulnerability exposure.

Prompt Injection as Role Confusion - role-confusion.github.io

This article conceptualizes prompt injection attacks against Large Language Models (LLMs) as "role confusion," where attackers manipulate the model's understanding of its assigned persona or instructions. This framework helps in understanding how to design more robust LLM guardrails and develop detection mechanisms for adversarial prompts.

Autonomous 0-Day Hunting with LLMs - zsec.uk

This article explores leveraging Large Language Models (LLMs) for autonomous vulnerability hunting, aiming to discover zero-day exploits at scale. It details how guiding LLMs through security analysis tasks could significantly accelerate offensive security research and uncover novel flaws more efficiently than traditional methods.

💻 SecGit #

AutoGuardrails for LLM Policy Alignment - github.com

AutoGuardrails provides an alignment-research scaffold for developing and testing guardrails for Large Language Models (LLMs), focusing on policy definition. This tool supports security professionals in researching and implementing effective mechanisms to control LLM behavior, thereby reducing risks like hallucination or malicious output.

Graphify: AI Code Knowledge Graph - github.com

Graphify is an AI coding assistant that transforms diverse codebases, SQL schemas, scripts, documents, and multimedia into a queryable knowledge graph. This tool aids security analysts and developers in understanding complex systems by providing an integrated, searchable view of application code, database structure, and infrastructure, facilitating impact analysis and vulnerability identification.

Claude Code Worktree Sandbox Escape - github.com

This GitHub resource documents a sandbox escape vulnerability related to "Claude Code Worktree," likely providing a write-up or proof-of-concept. Security researchers can analyze this to understand exploitation techniques against containerized or virtualized code execution environments, which are common in AI coding assistants and CI/CD pipelines.

Pivot Atlas Penetration Testing Tool - github.com

Pivot Atlas is a GitHub repository likely containing a tool for penetration testing and network pivoting. Security testers can leverage this utility to facilitate lateral movement, reconnaissance, and interaction within compromised networks, enhancing their ability to simulate complex attack paths.

Taranis AI: Advanced OSINT Tool - github.com

Taranis AI is an advanced Open-Source Intelligence (OSINT) tool that leverages Artificial Intelligence for information gathering and situational analysis. This tool can significantly enhance threat intelligence capabilities by automating and refining the collection and correlation of publicly available information, aiding in target profiling and risk assessment.

Seclog - #183

2026-06-23T00:00:00Z

In this week's Seclog, the intersection of advanced cybersecurity threats and the rapidly evolving role of Artificial Intelligence in both offense and defense takes center stage. Several critical vulnerabilities were disclosed, including unauthenticated Remote Code Execution in popular platforms like Joomla JCE and Cisco CUCM, alongside a pre-authentication zero-click RCE in AnyDesk, emphasizing the persistent risk in widely deployed software. Alarmingly, new research provides concrete evidence of threat actors actively utilizing LLMs such as Claude and Codex to facilitate real-world company breaches, signaling a significant shift in adversarial tactics. In response, defensive AI innovations are emerging, with OpenAI launching new tools like Codex Security and Endor Labs introducing AURI Agents designed to automate vulnerability identification and AppSec remediation at scale. The news also covers sophisticated supply-chain compromises delivered through social engineering via fake job offers, and deep dives into memory safety bugs in PHP and critical cryptographic flaws affecting major libraries, underscoring the complex and multi-faceted challenges security professionals face across infrastructure and development lifecycles.

📚 SecMisc #

Bash HTTP Requests Without Curl - mareksuppa.com

This technique demonstrates how to perform HTTP requests in environments where standard tools like curl are absent, utilizing basic /dev/tcp functionality in Bash. This is particularly useful for red team operations or in highly restricted containerized environments to establish C2 or exfiltrate data.

Swift Language in Apple Kernel - blog.calif.io

This article delves into the technical implications of integrating Swift, a memory-safe language, into the Apple kernel. This move promises potential security benefits by reducing common memory-related vulnerabilities but also introduces new complexities and potential attack surface considerations for kernel development.

📰 SecLinks #

Claude Fable 5 System Prompt Disclosed - aiengineerguide.com

The system prompt for Anthropic's Claude Fable 5, a "Mythos-class" model, reveals its internal directives, including extensive safety measures and copyright compliance mechanisms. It details artifact storage capabilities with a key-value system and external tool call logic requiring MCP registry checks, providing insight into its operational security and integration points.

Gogs Reverse Proxy Auth Bypass - tenable.com

A critical authentication bypass vulnerability exists in Gogs when ENABLE_REVERSE_PROXY_AUTHENTICATION is enabled, allowing unvalidated X-WEBAUTH-USER headers directly from clients. This flaw enables remote attackers to impersonate any user or trigger automatic account creation, completely bypassing configured authentication mechanisms.

Joomla JCE Unauthenticated RCE Critical - yeswehack.com

CVE-2026-48907 is a critical pre-authentication Remote Code Execution (RCE) vulnerability found in the Joomla Content Editor (JCE) extension. The existence of public proof-of-concept (PoC) and detailed exploit flow analysis necessitates immediate patching for all affected Joomla installations to prevent severe compromise.

Improving Continuous PR Security Review - projectdiscovery.io

This post highlights the difficulty of identifying security flaws during Pull Request (PR) review, particularly for issues that manifest only at runtime, such as missing permission checks on new API endpoints. It advocates for advanced continuous security review processes that go beyond static analysis to capture behavioral security issues before they reach production.

AI Agents Automate AppSec Remediation - blog.ogwilliam.com

Endor Labs' AURI Agents are introduced as an AI-powered solution to address the persistent AppSec backlog, leveraging open-source plugins for LLMs like Claude, Cursor, and Codex. These agents aim to automate remediation tasks, offering defenders a way to significantly improve efficiency in managing and fixing application security vulnerabilities.

Hackers Leverage Claude, Codex for Breaches - research.openanalysis.net

Captured logs from a compromised honeypot reveal unprecedented evidence of threat actors actively utilizing AI models like Claude and Codex to execute real-world intrusions. This research provides critical insight into how LLMs are being weaponized for red teaming and hacking, demonstrating a new and evolving TTP for cybercriminals.

PHP mb_substr() Size_t Underflow - fereidani.com

A size_t underflow vulnerability in PHP 8.5.7's mb_substr() function, specifically with the 'SJIS-mac' encoding, is caused by bypassing an early empty return guard. This flaw allows execution to fall through to mb_get_substr_slow(), potentially leading to memory corruption, denial-of-service, or remote code execution.

PHP FILTER_SANITIZE_ENCODED Uninitialized Read - fereidani.com

PHP 8.5.7 contains an uninitialized read vulnerability in the php_filter_encode_url function within ext/filter/sanitizing_filters.c. This occurs because the 255th byte of a transient array remains uninitialized after memset(tmp, 1, sizeof(tmp) - 1), potentially leading to information disclosure or unpredictable behavior.

Schneier on AI Export Controls - schneier.com

Bruce Schneier criticizes the US government's classification of Anthropic's Fable AI as a dangerous munition and subsequent export control, arguing it's an ineffective approach. He posits that the core issue lies in the general trend of increasing AI capabilities, not specific models, and emphasizes the need for collective action over isolated restrictions to truly address AI's societal implications.

Critical Ciphertext Formatting Crypto Bug - blog.calif.io

A significant cryptographic vulnerability related to ciphertext formatting has been identified, impacting widely used libraries including OpenSSL, wolfSSL, Bouncy Castle, and GnuPG. Such a flaw can lead to severe consequences like plaintext recovery, signature forgery, or denial-of-service attacks against systems relying on these fundamental cryptographic implementations.

Auth0 Defaults Lead to XSS - elttam.com

This research details how insecure default configurations within the Auth0 identity platform can be exploited to facilitate Cross-Site Scripting (XSS) attacks. Security professionals should review their Auth0 implementations to ensure that default settings are hardened to prevent common XSS vectors from being abused.

Security Context for Vulnerability Discovery - securitycontext.dev

The "Security Context" concept proposes leveraging a repository's historical fix data and disclosed CVEs to provide intelligent agents with relevant information for vulnerability discovery. This approach aims to enhance automated security tools by feeding them a deeper understanding of past vulnerabilities, improving their effectiveness in finding new flaws.

Fake Job Offer NPM Info-Stealer - aydinnyunus.github.io

A social engineering campaign disguised as a freelance job offer utilized a typosquatted npm package (pretie_x1) within a malicious ZIP file. The package deployed a multi-stage, AES-encrypted info-stealer designed to exfiltrate critical data, including browser credentials, crypto wallets, SSH keys, and OS login passwords, highlighting a severe software supply-chain threat.

OpenAI Launches AI Security Tools - openai.com

OpenAI has introduced new "Daybreak" security tools, including Codex Security and GPT-5.5-Cyber, designed to help organizations find, validate, and patch vulnerabilities. This initiative marks OpenAI's entry into defensive cybersecurity, leveraging advanced AI capabilities to scale vulnerability management and enhance organizational security postures.

Cisco CUCM Unauthenticated RCE - ssd-disclosure.com

A critical vulnerability in Cisco Unified Communications Manager (CUCM) allows unauthenticated attackers to perform arbitrary file writes, directly leading to Remote Code Execution (RCE). This severe flaw (CVE-2026-20230) impacts essential enterprise communication infrastructure and requires immediate patching as per vendor advisory.

🐦 SecX #

AnyDesk Preauth 0-Click RCE - x.com

An announcement for "AnyPwn," a pre-authentication, zero-click Remote Code Execution (RCE) vulnerability in AnyDesk, described as a heap buffer overflow. A Proof-of-Concept (PoC) for this highly critical flaw in the widely used remote desktop application is slated for release post-disclosure and vendor patching.

🎥 SecVideo #

Hacking Broken Access Control for Profit - youtube.com

This video details a real-world example of exploiting Broken Access Control vulnerabilities, a common web security flaw, to achieve significant financial gains through bug bounty programs. It provides practical insights and methodologies for identifying and exploiting misconfigured access controls within web applications.

💻 SecGit #

Bumblebee Scans for Supply-Chain Exposure - github.com

PerplexityAI's Bumblebee is a read-only scanner designed to check for exposure to known software supply-chain compromises by analyzing on-disk package, extension, and developer-tool metadata. This tool offers a proactive defense mechanism for identifying compromised software components and ensuring the integrity of development environments.

Authorization Replay Tool Stargazed - github.com

The bscript/authz-replay repository, a tool likely designed for authorization replay, has been starred, indicating growing interest in techniques for testing access control mechanisms. Authorization replay is a crucial method for identifying Broken Access Control vulnerabilities by replaying requests with different user contexts to uncover privilege escalation opportunities.

Threat Tiger Modeling Tool Released - github.com

Threat Tiger is introduced as a modern threat modeling tool, providing a structured approach for identifying potential security threats and vulnerabilities early in the development lifecycle. This open-source project offers a valuable resource for security teams to integrate proactive threat analysis into their software development processes.

Seclog - #182

2026-06-15T00:00:00Z

In this week's Seclog, the cybersecurity landscape reveals a significant confluence of AI's burgeoning role, sophisticated vulnerability exploitation techniques, and critical supply chain threats. Artificial intelligence is emerging as a double-edged sword, demonstrating its capability to accelerate vulnerability discovery and exploitation, even leading to substantial bug bounties against major tech infrastructures. This rapid evolution is prompting a reevaluation of traditional security practices, including the efficacy of standard vulnerability disclosure timelines. Furthermore, new research highlights severe vulnerabilities ranging from pre-authentication RCEs in enterprise systems like Splunk and XSS-to-RCE chains in platforms like MeshCentral, to intricate bypasses for SVG sanitizers and bitlocker encryption. The persistent challenge of exposed services, such as nearly a million unauthenticated RTSP streams, underscores widespread internet hygiene issues. Alongside these threats, dedicated efforts in offensive security tools and threat intelligence, like the Shai-Hulud framework and insights into the Phantom Mantis operation, continue to equip defenders and illustrate the complex nature of modern cyber adversaries.

📰 SecLinks #

Arbitrary Code Execution in objdump - blog.calif.io

This research details a novel method to achieve arbitrary code execution within objdump -g by exploiting specific vulnerabilities. It introduces "Relocation Oriented Programming" as a sophisticated technique for leveraging these flaws to gain control.

Shai-Hulud Offensive Framework Open-Sourced - securitylabs.datadoghq.com

This article announces the open-sourcing of the Shai-Hulud offensive framework, attributed to TeamPCP, providing an opportunity for defenders to study its mechanisms. A static analysis details its capabilities, including credential harvesting, supply chain poisoning, and data exfiltration techniques.

Client-Side JWT Security Toolkit - jwtforge.com

JWTForge introduces itself as an attacker-minded, fully client-side toolkit designed for comprehensive JWT security testing and attack simulations. A key feature is its commitment to privacy, ensuring all operations occur directly within the browser and no sensitive data ever leaves the client machine.

MeshCentral XSS to RCE Chain - techanarchy.net

This write-up details a complete exploit chain, demonstrating how a Cross-Site Scripting (XSS) vulnerability can be escalated to Remote Code Execution (RCE) within the MeshCentral platform. It also highlights the growing discussion around advanced models, like LLMs, potentially accelerating the discovery and exploitation of such vulnerabilities at scale.

Splunk Pre-Auth RCE (CVE-2026-20253) - labs.watchtowr.com

This research exposes a critical pre-authentication Remote Code Execution (RCE) vulnerability in Splunk Enterprise, tracked as CVE-2026-20253. The article provides a critical analysis of architectural shortcomings, specifically questioning the reliance on application-level authentication when robust database authentication mechanisms are often available.

Global Analysis of Exposed RTSP - modat.io

A global scan identified nearly a million RTSP video services exposed on the open internet, with a significant portion lacking any authentication. This widespread exposure poses severe privacy and security risks, enabling unauthorized access to live video feeds, including sensitive locations like server facilities and areas within conflict-affected countries.

AI-Powered Google Infrastructure Hacking - brutecat.com

This report details an experiment showcasing the effectiveness of using AI to scan and exploit vulnerabilities across Google's vast infrastructure. The project successfully uncovered numerous exploitable flaws across 1,500 APIs and 3,600 keys, ultimately leading to significant bug bounty payouts.

Phantom Mantis Operation Threat Intelligence - catalyst.prodaft.com

This in-depth threat intelligence report provides a comprehensive overview of "Phantom Mantis," a financially motivated threat group also known as ArmCorp and The Gentlemen, active since March 2025. It details the group's operational evolution, including its shift from a RaaS dependency to an independent partnership, and identifies key administrators and their aliases.

Next.js 0-Click SXSS via Reflection - zhero-web-sec.github.io

This research uncovers a 0-click Stored Cross-Site Scripting (SXSS) vulnerability affecting Next.js, which stems from issues related to excessive reflection and type confusion. The findings highlight how cache-related mechanisms within the framework can be maliciously manipulated to achieve persistent client-side code execution.

JSON Formatter Data Exposure Risks - beyondmemory.io

This post discusses the critical risks of data exposure that can arise from using online JSON formatter tools, potentially leading to the leakage of sensitive information. It underscores the necessity for security professionals to exercise extreme caution and implement secure practices when utilizing web-based tools that process any form of sensitive data.

Astro Config Blockchain C2 Attack - safedep.io

This analysis details a sophisticated supply chain attack executed through an obfuscated Immediately Invoked Function Expression (IIFE) embedded within astro.config.mjs. The attack leverages a multi-stage approach where the malicious code beacons an HTTP Command and Control (C2) server and then retrieves further staged commands from a Tron-to-BSC blockchain dead drop.

GoGatoZ: GitLab CI/CD Auditing - blackhillsinfosec.com

This article introduces GoGatoZ, a purpose-built Go tool designed for comprehensive security auditing of GitLab CI/CD pipelines. The tool automates the entire CI/CD kill chain analysis, providing advanced capabilities beyond what custom one-off scripts can achieve for identifying and assessing security weaknesses.

90-Day Disclosure Policy Obsolete - blog.himanshuanand.com

This opinion piece argues that the traditional 90-day responsible vulnerability disclosure policy is no longer sustainable in an era of rapidly evolving AI-driven exploit development. It advocates for immediate patching of critical security issues, urging the industry to treat such vulnerabilities as P0 due to significantly accelerated threat timelines.

Mozilla Stored XSS via SVG Bypass - profile-chi-jade.vercel.app

This research demonstrates a successful and sophisticated bypass of a three-layer SVG sanitizer implemented in Mozilla products. The findings detail how malicious actors can achieve stored Cross-Site Scripting (XSS) through clever manipulation of SVG content, highlighting the challenges of robust content sanitization.

Deriving PID from Random Numbers - blog.ikaes.de

This technical deep dive explores a highly intricate method for deducing Process IDs (PIDs) from seemingly random numbers generated by the operating system. It delves into the underlying mechanisms of OS internals and predictable patterns in number generation that could potentially be exploited for process enumeration.

Siri AI: Private Inference Limitations - blog.cryptographyengineering.com

This analysis examines the privacy implications associated with AI-powered agents like Apple's Siri, specifically focusing on the concept of "private inference." The author argues that current private inference techniques might not provide sufficient privacy guarantees for user data, raising concerns about the true confidentiality of personal interactions with AI assistants.

🎥 SecVideo #

Cloud Security in the AI Era - youtube.com

This event announcement from AI Connect Istanbul highlights the critical intersection of artificial intelligence and cloud security. It aims to foster knowledge sharing and discussions within the AI technology ecosystem regarding contemporary security challenges.

💻 SecGit #

Visa Vulnerability Agentic Harness - github.com

This repository from Visa introduces a "Vulnerability Agentic Harness," suggesting a framework designed to automate or assist in the discovery and analysis of software vulnerabilities.

Its "agentic" nature implies intelligent or autonomous capabilities in identifying potential security weaknesses.

GreatXML Bitlocker Bypass Vulnerability - git.projectnightcrawler.dev

This repository identifies and details a Bitlocker bypass vulnerability specifically linked to the GreatXML project.

It suggests a method to circumvent Bitlocker encryption through an XML-related attack vector, potentially allowing unauthorized access to encrypted data.

Axois Supply Chain CVE Analysis - github.com

This repository provides an in-depth analysis of CVE-2026-26555, focusing on a supply chain vulnerability affecting the popular axios HTTP client library.

It offers valuable technical insights and resources for understanding the impact and mitigation strategies for this critical supply chain attack vector.

openhackai - github.com

This entry notes that a prominent community member has starred the openhackai/openhack repository.

It signifies growing interest in projects that explore the intersection of artificial intelligence and hacking techniques.

Depx - github.com

This repository offers intelligence on malicious packages and supply chain threats.

It provides tools to detect and analyze compromised dependencies across various ecosystems.

Designed for security teams to proactively assess supply chain risks.

Seclog - #181

2026-06-08T00:00:00Z

In this week's Seclog, Artificial Intelligence emerges as the central force dramatically reshaping the cybersecurity landscape, influencing both offensive and defensive strategies, while simultaneously expanding the attack surface. Several reports highlight the extraordinary capabilities of AI models and autonomous agents, such as Codex and Claude Opus, in discovering critical zero-day vulnerabilities and long-latent bugs in complex systems like FFmpeg and FreeBSD with unprecedented speed and cost-efficiency. This rapid advancement in AI-driven vulnerability research prompts an urgent re-evaluation of security engineering practices and vulnerability disclosure policies, advocating for accelerated remediation and automated patching. Concurrently, the integration of AI into development workflows and applications introduces novel attack vectors, exemplified by supply chain compromises targeting AI coding agents (Miasma worm), prompt injection vulnerabilities in LLM-integrated tools (ChatGPT for Google Sheets), and significant flaws in Meta's AI features leading to account takeovers. While traditional vulnerabilities like OAuth 2.0 attack chains, WAF bypasses, and argument injection persist, often amplified by incomplete patches or complex bug chains, the overarching narrative is clear: AI is not merely a new technology but a fundamental game-changer, demanding an evolution in security strategies to navigate its profound impact on vulnerability discovery, exploitation, and defense.

📚 SecMisc #

Agentic System Vulnerability Coverage Map - vuln.cs.berkeley.edu

This resource provides a daily updated coverage map of vulnerabilities specifically discovered by agentic AI systems. It offers a unique perspective on the evolving capabilities of AI in vulnerability research, tracking how effectively these systems identify security flaws from public CVE feeds.

📰 SecLinks #

Future of Security Engineering in AI Era - semgrep.dev

Traditional security practices are failing to keep pace with the exponential growth of code and vulnerabilities, largely driven by AI-assisted development. The article highlights the urgent need for security tools and methodologies to evolve, suggesting a shift towards adaptive and AI-integrated solutions to remain relevant and effective.

OAuth 2.0 Vulnerabilities and Attack Chains - blogs.jsmon.sh

OAuth 2.0 and OpenID Connect (OIDC) remain a prevalent source of vulnerabilities in production systems despite their widespread use. The article details specific attack chains including iss+sub confusion, redirect_uri path traversal, and token leakage via referer, providing insight into common misconfigurations and exploitation vectors in SSO and API access integrations.

HTTP/2 Framing Bypasses WAF Protection - lab.ctbb.show

The research discusses techniques for bypassing Web Application Firewalls (WAFs) by manipulating HTTP/2 framing. This indicates a potential blind spot for WAFs and highlights the need for deeper protocol-level inspection to prevent attacks.

Malicious Codex UI Tool Steals OpenAI Tokens - hackread.com

A popular Codex UI tool, downloaded 27,000 times, was found to secretly exfiltrate OpenAI refresh tokens. This highlights the risk of supply chain attacks within development tools, where seemingly legitimate applications can harbor malicious functionality, leading to credential compromise.

phpBB Blind SSRF via Web Push - hackerone.com

A critical vulnerability in phpBB was disclosed, detailing a blind POST Server-Side Request Forgery (SSRF) achievable through the Web Push feature. This exploit demonstrates how seemingly innocuous features can be abused to trigger internal network requests, potentially leading to information disclosure or further internal network attacks in cloud environments.

Samsung S25 APK Install Bug Chain - bugscale.ch

A complex five-bug chain in the Samsung Galaxy Store on the S25 allows for arbitrary local APK installation. This chain exploits weak signature verification, an unprotected exported receiver, path traversal, predictable randomness, and a denial-of-service bug, demonstrating how multiple seemingly minor flaws can combine for critical impact.

Cross-Site Scripting in Shazzer Tool - jorianwoltjer.com

The post details the discovery of an XSS vulnerability within Shazzer, a browser fuzzing tool. It highlights the use of Blob URLs as a technique to bypass content security policies and unsandbox malicious content, providing valuable insights into XSS exploitation methods.

Zero Trust Framework for AI Agents - claude.com

This article outlines a Zero Trust framework designed specifically for deploying autonomous AI agents within enterprise environments. It addresses emerging threats, proposes a tiered architecture, and suggests an eight-phase implementation workflow, including agentic SOAR, to secure the integration of AI.

Grafana Misconfiguration Led to Meta Repo Access - sectricity.com

A critical blog post details a five-hop bug chain originating from a misconfigured Grafana instance on a Meta IP. This chain ultimately allowed access to 507 private Meta repositories, illustrating the severe impact of seemingly minor misconfigurations when chained together.

AI Uncovers FreeBSD Kernel Vulnerabilities - blog.calif.io

An AI-driven audit of FreeBSD uncovered 15 kernel bugs, including three Remote Code Executions (RCEs), five Local Privilege Escalations (LPEs), and one bhyve escape. This demonstrates the growing efficacy of AI in identifying deep-seated and critical vulnerabilities within core operating system components.

Codex Uncovers Hidden HTTP/2 Compression Bomb - blog.calif.io

The article announces the discovery of a previously missed HTTP/2 "bomb" attack, uncovered by the AI system Codex. This attack leverages HTTP/2 header compression to create a denial-of-service vulnerability, demonstrating AI's capability to find sophisticated flaws even in well-reviewed protocols.

Gogs RCE via Argument Injection Still Unfixed - rapid7.com

Rapid7 researchers identified an authenticated Remote Code Execution (RCE) vulnerability in Gogs, exploitable via argument injection through a specially crafted branch name in pull requests. The fact that this vulnerability remains unfixed poses an ongoing risk for users, emphasizing the persistence of critical flaws when patches are not promptly applied or released.

Claude Code Supply Chain Attack via GitHub Actions - flatt.tech

Research details a critical vulnerability in Claude Code’s GitHub Actions that could allow attackers to compromise any repository using the Claude Code workflow, including Anthropic’s own. This highlights a severe supply chain attack vector through AI-integrated development workflows, especially concerning given that similar misconfigurations were actively exploited in the wild.

ChatGPT for Sheets Vulnerable to Data Exfiltration - promptarmor.com

The ChatGPT for Google Sheets integration is susceptible to data exfiltration and phishing overlay attacks. These attacks are triggered by an indirect prompt injection in a single sheet, demonstrating a critical vulnerability where AI assistants can be manipulated to compromise entire user accounts and sensitive workbook data.

Instagram Account Takeover Fiasco Examined - 0xsid.com

This article discusses a recent Instagram exploit that allowed account takeovers, labeling it as a "goofiest" exploit due to its unexpected nature. While specific technical details aren't provided in the snippet, it implies an unusual or easily overlooked vulnerability that led to significant account compromise.

Jellyfin RCE via FFmpeg Argument Injection - sonarsource.com

A remote code execution (RCE) flaw in Jellyfin is detailed, stemming from inconsistent validation that permits FFmpeg argument injection. This vulnerability allows for unauthenticated code execution, presenting a critical risk to systems running vulnerable Jellyfin instances.

Jellyfin RCE via FFmpeg Argument Injection - sonarsource.com

A remote code execution (RCE) flaw in Jellyfin is detailed, stemming from inconsistent validation that permits FFmpeg argument injection. This vulnerability allows for unauthenticated code execution, presenting a critical risk to systems running vulnerable Jellyfin instances.

Redis DarkReplica Use-After-Free RCE - zeroday.cloud

DarkReplica (CVE-2026-23631) is a critical post-authentication Use-After-Free vulnerability found in Redis's replication subsystem. This flaw allows arbitrary code execution by exploiting master-replica synchronization during Lua script execution, enabling control over the freed Lua engine.

VSCode Bug Enables 1-Click GitHub Token Theft - blog.ammaraskar.com

A significant vulnerability in VSCode allows for 1-click GitHub token stealing. This highlights a severe security risk within popular developer tooling, where a simple interaction can lead to the compromise of sensitive credentials and access to GitHub repositories.

LLM-Driven Vulnerability Research with Claude - claroty.com

Claroty Team82 demonstrated the effectiveness of LLM-driven vulnerability research using Anthropic’s Claude Opus 4.6. The AI model was instrumental in uncovering new vulnerabilities in a Zenitel video intercom platform, complementing prior manual research and showcasing the efficiency of AI in identifying security flaws.

Miasma Worm Supply Chain Attack on Microsoft AI Agents - stepsecurity.io

The Miasma worm campaign executed a supply chain attack targeting AI coding agents, leading to the disabling of 73 repositories across Microsoft's Azure GitHub organizations. The attack involved a malicious commit to Azure/durabletask, planting configuration files that execute credential-harvesting payloads when opened in popular AI-enabled development tools like Claude Code, Gemini CLI, Cursor, or VS Code.

Miasma npm Worm Bypasses Security Tools - stepsecurity.io

The Miasma worm is actively spreading across the npm registry through a novel supply chain attack utilizing binding.gyp to trigger code execution during npm install. This technique effectively bypasses conventional security tools that monitor package.json scripts, leading to the compromise of numerous packages and maintainer accounts.

Testing LLMs for Vulnerability Exploitation - kasra.blog

A researcher built a deliberately vulnerable application to test the capabilities of LLMs in reproducing common exploit classes. This experiment provides empirical data on the effectiveness and cost of using AI for offensive security research, specifically for identifying and exploiting known vulnerabilities.

AI Reshapes Vulnerability Disclosure Landscape - schneier.com

Melissa Hathaway's article argues that AI is fundamentally altering vulnerability discovery and remediation, with frontier AI models autonomously finding exploitable flaws at unprecedented speed. This necessitates a shift from reactive to coordinated national and international resilience efforts, emphasizing accelerated remediation, large-scale patch management, and investment in automated vulnerability repair before adversaries capitalize on this rapidly closing window.

AI Security Scanning Uncovers 17 Bugs - lalitm.com

AI security scanning efforts rapidly identified 17 bugs within a 10-week period, demonstrating its efficiency in uncovering vulnerabilities. This highlights AI's capability to address the "long tail" of software security, bringing much-needed attention to areas historically overlooked by human efforts due to scale or complexity.

Autonomous AI Agent Finds 21 FFmpeg Zero-Days - depthfirst.com

A production autonomous security agent from depthfirst discovered 21 zero-day vulnerabilities in FFmpeg, some latent for 15-20 years, even after intense human analysis. The agent not only identified these flaws but also generated concrete, reproducible Proof-of-Concept (PoC) inputs at significantly lower costs, including a working RCE exploit primitive, showcasing AI's advanced capability in zero-day discovery.

HTTP/2 DoS Chain Discovered by AI Codex - blog.kybervandals.com

This post discusses a new HTTP/2 Denial-of-Service (DoS) technique discovered by the AI system Codex, chaining two vulnerabilities previously known to humans for a decade. The attack, combining a compression bomb with another technique, highlights AI's capability to discover novel attack paths by connecting existing knowledge, posing a significant threat to internet infrastructure.

Incomplete Patches Lead to Recurring CVEs - pentesterlab.com

The article explains why security patches frequently fail to fully address their target vulnerabilities, focusing on incomplete fixes for SSRF and directory traversal CVEs. It emphasizes the importance of thorough patch analysis for security professionals to understand developer mistakes and enhance code review and web hacking skills.

Multiple Django Vulnerabilities Disclosed - openwall.com

This oss-security mailing list entry announces the disclosure of multiple CVEs affecting Django, specifically CVE-2026-6873, CVE-2026-7666, CVE-2026-8404, CVE-2026-35193, and CVE-2026-48587. The collective disclosure indicates a batch of critical security updates for the Django framework, necessitating immediate attention from developers to patch these vulnerabilities.

Practitioner's Guide to AI-Enhanced Hacking - caido.io

This guide provides practical insights into utilizing AI for enhanced hacking techniques, offering a resource for security practitioners. It suggests that AI can significantly augment offensive security operations, accelerating vulnerability discovery and exploitation.

🐦 SecX #

Meta AI Feature Allows Instagram Account Takeover - x.com

A Meta AI feature allowed attackers to hijack Instagram accounts, including high-profile ones like the official Obama White House account, using only a username. This vulnerability, active during A/B testing and non-disablable for affected users, underscores the severe risks associated with rapid AI deployment without robust security vetting, enabling widespread account compromise.

💻 SecGit #

Tesla Infotainment System Vulnerabilities Revealed - github.com

This GitHub repository details extensive vulnerability research on Tesla Model 3/Y infotainment systems, uncovering 6 vulnerabilities and 4 CVEs (CVE-2022-42005 to CVE-2022-42008). The findings include methods to achieve root shell access, persistent control, and even spoof insurance telemetry, demonstrating critical security risks in automotive software.

Anthropic Defending Code Reference Harness - github.com

This GitHub repository from Anthropic provides a reference harness for defending code, focusing on threat modeling, scanning, triage, and patching. It includes an autonomous scanning harness that can be customized, indicating a shift towards AI-powered defensive security operations.

PROMPTPurify: LLM Prompt Injection Guardrail - github.com

PROMPTPurify is an open-source prompt-injection guardrail designed for LLM applications, available on GitHub. It boasts a compact model that reportedly outperforms larger open-source alternatives without relying on regex or signatures, offering a potentially more robust defense against AI-specific attacks.

Seclog - #180

2026-06-01T00:00:00Z

In this week's Seclog, the pervasive integration of Artificial Intelligence across the security landscape stands out as a dominant theme, showcasing both its utility in defense and its introduction of novel attack vectors. Several articles detail advanced exploit chains and intricate bypass techniques, affecting everything from developer tools and widely used protocols like OAuth 2.0 to critical infrastructure like WAFs. The role of AI as an attack surface is critically examined through vulnerabilities in AI-driven features and connectors, emphasizing the need for robust security frameworks like Zero Trust for AI agents. Simultaneously, the community continues to share deep dives into traditional bug hunting, client-side authentication bypasses, and complex privilege escalation paths across various platforms. This collection underscores the dual challenge of leveraging AI for security while securing AI itself, all while the fundamental principles of vulnerability research remain as crucial as ever.

📚 SecMisc #

Cyber Education for Children - cyberkinder.com

Presents CyberKinder, an interactive learning platform designed to teach children about coding, cybersecurity, AI, and online safety.
Utilizes short, engaging games to deliver educational content in a child-friendly environment.

📰 SecLinks #

Hardening CTF Challenges Against AI - danisy-eisyraf-portfolio.super.site

Addresses the rising trend of AI utilization in CTF competitions by challenge creators.
Explores strategies for designing CTF challenges that specifically resist AI-driven solutions.

Neo: AI Security Engineer Framework - projectdiscovery.io

Introduces Neo, a cloud-based AI designed to function as a security co-engineer within teams.
Highlights Neo's framework architecture, which combines LLM reasoning with specialized execution tools, sandboxed environments, and a persistent memory layer for learning system specifics.

Advanced GitHub Phishing for Red Teams - atsika.ninja

Details a red team methodology for sophisticated GitHub phishing, exploiting TOCTOU race conditions.
Demonstrates how to trick developers into authorizing malicious OAuth applications for initial access, effectively bypassing MFA through trusted infrastructure.

JavaScript Analysis for Pentesters - kpwn.de

Provides guidance on analyzing JavaScript code, a crucial skill for penetration testers.
Focuses on techniques to identify client-side vulnerabilities and understand application logic through script examination.

Security Risks in AI Integrations - kamilsecnotes.blogspot.com

Discusses security implications arising from integrating AI components, specifically referencing a Claude Desktop plugin.
Highlights the potential for supply chain risks and insecure configurations introduced by third-party AI extensions.

Claude AI Connector Security Database - claudesec.pluto.security

Introduces ClaudeSec, a resource dedicated to tracking and assessing security risks in Claude AI connectors, plugins, and extensions.
Aids in identifying vulnerabilities and understanding risk ratings within the Claude ecosystem, offering security guidance for developers and users.

Native Frida Build on Termux - qbtau.in

Explores the process and challenges of compiling Frida natively on Android using Termux, bypassing the Android NDK.
Offers insights into setting up and troubleshooting a mobile dynamic instrumentation toolkit in a non-standard environment.

Real-World Client-side Auth Bypass - synack.com

Provides an in-depth analysis of client-side authentication bypass vulnerabilities through three real-world case studies.
Illustrates practical methodologies for identifying and exploiting weaknesses in frontend authentication mechanisms during penetration testing.

VSCode Extensions for Initial Access - mdsec.co.uk

Details a red team technique involving the use of malicious VSCode extensions to gain initial access in targeted phishing campaigns.
Focuses on exploiting developer trust in IDE environments to compromise technical users.

Security Engineering in AI Era - semgrep.dev

Examines the future role of security engineers in an era of rapidly increasing code volume and AI-generated code.
Argues for the critical need for security tools and practices to evolve and adapt to the changing landscape of software development to remain relevant.

OAuth 2.0 Vulnerability Chains - blogs.jsmon.sh

Details complex attack chains against OAuth 2.0 and OpenID Connect, exploiting issues like iss+sub confusion and redirect_uri path traversal.
Explains how token leakage via Referer headers can compromise these widely adopted authentication protocols in production systems.

WAF Bypasses with h2 Framing - lab.ctbb.show

Investigates novel techniques for bypassing Web Application Firewalls (WAFs) by manipulating HTTP/2 (h2) framing.
Provides technical insights into how specific h2 framing anomalies can evade WAF detection mechanisms.

MCP Bug Hunting in AI Security - sallam.gitbook.io

Discusses methods and strategies for bug hunting within the context of AI security, specifically focusing on "MCP" (Machine Learning, Cloud, Privacy).
Provides guidance for identifying vulnerabilities in AI-driven systems and integrations.

Malicious README Steals Cursor Keys - 0din.ai

Demonstrates an attack vector where a malicious GitHub README can exploit Cursor IDE via prompt injection.
Shows how this technique can exfiltrate sensitive environment variables and API keys, leveraging user habit of auto-allowing powershell -c commands.

Malicious Codex Tool Stole OpenAI Tokens - hackread.com

Reports on a popular Codex UI tool (with 27,000 downloads) that was found to be secretly exfiltrating OpenAI refresh tokens.
Highlights the significant supply chain risk associated with widely adopted third-party tools and applications.

phpBB Blind SSRF via Web Push - hackerone.com

Details a blind POST Server-Side Request Forgery (SSRF) vulnerability found in phpBB, exploitable via Web Push functionality.
Illustrates how to leverage this vulnerability to trigger outbound connections from the server without direct response visibility.

Measuring Nginx RCE Vulnerability Impact - blog.calif.io

Analyzes the widespread impact and exploitability of two critical Nginx Remote Code Execution (RCE) vulnerabilities.
Discusses methodologies for assessing the prevalence and potential damage of high-severity flaws in widely deployed web server software.

Self-XSS to One-Click Account Takeover - zere.es

Documents an elaborate exploit chain transforming a seemingly innocuous self-XSS in a sanitized name field into a one-click account takeover.
Highlights the importance of persistent client-side vulnerability assessment and chaining multiple bypasses to achieve critical impact.

Samsung S25 Arbitrary APK Install - bugscale.ch

Details a five-bug exploit chain in the Samsung Galaxy Store leading to arbitrary local APK installation on the Samsung S25.
The chain leverages weak signature verification, unprotected exported receivers, path traversal, predictable randomness, and a denial-of-service vulnerability.

XSS Vulnerability in Shazzer Tool - jorianwoltjer.com

Describes the discovery of an XSS vulnerability within Shazzer, a browser fuzzing tool, rather than through its use.
Explores advanced XSS exploitation techniques, specifically focusing on Blob URLs to bypass sandboxing and execute malicious content.

Zero Trust Framework for AI Agents - claude.com

Proposes a Zero Trust framework specifically designed for the secure deployment of autonomous AI agents within enterprise environments.
Outlines a tiered architecture and an eight-phase implementation workflow to mitigate threats, including the integration of agentic SOAR capabilities.

Evolving Exploit Chains in LiteLLM - starlabs.sg

Analyzes the rapid evolution of four distinct exploit chains discovered in LiteLLM, a tool related to large language models.
Highlights the dynamic nature of vulnerability exploitation and patch evasion in AI-adjacent software.

Agentic Vulnerability Coverage Map - vuln.cs.berkeley.edu

Introduces a daily updated coverage map visualizing vulnerabilities discovered by agentic AI systems.
Serves as a dynamic resource for tracking the effectiveness and scope of AI in automated vulnerability discovery, sourced from public CVE feeds.

Grafana Misconfiguration to Meta Repos - sectricity.com

Details a five-hop exploit chain originating from a misconfigured Grafana instance on a Meta IP.
Explains how this misconfiguration allowed access to 507 private Meta repositories, showcasing the critical impact of even seemingly minor configuration flaws.

AI Discovers FreeBSD Kernel Bugs - blog.calif.io

Reports on an AI-driven security audit of FreeBSD that uncovered 15 kernel bugs.
The findings include critical vulnerabilities such as 3 Remote Code Executions (RCEs), 5 Local Privilege Escalations (LPEs), and 1 bhyve hypervisor escape.

Gogs Authenticated RCE Unfixed - rapid7.com

Reveals an authenticated Remote Code Execution (RCE) vulnerability in Gogs, exploitable via argument injection.
Explains how an authenticated user can achieve RCE by crafting a malicious branch name within a pull request, noting the vulnerability remains unfixed.

🐦 SecX #

Meta AI Feature Hijacked Instagram Accounts - x.com

Reports a critical vulnerability in a Meta AI feature that allowed attackers to hijack Instagram accounts using only a username.
Notes that the flaw was active during A/B testing, impacting high-profile accounts like the official Obama White House account.

💻 SecGit #

Agentic AI Vulnerability Scanner - github.com

Introduces Vigolium, an open-source, high-fidelity vulnerability scanner that leverages agentic AI for enhanced precision.
Designed for speed and modularity, combining AI reasoning with native execution for effective vulnerability detection.

Tesla Infotainment System Vulnerabilities - github.com

Presents extensive vulnerability research on Tesla Model 3/Y infotainment systems, identifying six vulnerabilities and four CVEs (CVE-2022-42005 to CVE-2022-42008).
Details how these flaws enable root shell access, persistent compromise, and even spoofing of insurance telemetry data.

Seclog - #179

2026-05-25T00:00:00Z

In this week's Seclog, the security landscape is heavily influenced by the burgeoning role of artificial intelligence, both as a critical new attack surface requiring robust defense strategies and as an emerging tool for vulnerability discovery and red teaming. Simultaneously, traditional yet potent vulnerabilities continue to pose significant threats, with multiple disclosures detailing critical SQL injection flaws, remote code execution in widely used platforms like Drupal and Apache, and intricate account takeover techniques leveraging JWT and OAuth mechanisms. A strong emphasis is placed on proactive supply chain security, highlighting the reactive nature of CVEs and the need for earlier detection within CI/CD pipelines. Furthermore, the reports showcase advanced exploitation techniques, from browser sandbox escapes to cloud infrastructure compromise, alongside insights into the evolving dynamics of bug bounty programs and the challenges presented by AI in CTFs.

📚 SecMisc #

Flipper One vs. Flipper Zero Comparison - mobile-hacker.com

Compares the Flipper One with the Flipper Zero, detailing advancements and new features such as the Flipper One's capability as a portable Linux PC.

HTTP Proxy for Secret Management - blog.exe.dev

Argues for the strategic placement of secret management within an HTTP proxy, particularly for handling third-party integrations.
Highlights how proxies can securely manage HTTP headers to prevent sensitive data exposure.

📰 SecLinks #

The Downfall of Bug Bounties - shubs.io

Examines the current challenges and evolving landscape of bug bounty programs, discussing factors that may contribute to their perceived decline. Explores the experiences of researchers and platforms, potentially touching on reward structures and submission quality.

RITSEC CTF: Humans vs. LLMs - sylvie.fyi

Explores the difficulties and successes of organizing a Capture The Flag (CTF) competition specifically designed to challenge human participants against LLM-driven adversaries or solutions. Provides insights into designing competitive hacking events that account for AI's capabilities, aiming to maintain a focus on human ingenuity.

Securing Enterprise LLM Deployments - fortbridge.co.uk

Provides a comprehensive guide on best practices for securing Large Language Model (LLM) implementations within an enterprise context. Covers critical areas such as secure deployment strategies, effective threat mitigation techniques, robust governance frameworks, and continuous monitoring requirements for AI systems.

Critical SQL Injection in Drupal PostgreSQL - yeswehack.com

Details a highly critical SQL injection vulnerability (CVE-2026-9082) impacting Drupal installations when utilizing PostgreSQL as the backend database. Highlights a severe flaw allowing arbitrary database interaction by unauthenticated users, potentially leading to data compromise or unauthorized access to the system.

Benchmarking LLMs for Pentesting - purpleshift.io

Presents a comparative analysis evaluating the performance of multiple local Large Language Models (LLMs) in their ability to identify security vulnerabilities. Demonstrates the practical application and effectiveness of AI models in automated penetration testing and security assessment scenarios.

JWT Algorithm Confusion to Account Takeover - blogs.jsmon.sh

Analyzes three critical attack classes against JSON Web Tokens (JWTs): RS256 to HS256 algorithm confusion, JKU injection, and kid SQL injection. Explains how these vulnerabilities, responsible for multiple recent CVEs, can be weaponized to forge tokens and achieve full account takeover in modern web applications and APIs.

Redirect Discrepancies Leak URL Secrets - ethiack.com

Uncovers a novel technique to exfiltrate sensitive information embedded in URLs by exploiting inconsistencies in how different systems handle HTTP redirects. Details how secrets can be leaked through carefully crafted redirect chains, posing a risk to data confidentiality.

Apache.NMS.AMQP Deserialization RCE - core-jmp.org

Describes CVE-2025-54539, an unauthenticated Remote Code Execution (RCE) vulnerability found in Apache.NMS.AMQP (versions ≤ 2.3.0). Explains how a 290-byte AMQP message can bypass deserialization policies, triggering BinaryFormatter execution for arbitrary command execution on .NET clients.

Google Cloud RCE Earns Big Bounty - brutecat.com

Details "StubZero," a significant Remote Code Execution (RCE) vulnerability discovered in Google Cloud's production environment. Highlights a high-impact bug bounty discovery, illustrating critical weaknesses in complex cloud infrastructure that can lead to substantial payouts.

Red Teaming Cloud with Neo - projectdiscovery.io

Introduces "Neo," a tool or methodology designed for red-teaming cloud infrastructure environments. Focuses on techniques and strategies for simulating advanced attacks to effectively assess the security posture and resilience of cloud deployments.

Pwn2Own Berlin 2026 Concludes - zerodayinitiative.com

Summarizes the final day of Pwn2Own Berlin 2026, highlighting the last successful exploits demonstrated against enterprise systems. Reports on the conclusion of the event, showcasing cutting-edge vulnerability research and announcing the "Master of Pwn" winner.

Drupal Core Anonymous SQLi (CVE-2026-9082) - slcyber.io

Provides a detailed technical analysis of SA-CORE-2026-004 (CVE-2026-9082), a highly critical anonymous SQL injection in Drupal core. Emphasizes the severity of the flaw, which allows unauthenticated users on PostgreSQL-backed Drupal deployments to gain significant control over the database.

Browser Sandbox Escape via Windows Kernel Write - voidsec.com

Presents a technical analysis of CVE-2026-40369, detailing a browser sandbox escape vulnerability on Windows. Explains how a minimal 12-byte write into the Windows kernel via NtQuerySystemInformation can be leveraged from a browser sandbox to achieve SYSTEM privileges.

Android Wireless Debugging RCE - mobile-hacker.com

Outlines a method to achieve Remote Code Execution (RCE) on Android devices by exploiting wireless debugging functionalities. Details the complete attack chain, from gaining initial network access to obtaining a shell on the target device.

Recurring Package Manager CWEs - nesbitt.io

Analyzes common weakness enumerations (CWEs) that frequently appear across various software package managers. Highlights fundamental design and implementation flaws that contribute to supply chain vulnerabilities, emphasizing the need for robust security in package management.

0xV01D CTF 2026 Writeup - kore.one

Provides a detailed write-up for the "Action Packed" challenge from the 0xV01D CTF 2026, focusing on a Next.js web application utilizing App Router and Server Actions. Explains a critical vulnerability that allowed bypassing restrictions on a token generator function, leading to unauthorized access.

Bypassing Chrome's Sanitizer API - slcyber.io

Details two distinct methods to bypass the security mechanisms of Chrome's recently introduced Sanitizer API. Demonstrates how both the API's default and customizable modes can still be circumvented, posing risks for Cross-Site Scripting (XSS) prevention.

Apache OFBiz Auth Bypass RCE - aretiq.ai

Discloses CVE-2026-45434, a critical authentication bypass in Apache OFBiz's LoginWorker.checkLogin() that leads to Remote Code Execution (RCE). Explains how an attacker can bypass a forced password change and execute arbitrary commands by injecting a specific HTTP request parameter and exploiting an insecure ProgramExport.groovy.

Supply Chain Attacks Pre-CVE - mendral.com

Argues that traditional CVE-based scanning is insufficient for timely detection of supply chain attacks, as compromises often occur before CVEs are officially issued. Advocates for proactive, agent-based detection of dependency changes at the pull request (PR) stage to prevent compromise and mitigate npm and Actions attacks.

1-Click Account Takeover via Client-Side Path Traversal - patrickbatman.hashnode.dev

Details a critical client-side path traversal vulnerability that enabled a one-click account takeover on a significant platform. Underscores the importance of securing client-side logic, as seemingly minor flaws can escalate into severe security compromises.

OAuth Redirect Bypass Account Takeover - naaaash.github.io

Explores an OAuth redirect bypass vulnerability that, stemming from the manipulation of a single @ symbol in redirect URIs, led to a one-click account takeover. Demonstrates how subtle flaws in OAuth implementation can allow token exfiltration and complete account compromise.

Razor SSTI to RCE Chain - phsi.se

Details a technical exploit chain for achieving Remote Code Execution (RCE) by leveraging a Server-Side Template Injection (SSTI) vulnerability in Razor. Explains the use of reflection and runtime string manipulation as key techniques to escalate the initial SSTI vulnerability to full RCE.

🎥 SecVideo #

DEF CON: Bugs Finding You - youtube.com

Features Jasmin "JR0ch17" Landry, a full-time bug bounty hunter, sharing personal experiences and unusual stories from bug discovery at DEF CON 33's Bug Bounty Village. Offers insights into the real-world aspects of vulnerability research and the often serendipitous nature of finding impactful bugs.

💻 SecGit #

Deepsec: AI-Powered Code Security Harness - github.com

Introduces Deepsec, a security harness that leverages "coding agents" to automatically find vulnerabilities within a codebase. Highlights the growing trend of integrating AI for automated security testing and proactive vulnerability discovery in development pipelines.

aimap: Discover Exposed AI Services - github.com

Presents aimap, a tool developed by BishopFox designed to scan and discover publicly exposed AI services. Assists security teams in mapping potential attack surfaces related to their AI/ML deployments and identifying misconfigurations.

Awesome LLM Supply Chain Security List - github.com

Curates an extensive list of awesome resources, including papers, security reports, and CVEs, specifically focused on Large Language Model (LLM) supply chain security. Serves as a valuable reference for researchers and practitioners interested in securing the entire development and deployment lifecycle of LLMs.

MCParasite: Context Worm Testing Framework - github.com

Introduces MCParasite, a universal security testing framework designed for "MCP Context Worms." Aims to provide tools and methodologies for identifying and exploiting contextual vulnerabilities in complex, interconnected systems, potentially focusing on microservices.

Smokedmeat: CI/CD Red Team Framework - github.com

Presents "smokedmeat," a CI/CD Red Team Framework designed to demonstrate and assess security risks within build pipelines. Provides practical tools and methodologies for evaluating the security posture of continuous integration/delivery environments through simulated attacks.

Bumblebee: Supply Chain Compromise Scanner - github.com

Introduces "Bumblebee," a read-only scanner for developer endpoints, focusing on on-disk package, extension, and developer-tool metadata. Aims to identify early exposure to known software supply-chain compromises, acting as a proactive early warning system for development environments.

Seclog - #178

2026-05-18T00:00:00Z

In this week's Seclog, the cybersecurity landscape continues its rapid evolution, heavily influenced by the pervasive integration of Artificial Intelligence, both as a defensive tool and an offensive enabler. We see a significant focus on deep-dive vulnerability research, with detailed breakdowns of critical flaws ranging from Remote Code Execution in AI development tools like Claude Code and memory-safety issues in PHP's core JPEG processing, to complex account takeover chains involving client-side path traversal and 2FA bypasses. Emerging attack surfaces are also under the spotlight, particularly in connected vehicle platforms and subtle browser-level stealth requests that bypass CSP. The increasing maturity of AI in security is evident, from Google's launch of Sec-Gemini for advanced threat intelligence to researchers leveraging LLM multi-agent workflows for automated 0-day and N-day vulnerability discovery, underscoring AI's dual role in both hardening and challenging digital defenses. Finally, a commitment to security is highlighted by Obsidian Sync's successful independent audits, reinforcing the importance of rigorous verification.

📚 SecMisc #

The Transfer Station Economy for Claude Tokens - chinatalk.media

This article explains the "Transfer Station Economy," outlining how users can acquire cheaper Claude tokens in specific regions. While not a direct security vulnerability, it provides economic context for accessing AI services. This content is valuable for understanding geopolitical and economic factors that influence access to and cost of AI resources.

Google Launches Sec-Gemini AI for Cybersecurity - secgemini.google

Google has introduced Sec-Gemini v1, an experimental AI specifically designed to advance cybersecurity AI frontiers. This marks a significant investment by major tech companies into AI-driven security solutions. Security professionals should investigate how advanced AI models like Sec-Gemini can enhance threat detection, analysis, and automated response capabilities within their organizations.

Understanding the Purpose of CAPTCHAs - isc.sans.edu

SANS Internet Storm Center provides a foundational explanation of why CAPTCHAs are used. This clarifies the basic principles behind a common security control. This article helps security professionals understand the fundamental role of CAPTCHAs in distinguishing human users from automated bots to prevent various attacks.

📰 SecLinks #

Obsidian Sync Undergoes Security Audits - obsidian.md

Obsidian Sync successfully completed independent security audits by Cure53 and Trail of Bits. All identified security findings were addressed and validated by the auditors. This demonstrates a strong commitment to security, ensuring data integrity and user privacy for their critical synchronization service through third-party verification.

Claude Code RCE Via Settings Injection - 0day.click

A critical Remote Code Execution (RCE) vulnerability was discovered in Claude Code versions prior to 2.1.118, leveraging deeplink handlers and settings injection. The exploit specifically targeted the eagerLoadSettings function in main.tsx. This highlights the importance of thorough security reviews for configuration options and internal application logic, even in large codebases, to prevent RCE through unexpected control flows.

Apple JPEGXL Requiem Vulnerability Disclosed - ret2p.lt

A new vulnerability, CVE-2026-28956, codenamed 'Requiem,' has been disclosed, indicating an impact on Apple JPEGXL processing. The summary suggests a detailed technical analysis of this flaw. Security teams should monitor official advisories and prepare for patching related to this potential image processing vulnerability in Apple systems.

JPEG Memory-Safety Bugs in PHP Core - swarm.ptsecurity.com

Memory-safety bugs related to JPEG processing were found within the PHP core, specifically in the ext/standard extension. This impacts a significant portion of real-world application logic. These vulnerabilities in core PHP components emphasize that even widely used, seemingly stable modules can contain critical flaws, potentially leading to remote code execution or denial of service in applications handling user-supplied images.

Client-Side Path Traversal Led to Account Takeover - whoareme.com

A client-side path traversal (CSPT) in a frontend URL builder allowed arbitrary PUT/DELETE operations on an API. This was then chained with an inherited-property lookup bug (prototype chain manipulation) to bypass 2FA and achieve full account takeover. This sophisticated attack chain underscores the critical need for robust URL construction, stringent API access controls, and a deep understanding of JavaScript prototype chain security implications to prevent complete account compromise.

Exploring MyAudi Connected Vehicle Platform Vulnerabilities - decoder.cloud

This post details an investigation into security vulnerabilities within the myAudi connected vehicle platform ("Audi Connect"). This research represents a shift from traditional operating system vulnerabilities. It highlights the expanding attack surface of automotive cybersecurity and encourages security researchers to broaden their scope to include IoT and connected vehicle systems.

Pwn2Own Berlin 2026 RCE Exploit - flex0geek.blogspot.com

This post recounts a participant's experience at Pwn2Own Berlin 2026, detailing the process of achieving Remote Code Execution (RCE) on a target. It likely offers insights into exploit development methodologies and challenges. This provides valuable real-world case studies for exploit development and competitive hacking, offering insights into complex RCE chains and security research strategies.

Cloudflare WARP IP Leak Via Tor - beelzebub.ai

Research indicates that Cloudflare WARP can inadvertently leak real IP addresses when used in conjunction with Tor. The article is from an "AI-Native security platform" that leverages AI-based decoys and SOC AI for advanced threat detection. This finding highlights potential privacy and anonymity failures in VPN/proxy services and showcases the use of AI-driven defensive strategies, including honeypots, to detect subtle network compromises and zero-days.

LLM Multi-Agent Workflow Finds Open-Source 0-days - blog.cykor.kr

This article describes a methodology for discovering open-source zero-day vulnerabilities using an LLM multi-agent workflow. It showcases the increasing capabilities of AI agents in automating vulnerability research. Security teams should explore integrating AI-powered tools into their vulnerability assessment and code review processes to efficiently identify complex and previously unknown flaws.

AI for N-Day Vulnerability Research - ghostbyt3.github.io

This post outlines a workflow for conducting N-Day vulnerability research by leveraging AI tools such as Ollama and n8n. It demonstrates practical applications of AI in automating the analysis of known vulnerabilities. This approach can significantly enhance the efficiency of security researchers in tracking, analyzing, and responding to disclosed vulnerabilities, potentially identifying new exploit variations.

Stealth Request Bypasses CSP and Leaks UA - brokenbrowser.com

A novel "stealth request" technique has been discovered that effectively bypasses Content Security Policy (CSP) and remains undetected by browser DevTools. This method also leaks the real user-agent string. This bypass presents an evolving threat to web security, compelling developers and security professionals to re-evaluate CSP effectiveness and consider advanced browser-level attack vectors and user fingerprinting.

Seclog - #177

2026-05-11T00:00:00Z

In this week's Seclog, the security landscape is notably dynamic, characterized by a wave of critical vulnerabilities across foundational software and the accelerating integration of AI into both offensive and defensive security practices. Several severe pre-authentication and zero-click Remote Code Execution (RCE) flaws were disclosed in widely used platforms such as Apache httpd and Android's adbd component, alongside a significant authentication bypass in cPanel & WHM, underscoring the persistent risk to critical infrastructure. Apache Tomcat also faces a crucial vulnerability allowing full server and application takeover. Concurrently, the increasing capabilities of AI models are evident, from their impressive performance in CTF competitions to the development of specialized frameworks like Microsoft's PyRIT for AI red teaming. The reported discovery of a Mac OS 0-day by GPT 5.5 further highlights AI's potential to autonomously identify and exploit vulnerabilities. These developments collectively emphasize the imperative for prompt patching, robust vulnerability management, and a forward-thinking approach to security in an era shaped by both human and artificial intelligence.

📰 SecLinks #

Vercel React2Shell WAF Bypass Challenge - hacktron.ai

This article discusses a high-value bug bounty challenge centered on bypassing Vercel's Web Application Firewall (WAF) to achieve React2Shell vulnerabilities. It highlights the collaborative efforts between security researchers and Vercel aimed at identifying and mitigating critical bypasses to secure modern web applications.

Critical Apache Tomcat Server Takeover Flaw - oligo.security

A critical vulnerability, CVE-2026-29146, has been identified in Apache Tomcat, posing a direct threat of full server and application takeover. Security teams must prioritize immediate patching of affected Tomcat instances to prevent complete compromise.

AI Models Excel in CTF Challenges - includesecurity.com

Frontier AI models demonstrated significant effectiveness in solving Capture The Flag (CTF) challenges, utilizing orchestrated pipelines combining lighter-weight models for speed and advanced models for complex reasoning. Despite their success in competitive environments, the article cautions that LLM performance in CTFs does not directly translate to efficacy in professional security assessments.

Microsoft PyRIT Framework for LLM Red Teaming - toxsec.com

Microsoft has released PyRIT, an AI red teaming framework designed to assist in bug bounty work by providing a structured approach to identifying vulnerabilities in Large Language Models (LLMs). The framework systematizes AI red teaming by breaking down components into targets, converters, scorers, and orchestrators.

Critical cPanel/WHM Authentication Bypass - watchtowr.com

A critical authentication bypass vulnerability, CVE-2026-41940, has been disclosed, impacting cPanel & WHM installations. This flaw presents a significant risk, potentially enabling unauthorized access to administrative interfaces and leading to server compromise.

Apache httpd Pre-Auth RCE Discovered - striga.ai

Researchers at Striga discovered a pre-authentication Remote Code Execution (RCE) vulnerability in Apache httpd's mod_http2 component. The flaw, a double-free during stream cleanup, can be triggered with minimal compute resources via a specific two-frame HTTP/2 sequence, posing a severe risk to affected web servers.

The Verge on Script Kiddie Attacks - archive.md

This archived article from The Verge discusses the impact and prevalence of attacks orchestrated by "script kiddies." It likely delves into how easily accessible tools and methods empower less skilled attackers to cause significant disruption, underscoring the importance of fundamental security hygiene.

🐦 SecX #

GPT 5.5 Exploits Mac OS RCE - x.com

An alert details a network-accessible Remote Code Execution (RCE) vulnerability discovered and exploited in Mac OS 9.2.1, allegedly by an AI model, GPT 5.5. This highlights the potential for advanced AI to rapidly identify and weaponize 0-day vulnerabilities, even in legacy systems.

Android Zero-Click RCE Patch Issued - x.com

A critical zero-click Remote Code Execution (RCE) vulnerability, CVE-2026-0073, affecting the Android System component adbd, has been patched. This RCE requires no user interaction, meaning an attacker only needs network access to the device to execute arbitrary code, making immediate patching crucial for Android users.

💻 SecGit #

Dirtyfrag GitHub Repository - github.com

The V4bel/dirtyfrag GitHub repository is open for community contributions to its development. Security professionals may find this repository relevant for understanding or contributing to specific tools or projects, likely related to exploitation or vulnerability research, given the repository's name.