InfoSec Planet

Nice video of the Arctic bobtail squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. [...]

See full content

curl disclosed a bug submitted by thinhlx: https://hackerone.com/reports/3923212 [...]

See full content

See full content

Through data brokers, ICE is buying the information you provided to open a credit card. [...]

See full content

Nintendo disclosed a bug submitted by jonbarrow: https://hackerone.com/reports/2551512 [...]

See full content

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud provider Snowflake. Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing call and text history records of more than 100 million AT&T customers. A survei [...]

See full content

There are many companies manufacturing adversarial clothing designed to confuse facial recognition systems. It’s a cool idea, but I worry that it’s mostly security theater: “Our patterns play with that chaos, confuse algorithms and make it way harder to pin you down,” he said. Bell, however, said “none of these products are tried and tested, and a lot of these survei [...]

See full content

CVSS open framework, rapid recap   Stands for Common Vulnerability Scoring System. Owned by a US-based non-profit organization, the Forum of Incident Response and Security Teams (FIRST).   The purpose is to help response teams quickly and easily calculate the severity of cybersecurity vulnerabilities based on metrics.   Latest version: (4.0) designed to assess multiple environments and dimensio [...]

See full content

Mozilla disclosed a bug submitted by griffinf: https://hackerone.com/reports/3782701 - Bounty: $12000 [...]

See full content

See full content

curl disclosed a bug submitted by kiyin: https://hackerone.com/reports/3917775 [...]

See full content

Nitro Enclaves and Key Management Service (KMS) feel like a natural fit: since the KMS can verify attestation documents generated by the enclaves, developers can offload key management tasks from their applications to the AWS-managed service. But integrating an external service with your trusted enclaves comes with new threats, even if that service comes from the same provider. In this blog post—t [...]

See full content

Monero disclosed a bug submitted by bebensap: https://hackerone.com/reports/3699522 [...]

See full content

Monero disclosed a bug submitted by bebensap: https://hackerone.com/reports/3698862 [...]

See full content

Monero disclosed a bug submitted by bebensap: https://hackerone.com/reports/3693636 [...]

See full content

Monero disclosed a bug submitted by bebensap: https://hackerone.com/reports/3700036 [...]

See full content

Monero disclosed a bug submitted by bebensap: https://hackerone.com/reports/3723315 [...]

See full content

This is disturbing: …a team of security researchers at UC San Diego, who found that a model of aftermarket car alarm known as the KARR Security System, installed in more than 2 million vehicles across the US by their estimate, can let any hacker within Bluetooth range send radio commands to silently unlock the car at will, turn off its alarm, honk the car’s horn or flash its lights, or [...]

See full content

Monero disclosed a bug submitted by benisprlh: https://hackerone.com/reports/3687543 [...]

See full content

Attribution is preliminary, and so far it seems no real damage. And it seems like this is a campaign that has targeted at least seven states. And, because this is where the US is right now, Trump doesn’t believe it’s Iran and that Minnesota…I guess…hacked itself. “I think I blame it on Minnesota because they’re grossly incompetent,” Trump said. “I wo [...]

See full content

curl disclosed a bug submitted by juthawong: https://hackerone.com/reports/3911968 [...]

See full content

"It feels like I get 10X the productivity on an engagement. The difference is night and day." Profile Ray H. is a Security Analyst at a managed security service provider with over 2500 employees world [...]

See full content

And it’s personal information (alternate link): The exposed data includes an AI-powered therapy app that someone appears to have vibe-coded, notes on meetings, and a dashboard someone made apparently to analyze medical billing data. Exposed chats reportedly include private cryptocurrency wallet keys and personal information like peoples’ addresses. What seems to be the issue is a user [...]

See full content

Adobe empowers everyone to create through industry-leading platforms and tools that unleash creativity, productivity, and personalized customer experiences. Starting September 1, 2026, Intigriti will be the new home of the Adobe Bug Bounty Program. Why Intigriti and Adobe? As AI reshapes how organizations build and ship products, security testing needs to keep pace. Intigriti's global community of [...]

See full content

On August 4, 2026, several popular npm packages, including 'keyv', were compromised to deliver malware. [...]

See full content

AWS VDP disclosed a bug submitted by sh3d0w: https://hackerone.com/reports/3478646 [...]

See full content

Hugging Face has published a detailed timeline of the attack. From the summary: The agent was running an internal OpenAI cyber-capability evaluation based on the ExploitGym benchmark, which tasks an AI agent with finding and exploiting software vulnerabilities. OpenAI ran this on its own infrastructure, and the ExploitGym maintainers and their infrastructure had no involvement in the deployment or [...]

See full content

Rocket.Chat disclosed a bug submitted by howtoplay: https://hackerone.com/reports/3514640 [...]

See full content

See full content

This essay originally appeared in Foreign Policy. Earlier this month, two of OpenAI’s models broke out of their containment sandbox and attacked another AI company. The story is kind of wild. OpenAI was running security tests on two of its models: GPT-5.6 Sol and an unreleased model that is almost certainly GPT-6. In particular, it was running the ExploitGym benchmark, which measures how goo [...]

See full content

curl disclosed a bug submitted by dark_river: https://hackerone.com/reports/3911605 [...]

See full content

See full content

Learn how trusted coding-agent projects can execute repository-controlled code before the first prompt through Codex MCP configuration and Claude Code environment settings. [...]

See full content

Liberapay disclosed a bug submitted by its9me: https://hackerone.com/reports/3878586 - Bounty: $100 [...]

See full content

The Squid is a new scientific machine: One of the technological breakthroughs was the onboard use of a spinning wheel confocal microscope, nicknamed the Squid, which uses lasers to scan microscopic details of how organisms are put together. “That opens up a whole new world of exploring. We could see cells interacting with each other, exchanging material and building skeletons. And we could d [...]

See full content

The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 (5.9% at k=15) and Mythos 5 (2.6%), making it the most robust model evaluated. Opus 5 also outperformed all non-Claude models on this benchmark. The most robust non-Cl [...]

See full content

Node.js disclosed a bug submitted by nadav0077: https://hackerone.com/reports/3723248 [...]

See full content

Tucows (VDP) disclosed a bug submitted by axolot23: https://hackerone.com/reports/3644182 [...]

See full content

See full content

Hello hackers, Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Intigriti turns 10! RCE in GitHub.com and GitHub Enterprise Server Burp Suite going agentic with Burp AT Hacking Gemini Enterprise for $15,000 3,708 live credentials found by scanning GitHub Archive And so much more! Let's dive in! Intigriti turns 10! 🚀 Ten years ago, the idea that inviting [...]

See full content

phpBB disclosed a bug submitted by a7mmr: https://hackerone.com/reports/3606773 [...]

See full content

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user’s Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones clicking ads on AI-generated websites as part of a [...]

See full content

Node.js disclosed a bug submitted by sinan-polat: https://hackerone.com/reports/3815767 [...]

See full content

This week, we launched Burp AT in public beta for Burp Suite Professional users. Next week at Black Hat, PortSwigger Research will reveal more of the work that helped shape our direction. Burp AT is o [...]

See full content

Ruby on Rails disclosed a bug submitted by friedchicken112211: https://hackerone.com/reports/3553340 [...]

See full content

Uniswap v4 hooks let developers add custom behavior to pools, including dynamic fees, custom accounting, and external integrations. This flexibility moves some security responsibilities into application and hook code. The Cork and Bunni exploits are two app-level incidents that show what can go wrong in that code. Together, they account for more than $20M in losses. Neither incident stemmed from a [...]

See full content

Node.js disclosed a bug submitted by vnyuh: https://hackerone.com/reports/3812439 [...]

See full content

Bug bounty is a collaborative process that involves multiple parties, including the security researcher, triage team, and the affected organization managing the bug bounty program. While the vast majority of submissions are handled correctly, there are exceptional instances in which reports are mishandled, closed incorrectly, downgraded in severity, or left unresolved for extended periods. When th [...]

See full content

GitHub disclosed a bug submitted by ahacker1: https://hackerone.com/reports/3638909 [...]

See full content

Node.js disclosed a bug submitted by sy2n0: https://hackerone.com/reports/3761342 [...]

See full content

HackerOne disclosed a bug submitted by 0v3rw4tch: https://hackerone.com/reports/3577216 [...]

See full content

Node.js disclosed a bug submitted by yottt: https://hackerone.com/reports/3816840 [...]

See full content

Node.js disclosed a bug submitted by 0xoroot: https://hackerone.com/reports/3838601 [...]

See full content

Rocket.Chat disclosed a bug submitted by button142857: https://hackerone.com/reports/3473145 [...]

See full content

AWS VDP disclosed a bug submitted by mistercloudsec: https://hackerone.com/reports/3633146 [...]

See full content

Codex’s /goal feature amplifies bug hunting, but getting good results requires the right prompt, the right scope, and the right number of outcomes per run. For Patch the Planet, our joint initiative with OpenAI to find and fix bugs in open-source software, we pointed Codex at some of the most widely used, heavily audited codebases in the world, like Rust, curl, and zlib. One tool came up again and [...]

See full content

Key takeaways   RAG systems expand the application’s trust boundary by adding external, mutable content to the model context. If a threat actor can influence what gets indexed and retrieved, they can influence what the model says or does.   In simple QA systems, that may mean misinformation or unsafe recommendations.   In agentic systems with tools and permissions, it can become data leakage, un [...]

See full content

See full content

In July 2026, an OpenAI model escaped its evaluation sandbox and broke into Hugging Face's production infrastructure. It is the first documented end-to-end intrusion carried out by an autonomous AI agent. The most repeated takeaway, "the AI went rogue," is also the least useful one. The real lessons are about containment engineering, about who is allowed to use powerful models, and about why the [...]

See full content

AWS VDP disclosed a bug submitted by nick_frichette_dd: https://hackerone.com/reports/3775702 [...]

See full content

Rocket.Chat disclosed a bug submitted by 0jayden: https://hackerone.com/reports/3827674 [...]

See full content

See full content

Burp AT brings agentic AI to human-led pentesting, with Burp Suite’s proven tools, your project context, and purpose-built skills. You decide how much work agents take on. Burp enforces the boundaries [...]

See full content

We analyze how VoidLink, LinkPro, and Atomic Arch abuse eBPF helpers to hide from defenders, and show how to detect them at load time, before they can act. [...]

See full content

See full content

Monero disclosed a bug submitted by redlobsterzzz: https://hackerone.com/reports/3621606 [...]

See full content

The lethal trifecta matters more now than ever because AI tools can read your data, absorb instructions, and act on your behalf. That means a poisoned email, webpage, or document could trick your AI into leaking information or taking actions you never approved. The more AI becomes your assistant, the more its access, permissions, and actions need guardrails.   This blog takes a look at the lethal  [...]

See full content

AWS VDP disclosed a bug submitted by notnotnotveg: https://hackerone.com/reports/3809407 [...]

See full content

GitHub disclosed a bug submitted by ahacker1: https://hackerone.com/reports/3641229 [...]

See full content

8x8 disclosed a bug submitted by kyotozzx: https://hackerone.com/reports/3800870 - Bounty: $1337 [...]

See full content

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traff [...]

See full content

GitHub disclosed a bug submitted by ahacker1: https://hackerone.com/reports/3588801 [...]

See full content

See full content

Monero disclosed a bug submitted by int0ha_: https://hackerone.com/reports/3738727 [...]

See full content

What you will learn Why faster discovery and higher volume can still leave teams blind between vulnerability reports. Why scanners and inventories are necessary, but not enough to explain attacker focus and intent. What “between-reports visibility” actually means (without the product pitch). What we believe security teams will need next: earlier signals that support action before the next repor [...]

See full content

See full content

Growing our Burp Ambassador community Meet our newest Burp Ambassadors Katie Paxton-Fear Malek Mohammad Yogesh Tantak James Lester Looking ahead Interested in getting involved? Growing our Burp Ambass [...]

See full content

See full content

See full content

Rocket.Chat disclosed a bug submitted by olidayw: https://hackerone.com/reports/3779690 [...]

See full content

GitHub disclosed a bug submitted by vaib25vicky: https://hackerone.com/reports/3713965 [...]

See full content

AWS VDP disclosed a bug submitted by mistercloudsec: https://hackerone.com/reports/3632577 [...]

See full content

See full content

Basecamp disclosed a bug submitted by newbiefromcoma: https://hackerone.com/reports/3581911 - Bounty: $337 [...]

See full content

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence. Nearly 60 of the bugs qu [...]

See full content

AWS VDP disclosed a bug submitted by mistercloudsec: https://hackerone.com/reports/3702072 [...]

See full content

See full content

See full content

On July 14, 2026, four npm packages in the @asyncapi namespace, totaling over 3 million weekly downloads, were compromised to deliver credential-stealing malware. We investigate how the attack unfolded and how to know if you're affected. [...]

See full content

Editor's note: This article was originally published by Tim Erlin on LinkedIn. It has been republished here with the author's permission. https://www.linkedin.com/pulse/ai-control-platform-vs-firewall-gateway-clearing-up-tim-erlin-ypodc It seems like every security vendor now sells "AI security." The WAF companies, the API gateway companies, the cloud platforms, the proxy startups: all of them [...]

See full content

SingleStore disclosed a bug submitted by bisht-ji: https://hackerone.com/reports/3780695 [...]

See full content

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency’s initial response provide important [...]

See full content

See full content

We’ve added a new chapter to our Testing Handbook: a comprehensive guide to security testing Rust programs. This chapter covers the tools and techniques we use at Trail of Bits to validate the security of Rust programs and systems. fn main() {(|f:&dyn Fn(u128)->Box< dyn Iterator<Item= char>+'static>|f(*[&( 0x7B736D70683F73u128<<64| 0x7A6A6D7C3F7A667D),&(0x7B73 [...]

See full content

AWS VDP disclosed a bug submitted by mistercloudsec: https://hackerone.com/reports/3630605 [...]

See full content

First hand of the week: Find us at BSides Workshop: Burp But Yours, with Hannah and Tib3rius Center stage: Visit us at Black Hat USA - Booth 5342 Lightning talks at the booth Catch our researchers' br [...]

See full content

A malicious commit disguised as SDK telemetry briefly compromised @injectivelabs/sdk-ts, exfiltrating wallet mnemonics and private keys. [...]

See full content

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names. The X/Twitter account IRIS C2 (@C2IRIS) has gained more than 4,000 [...]

See full content

In April we released Mewt, our open-source mutation-testing engine that finds the gaps in your test suite. Today we’re expanding it with support for DAML, the language Canton Network applications are written in. Mewt now reads DAML, generates several classes of mutants (including two built for DAML’s authorization primitives), and runs them through your existing test suite to count how many [...]

See full content

Datadog Security Research has tracked multiple coordinated campaigns enumerating GitHub organizations, repositories, and users through the public GitHub API, abusing leaked access tokens, and cloning private repositories. [...]

See full content