/r/netsec

IDNSEC

How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail

A retrospective on CVE-2025-39964, an AF_ALG race condition I found in 2025 before Copy Fail drew attention to the same subsystem. I explain the out-of-bounds scatterlist access, the usercopy oracle, and the exploit that achieved root and a Docker container escape.

Forever

Forever

AI security for the ever-changing workspace.

AI Agent Goal Hijack: How Attackers Turn an Agent's Own Tools Against It

AI agents are being handed real power faster than they can be secured, and attackers are turning their own tools against them.

How My Unicorn Founder Friend Was Phished

A fake WIRED interview routed through Calendly gave attackers access to Peter Reinhardt’s X account for a few minutes. I traced the campaign, filed abuse reports, and documented the offline status and provider receipts.

CVE Pulse — Live Vulnerability Feed

Search and explore cloud infrastructure vulnerabilities with real-time severity filtering and CVSS scoring.

Ethiack

KindaRails2Shell: How a MATLAB file reads your secrets and pops a shell on Ruby on Rails | Ethiack

CVE-2026-66066: how a .mat file declared as image/png chains into arbitrary file read and remote code execution as root on a default Ruby on Rails application.

Acronis

Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit

Acronis Threat Research Unit (TRU) uncovered a multinational campaign in which a Chinese-speaking threat actor, tracked as Red Heron, rapidly weaponized CVE-2026-60004 to compromise internet-facing instances of Gitea, a self-hosted source-code management platform. The activity progressed from source-code theft to persistent access, credential collection, and lateral movement.

EvilFontTool — Demos

OpenAI agents rebuilt a secret message board after the company shut it down

OpenAI restarted agent training two days after a model-caused Artifactory outage. The agents then rebuilt their deleted communication channel.

Ethiack

Write Once, Shell Everywhere: Turning Arbitrary File Writes into RCE | Ethiack

Autonomous Ethical Hacking for continuous security

The Risk of Fine-Tuned Open-Weight Models · MSec Operations Blog

Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware

How a disabled hardware-RNG path and 32-bit reseed constrain entropy in affected COLDCARD firmware and expose generated secrets.

Ethiack

KindaRails2Shell: How a MATLAB file reads your secrets and pops a shell on Ruby on Rails | Ethiack

CVE-2026-66066: how a .mat file declared as image/png chains into arbitrary file read and remote code execution as root on a default Ruby on Rails application.

Your House Has an FFmpeg Problem - elttam

Eye Research

AI-powered Phishing-as-a-Service: Inside Two BEC Kits

A look at two undocumented, AI-built phishing kits that automate the full business email compromise chain: device code phishing, token theft, persistence, and AI-driven invoice fraud.

Lava

How We Hacked Thousands of Data Centers in Minutes Using a 20-Year-Old Vulnerability

A 20-year-old vulnerability gave us access to bare-metal servers - and a foothold in the no man’s land of data center infrastructure.

ogbuilds.ai

The state of vibe-coded app security (549 repos) · ogbuilds

The state of vibe-coded app security (549 repos). It's first-party research from ogbuilds, based on 549 repos.

gHacks

Google Chrome Prepares Default Block for Extensions That Hijack the New Tab Page or Search Engine - gHacks Tech News

Chrome is developing a default protection to block policy-installed extensions that hijack the New Tab page or search engine on consumer PCs.

SMAP is Pre-Disarmed: How a Stack Pivot That Shouldn

I built a fake stack in user-mode memory and pivoted the kernel into it. SMAP should have thrown a #PF and blue-screened the box. Instead, I got SYSTEM. This is the three-experiment proof that Windows leaves its own guard down.

What Every Programmer Should Know About Twists of Elliptic Curves

Twists Make Elliptic Curves Wildly Insecure. Here'a Cheatsheet Using Bitcoin's Familiar Secp

Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware

How a disabled hardware-RNG path and 32-bit reseed constrain entropy in affected COLDCARD firmware and expose generated secrets.

AI on Kubernetes: Default Helm Chart Security | Sorami

Default Helm security audit across 15 AI serving, vector database and MCP charts. Empirical analysis of auth omissions, root containers and lateral paths.

FORTBRIDGE

CVE-2026-32740: Next.js RCE

A returned-pixel leak, chosen-address write and memcpy GOT hijack turn the libheif grid overflow into RCE against a pinned PIE Next.js lab.

arXiv.org

Hard Stop: Kernel-Level Preemption and Containment for Rogue Agentic Execution

In July 2026, an unconstrained autonomous agent participating in a frontier AI cybersecurity evaluation harness breached its evaluation sandbox, established an external command-and-control foothold, and executed a multi-stage intrusion into Hugging Face's production multi-tenant dataset conversion infrastructure (referred to in this autopsy as Incident-2026-Alpha). Over 4.5 days, the rogue agent executed 17,600 discrete actions across 6,280 worker clusters, compromised AWS EC2 Instance Metadata

Cruising for Shells in Flowise - elttam

Hush Security raises $30 million to govern enterprise AI agents

Hush Security raised a $30 million Series A from Akamai, Battery Ventures and YL Ventures to expand its runtime identity and access platform for AI agents.

clearbluejar

Don’t Let Abliteration Abliterate Your Bug Hunting: Discovering Verdict Bias in Uncensored Models

Abliterated models never refuse, which makes them tempting for bug hunting. But on the same kernel source, they graduate three to four times as many findings to VALID, including false positives the base correctly rejects, and across a 28-file scan of FreeBSD’s sys/rpc the most aggressive build never surfaced the real CVE at all.

daubois.dev

CVE-2026-91766: PHP had the redirect credential leak curl fixed in 2018

PHP's http:// stream wrapper sent Authorization, Cookie and Proxy-Authorization to any host a redirect pointed at, the bug curl fixed in 2018.

Ido Veltzman :: Security Research

Purple Team

Mandatory User Profile

The file NTUSER.MAN is a Windows user-profile registry hive used with mandatory profiles. It contains pre-defined configuration settings that are loaded into the registry (HKEY_CURRENT_USER) when t…

Pollard's P-1 Factoring Algorithm in Plain C

Coding Pollard's 1974 Paper on Factoring Within P-1 Multiplicative Subgroups

The Risk of Fine-Tuned Open-Weight Models · MSec Operations Blog

How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers

External security researchers at Accomplish identified a vulnerability in Cloudflare Containers that could expose residual disk data from previous workloads. We explain how the issue worked, how we investigated it, and the steps we took to remediate it.

Designing Patterns to Prevent IDOR | SevHunt

blog.doyensec.com

One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts · Doyensec's Blog

One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts

Frame: Grounding LLM Vulnerability Detection with a Sound Separation-Logic Core — Lambda Security

Frame is a neuro-symbolic SAST that pairs a sound separation-logic core with a verified, tiered LLM layer. On the Endor Labs real-world corpus it reaches 0.67 recall at 0.51 precision versus Semgrep

Discovering cryptographic weaknesses with Claude

Anthropic researchers find weaknesses in cryptographic algorithms with Claude Mythos Preview

What Every Programmer Should Know About Twists of Elliptic Curves

Twists Make Elliptic Curves Wildly Insecure. Here'a Cheatsheet Using Bitcoin's Familiar Secp

Ethiack

KindaRails2Shell - Critical RCE in Rails via Active Storage (CVE-2026-66066) | Ethiack

Ethiack research team discovered KindaRails2Shell (CVE-2026-66066): a critical RCE in Ruby on Rails via Active Storage. 500,000+ sites affected. Find out if you are and how to mitigate.

Purple Team

Provisioning Packages

Windows Provisioning Packages are used by Administrators to deploy configuration scripts on Windows environments by using a container format. Threat actors with elevated privileges could abuse prov…

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

Ill Bloom: Investigating a Wallet Generation Vulnerability During Active Exploitation

How Coinspect traced a wallet-drain investigation back to a twelve-year-old insecure randomness flaw, searched for exposed addresses at scale, and disclosed the findings...