News
- CosmosEscape: Taking Over Every Database in Azure Cosmos DB - A critical vulnerability chain in Azure Cosmos DB enabled full read and write access to every Cosmos DB database. Wiz Blog | RSS feed
- wp2shell: Critical WordPress Unauthenticated to Remote Code Execution Vulnerability - It's rare for WordPress itself to have CVEs. CVE-2026-63030 and CVE-2026-60137 combine to create the critical unauthenticated to RCE vulnerability wp2shell. The Exploit – Raxis
- Introducing Attack Path Management for Entra Agents in BloodHound Enterprise - IAM for AI SpecterOps
- AI Slop Is a Leadership Problem - Good take on AI Ariel Koren - Writing and research
Techniques and Write-ups
- ESC1 is alive again - “This is not a vulnerability” - Ok Microsoft… Oxmaz
- Exploring the Hugging Face Breach: mapping AI agent tactics to Elastic Defend - Deep Dive on the OpenAI agent escape and compromised HUgging Face infa Elastic Security Labs
- The risk hiding behind exposed MCP servers - How unauthenticated Model Context Protocol (MCP) servers are opening doors to sensitive cloud data, IAM, and command execution. Wiz Blog | RSS feed
- Fantastic clear-text passwords and where to collect them (Part 2 - Windows) - Defend against clear text passwords dfir.ch
Tools and Exploits
- Tunneling tool for red teaming - Looks useful, in memory windows tunneling for red team ops Harrison-Wells-Cyber
New to Me and Miscellaneous
- Welcome to Agents Week - Agents Week explores how cloud infrastructure must evolve to serve autonomous agents rather than human browsers. Join us as we unpack the storage, execution, and security primitives needed for an agent-native web. The Cloudflare Blog
- Facial Recognition at Madison Square Garden - Taylor Swift - Privacy for me, surveillance for thee attitude Schneier on Security
- American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials - He’s being prosecuted for giving border officials a code that wiped his phone: The case centers on a feature included in GrapheneOS, a custom Android operating system that runs in place of the software on most modern Google Pixel devices. Tunick’s attorneys … Schneier on Security
Techniques, tools, and exploits linked in this post are not reviewed for quality or safety. Do your own research and testing.