<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html charset=UTF-8"><meta charset="UTF-8"><meta name="viewport" content="width=device-width"><meta name="x-apple-disable-message-reformatting"><title>TLDR InfoSec</title><meta name="color-scheme" content="light dark"><meta name="supported-color-schemes" content="light dark"><style type="text/css">
:root {
color-scheme: light dark; supported-color-schemes: light dark;
}
*,
*:after,
*:before {
-webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;
}
* {
-ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%;
}
html,
body,
.document {
width: 100% !important; height: 100% !important; margin: 0; padding: 0;
}
body {
-webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; text-rendering: optimizeLegibility;
}
div[style*="margin: 16px 0"] {
margin: 0 !important;
}
table,
td {
mso-table-lspace: 0pt; mso-table-rspace: 0pt;
}
table {
border-spacing: 0; border-collapse: collapse; table-layout: fixed; margin: 0 auto;
}
img {
-ms-interpolation-mode: bicubic; max-width: 100%; border: 0;
}
*[x-apple-data-detectors] {
color: inherit !important; text-decoration: none !important;
}
.x-gmail-data-detectors,
.x-gmail-data-detectors *,
.aBn {
border-bottom: 0 !important; cursor: default !important;
}
.btn {
-webkit-transition: all 200ms ease; transition: all 200ms ease;
}
.btn:hover {
background-color: #f67575; border-color: #f67575;
}
* {
font-family: Arial, Helvetica, sans-serif; font-size: 18px;
}
@media screen and (max-width: 600px) {
.container {
width: 100%; margin: auto;
}
.stack {
display: block!important; width: 100%!important; max-width: 100%!important;
}
.btn {
display: block; width: 100%; text-align: center;
}
}
body,
p,
td,
tr,
.body,
table,
h1,
h2,
h3,
h4,
h5,
h6,
div,
span {
background-color: #FEFEFE !important; color: #010101 !important;
}
@media (prefers-color-scheme: dark) {
body,
p,
td,
tr,
.body,
table,
h1,
h2,
h3,
h4,
h5,
h6,
div,
span {
background-color: #27292D !important; color: #FEFEFE !important;
}
}
a {
color: inherit !important; text-decoration: underline !important;
}
</style><!--[if mso | ie]>
<style type="text/css">
a {
background-color: #FEFEFE !important; color: #010101 !important;
}
@media (prefers-color-scheme: dark) {
a {
background-color: #27292D !important; color: #FEFEFE !important;
}
}
</style>
<![endif]--></head><body class="">
<div style="display: none; max-height: 0px; overflow: hidden;">Tests of Gemma and Qwen builds found that abliterated variants approved of far more vulnerability candidates. In FreeBSDβs sys/rpc, one Heretic β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β β </div>
<div style="display: none; max-height: 0px; overflow: hidden;">
<br>
</div>
<table align="center" class="document"><tbody><tr><td valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" class="container" width="600"><tbody><tr class="inner-body"><td>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr class="header"><td bgcolor="" class="container">
<table width="100%"><tbody><tr><td class="container">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" style="margin-top: 0px;" width="100%"><tbody><tr><td style="padding: 0px;">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div style="text-align: center;">
<span style="margin-right: 0px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/TYXWpN2Wp0VPjXOFTlHGqsbNF7kudNK-iOg5RaPsvyk=452" rel="noopener noreferrer" target="_blank"><span>Sign Up</span></a>
|<span style="margin-right: 2px; margin-left: 2px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisetopnav/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/sJSq73HFWpP8Pv0F72g0BebPrPrCutE8SkudurFuGus=452" rel="noopener noreferrer" target="_blank"><span>Advertise</span></a></span>|<span style="margin-left: 2px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Fweb-version%3Fep=1%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=4b20d458-a6a5-11f1-aaaf-d3170cac0811%26pt=campaign%26t=1788354529%26s=697c45634a4c1221d9e8049b6dbff57847826d9a1825db1763ae0e25e12afe38/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/voYfBYIazBqXtAZNaI5It9uy6Adc3n8RhRtrcGfW01g=452"><span>View Online</span></a></span>
<br>
</span></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="text-align: center;"><span data-darkreader-inline-color="" style="--darkreader-inline-color:#3db3ff; color: rgb(51, 175, 255) !important; font-size: 30px;">T</span><span style="font-size: 30px;"><span data-darkreader-inline-color="" style="color: rgb(232, 192, 96) !important; --darkreader-inline-color:#e8c163; font-size:30px;">L</span><span data-darkreader-inline-color="" style="color: rgb(101, 195, 173) !important; --darkreader-inline-color:#6ec7b2; font-size:30px;">D</span></span><span data-darkreader-inline-color="" style="--darkreader-inline-color:#dd6e6e; color: rgb(220, 107, 107) !important; font-size: 30px;">R</span>
<br>
</td></tr></tbody></table>
<br>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr id="together-with"><td align="center" height="20" style="vertical-align:middle !important;" valign="middle" width="100%"><strong style="vertical-align:middle !important; height: 100%;">Together With </strong>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgo.flashpoint.io%2Fgtir-midyear-report%3Fsfcampaign_id=701Rc00000kfO78IAE%26utm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=Resource_RP_GTIR_2026_Midyear%26utm_content=header_ai_isnt_making/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/zLA_mGU19fnUifwmmKx5oY4yjoCf8YheqrcAilawmwk=452"><img src="https://images.tldr.tech/flashpoint.png" valign="middle" style="vertical-align: middle !important; height: 100%;" alt="Flashpoint"></a></td></tr></tbody></table>
<table style="table-layout: fixed; width:100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;">
<div style="text-align: center;">
<h1><strong>TLDR Information Security <span id="date">2026-09-02</span></strong></h1>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width:100%;" width="100%"><tbody><tr id="sponsy-copy"><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgo.flashpoint.io%2Fgtir-midyear-report%3Fsfcampaign_id=701Rc00000kfO78IAE%26utm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=Resource_RP_GTIR_2026_Midyear%26utm_content=header_ai_isnt_making/2/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/YL084E12vXsXDUfKODnPbFm8GedYCPEmcqmB9jmwxLA=452">
<span>
<strong>AI isn't just making attacks smarter. It's making them cheaper (Sponsor)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
69% cheaper for initial access in the black hat economy, that is. No wonder verified ransomware victims are up 45% YoY.<p></p><p>Flashpoint's <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgo.flashpoint.io%2Fgtir-midyear-report%3Fsfcampaign_id=701Rc00000kfO78IAE%26utm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=Resource_RP_GTIR_2026_Midyear%26utm_content=Body_global_threat_intelligence_report/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/bnNNGKGiVcix6zYMLY59Ravf5RrIBqe-RoQfP5Rp1is=452" rel="noopener noreferrer nofollow" target="_blank"><span>Global Threat Intelligence Report (Midyear Edition)</span></a> is built on 3.9 petabytes of primary-source data collected directly from the spaces where this activity happens. Readers will learn:</p>
<ul>
<li>How the threat landscape is shifting from human-led campaigns to AI-led, machine-speed exploitation</li>
<li>Why <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgo.flashpoint.io%2Fgtir-midyear-report%3Fsfcampaign_id=701Rc00000kfO78IAE%26utm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=Resource_RP_GTIR_2026_Midyear%26utm_content=Body_19_pct_21_667_vulnerabilities/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/tjKe_elv0IK5cS30M1LEYOQ8wo9T2vb4JQpC0oiJ9wM=452" rel="noopener noreferrer nofollow" target="_blank"><span>19% of the 21,667 vulnerabilities </span></a>disclosed in H1 2026 already had public or functional exploit code</li>
<li>The five groups behind 44% of all attacks</li>
</ul>
<p><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgo.flashpoint.io%2Fgtir-midyear-report%3Fsfcampaign_id=701Rc00000kfO78IAE%26utm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=Resource_RP_GTIR_2026_Midyear%26utm_content=cta_full_report/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/bXzgniIILOoMIoU3VlaPDiTyzBdEKK_FtN9pRhqWHGM=452" rel="noopener noreferrer nofollow" target="_blank"><span>Read the full report</span></a>
</p>
</span></span></div>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr>
<tr bgcolor=""><td class="container">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">π</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Attacks & Vulnerabilities</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fcyberinsider.com%2Faesto-healthcare-data-breach-impacts-9-5-million-people%2F%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/5bGYukOTB5OGblPQc3Mu22LwcRCVZTnqsx-z47l5Qh4=452">
<span>
<strong>Aesto Healthcare Data Breach Impacts 9.5 Million People (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Aesto reported that unauthorized access to part of its AWS infrastructure exposed data tied to 9,540,683 people. The intrusion ran from about December 2 to December 18, 2025. Records may include medical, insurance, financial, and government ID data. Aesto confirmed affected files in May, notified clients in June, and offered 24 months of Experian IdentityWorks.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FWOmiBg/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/P4-3UfdZfPT2Tfll_qazxda8hufYa7u0oDazhJCUozo=452">
<span>
<strong>Recently Patched PaperCut Zero-Days Used in Data Theft Attacks (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
PaperCut Software announced two new vulnerabilities that have been patched in its PaperCut NG and MF print management software. The vulnerabilities involve an authentication bypass vulnerability which can be chained with a separately disclosed vulnerability to achieve RCE. Threat intelligence firm Defused reports that the authentication bypass vulnerability is being exploited by attackers for data theft.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fcyberpress.org%2Fhackers-target-aws-root-accounts%2F%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/g92cgx4V6fd1Uhx0fHUsYTCwFQt7_5fb_M4GNgv-7O8=452">
<span>
<strong>Hackers Target AWS root Accounts at 150+ Organizations With Password Spraying Attack (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Datadog Security Labs uncovered a password spraying campaign targeting AWS root accounts. Datadog stated that it has not identified a successful login yet, making the attacker's motive unclear. AWS root account logins require an account email, so it is possible that the attackers have access to a dataset or exposed email addresses that they are using in their campaign.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">π§ </span></div>
</div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Strategies & Tactics</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fclearbluejar.github.io%2Fposts%2Fdoes-abliteration-skew-your-bug-hunting%2F%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/B_qx1P914b-Wth1IMY6gCG6zppGHOnYtDjiYGjre3xg=452">
<span>
<strong>Don't Let Abliteration Abliterate Your Bug Hunting: Discovering Verdict Bias in Uncensored Models (17 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Tests of Gemma and Qwen builds found that abliterated variants approved of far more vulnerability candidates. In FreeBSD's sys/rpc, one Heretic build marked 138 of 144 candidates VALID, while the base marked 26 of 40. The Heretic run missed CVE-2026-4747 after spending its scan on false findings. A false heap-overflow claim survived because abliterated builds described the buffer bound, then still confirmed an overflow.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.forescout.com%2Fblog%2Fcan-ai-create-plc-attacks-yes-but-it%25e2%2580%2599s-not-that-easy-yet%2F%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/zNCnJ4Q8j8fk15_uc8J3Tn2M7k7W5DDGbFaRBF035wg=452">
<span>
<strong>Can AI Create PLC Attacks? Yes, But It's Not That Easy Yet (8 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Forescout used an AI model to port an RCE exploit from a WAGO 750-852 PLC to a 750-831 PLC running the same vulnerable Nucleus FTP server (CVE-2021-31886). The AI needed constant human guidance: correcting false leads, supplying disassembly context, and running Ghidra scripts it wrote itself. The final exploit stage took 8 hours 32 minutes and cost $535.74 in API tokens. A follow-up attempt to build a C2 implant bricked the PLC. Once code execution worked, the AI wrote working ICMP and UDP payloads within minutes.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Funit42.paloaltonetworks.com%2Fspring-ring-voice-phishing-campaigns%2F%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/zDLQ6ekQq69bKfrgcwqBqXOha36bXkVvrdmPm4DOHYw=452">
<span>
<strong>Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams (11 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Threat actors are executing voice phishing campaigns by registering external .onmicrosoft[.]com tenants with fake help desk names, initiating Microsoft Teams chats, and escalating to calls to trick victims into launching remote management tools. Following initial access, the attackers deliver distinct payloads that include an obfuscated PowerShell RAT designed to disable AMSI via the amsiInitFailed flag, and a Python-based execution chain that attempts PetitPotam coercion against domain controllers over port 445. To mitigate this threat, organizations must restrict external Teams access by default, block the associated payload hash, and proactively hunt for rapid chat-to-call sequences originating from commercial VPN nodes.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">π§βπ»</span></div>
</div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Launches & Tools</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Fhumanbound%2Fhumanbound%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/sJJSPdTmpxlaZpNf-AaOBeWCRRN_rfMz27Dp_CV5djI=452">
<span>
<strong>Humanbound (GitHub Repo)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Open-source adversarial testing engine, SDK, and CLI for AI agents. Attack your agent the way real users and attackers will: live endpoints, multi-turn conversations, and tool abuse. Then turn every failure into a firewall rule. Runs locally or against the Humanbound Platform. No login required to start.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2FKritt-ai%2Fopen-kritt%2Ftree%2Fmain%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/bv9oaaopIvmItx851c105MyEdSZdRstjSDyMczI92lA=452">
<span>
<strong>open-kritt (GitHub Repo)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
open-kritt is an open-source, self-hosted vulnerability research platform that turns focused AI analysis into de-duplicated, ranked findings with configurable validation and enrichment.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2FNetspi%2FMicroburst%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/Ts-iJbGCA-VLAB2bb4MmK-mehN0gcfDsZN3Qq4UNbC0=452">
<span>
<strong>Microburst (GitHub Repo)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
MicroBurst includes functions and scripts that support Azure Services discovery, weak configuration auditing, and post-exploitation actions such as credential dumping. It is intended to be used during penetration tests where Azure is in use.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">π</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><strong><h1>Miscellaneous</h1></strong></div>
</div>
</td></tr></tbody></table>
<table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fcdt.org%2Fpress%2Fbritish-public-oppose-secret-surveillance-powers-and-want-strong-protections-for-encrypted-communications%2F%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/nX6zKyPaUXKVDZCZW3joGs1aFswhFuZYxWHIK7kPys4=452">
<span>
<strong>British Public Oppose Secret Surveillance Powers and Want Strong Protections for Encrypted Communications (3 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
CDT polling of 2,000 UK adults found 53% judge encryption-access security risks greater than law-enforcement benefits. 84% fear hidden access would create exploitable vulnerabilities, fraud, data leaks, and cybercrime. The findings follow Apple's tribunal challenge to UK Technical Capability Notices after a demand for encrypted iCloud access.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.catonetworks.com%2Fblog%2Fcato-ctrl-when-trust-becomes-payload-in-fake-codex-clickfix-campaign%2F%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/-y5iQKN8GKH-Qnr66WQjk-QuSTaDTdNG09QJxD0lYNA=452">
<span>
<strong>Cato CTRL Insights: When Trust Becomes the Payload in a Fake Codex ClickFix Campaign (8 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Sponsored Codex searches routed macOS users to Google Sites lures with attacker-controlled iframes. Fake installers copied Terminal commands that decoded URLs, fetched shell loaders, and launched Mach-O payloads from /tmp/helper. The chain sent event=pasted telemetry, cleared quarantine attributes with xattr -c, and showed delivery overlap with AMOS.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">β‘</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Quick Links</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2F1password.com%2Fsolutions%2Fzero-standing-privileges%3Futm_medium=paid_newsletter%26utm_source=tldr%26utm_campaign=2026q3_unifiedaccess_lp_zero-standing-privileges_sa%26utm_content=newsletter_infosec_081926/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/9v5pTid9Y9s1Wpfu84O-IC3rLnrjK1hDdNIrDkCH-1Y=452">
<span>
<strong>1Password research: 40% of developers grant AI agents persistent access (Sponsor)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Replace persistent access with <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2F1password.com%2Fsolutions%2Fzero-standing-privileges%3Futm_medium=paid_newsletter%26utm_source=tldr%26utm_campaign=2026q3_unifiedaccess_lp_zero-standing-privileges_sa%26utm_content=newsletter_infosec_081926/2/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/MMuMEmYk-Z7rdXhTRNjEFE5-43QFwZGF7pHixza0C78=452" rel="noopener noreferrer nofollow" target="_blank"><span>Zero Standing Privileges:</span></a> Just-in-time, just-enough access, scoped to the task, and automatically revoked when work ends.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FDP5Ujm/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/AOAs9ehzDxTrtNJIDw1V9jjA630X-M-YZ010sgX9Fz4=452">
<span>
<strong>Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Attackers reportedly began exploiting CVE-2026-82329 days after disclosure, minting admin tokens in vulnerable JFrog Artifactory deployments.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F08%2F24%2Faliexpress-accused-of-fingerprinting-shoppers-with-silent-audio-trick-that-also-muted-a-devs-headphones%2F5291662%3Futm_source=tldrinfosec/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/y92bLedA-e3OgHgsMnoN8TcrNbdddgvLXmzHhWpLKQ0=452">
<span>
<strong>AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev's headphones (3 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
AliExpress scripts generate inaudible WebAudio sawtooth signals, collect frequency data, and query display size, memory, plugins, WebGL, and mouse activity.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;">
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Love TLDR? Tell your friends and get rewards!
</p>
</td></tr>
<tr><td class="container" style="padding: 0px 10px 15px;">
<div class="text-block">
Share your referral link below with friends to get free TLDR swag!
</div>
</td></tr>
<tr><td align="left" style="padding: 10px;">
<div class="text-block">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Frefer.tldr.tech%2F78de0e20%2F8/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/jCVMpbscnYlaRzYHhRuKA4JgHDZCEp0N779SVIkdrYw=452" style="color: #464ba4; text-decoration: underline;">https://refer.tldr.tech/78de0e20/8</a>
</div>
</td></tr>
<tr></tr>
<tr><td align="left" style="padding:5px 10px;">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fhub.sparklp.co%2Fsub_d62447d5a74a%2F8/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/8zflqtvKsmrPfr1YVNka7FmpvLWGq577z6CDO0AwNXo=452" style="font-size: 16px; line-height: 1.6; padding: 10px 0; display: inline-block; text-decoration: underline;"><span style="mso-text-raise:13pt; text-decoration: underline;">Track your referrals here.</span></a>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;">
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Want to advertise in TLDR? π°
</p>
<div class="text-block" style="margin-top: 10px;">
If your company is interested in reaching an audience of cybersecurity professionals and decision makers, you may want to <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisecta/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/x72q2g31kX49LKUzytA25L6TGdX37LG3y0Lie8IWg7k=452"><strong><span>advertise with us</span></strong></a>.
</div>
<br>
<!-- New "Want to work at TLDR?" section -->
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Want to work at TLDR? πΌ
</p>
<div class="text-block" style="margin-top: 10px;">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/MS-viPXhXEX5do0bZZz989xtVezGieW9MacNO1ZKQjk=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>Apply here</strong></a>,
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech%2Fc227b917-a6a4-40ce-8950-d3e165357871/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/lAxCdZej983M2KrOJKfL7fRrlee8sL6q0B69kY7KPQA=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>create your own role</strong></a> or send a friend's resume to <a href="mailto:jobs@tldr.tech" style="color: #0000EE; text-decoration: underline;">jobs@tldr.tech</a> and get $1k if we hire them! TLDR is one of <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Ffeed%2Fupdate%2Furn:li:activity:7401699691039830016%2F/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/gsbwaujobhyncsFD5Xxhf860JxmBB7ZFmVhYzdi7MBg=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>Inc.'s Best Bootstrapped businesses</strong></a> of 2025.
</div>
<br>
<div class="text-block">
If you have any comments or feedback, just respond to this email!
<br>
<br> Thanks for reading,
<br>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fprasannagautam%2F/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/PzETTaEtG6oamaA7po7xVR_g-w3KpiLGTnvd5BXwHgg=452"><span>Prasanna Gautam</span></a>, <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fericfernandezdelcampo%2F/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/XU7QSEHiwaZGapH4kY1gzmRNam3ncEbuy3CRyJmBB-8=452"><span>Eric Fernandez</span></a> & <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fsammy-tbeile%2F/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/zODssrg5ZlHI9SB7QXW0KBTD5W4zNnociXKMklq2gQg=452"><span>Sammy Tbeile</span></a>
<br>
<br>
</div>
<br>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block" id="testing-id">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%2Fmanage%3Femail=silk.theater.56%2540fwdnl.com/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/VDv4ME7DLZmsVr1teP2GjstlQn7Da3rIM81v40Y-IGc=452">Manage your subscriptions</a> to our other newsletters on tech, startups, and programming. Or if TLDR Information Security isn't for you, please <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Funsubscribe%3Fep=1%26l=8d9cea11-3e94-11ed-9a32-0241b9615763%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=4b20d458-a6a5-11f1-aaaf-d3170cac0811%26pt=campaign%26pv=4%26spa=1788354063%26t=1788354529%26s=7027d0101e2765a327c5d0739061d85eb7d2a0893205118ed773f04db7af7927/1/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/N-KTEskun43_jJzk6oiZYpSDhZdceSEPKxOg7t8BEDc=452">unsubscribe</a>.
<br>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
<img alt="" src="http://tracking.tldrnewsletter.com/CI0/010001a0623c87e9-51bd62c8-2788-4fdb-a466-09057231c63c-000000/ZzCtFtKyaZdtwutumQuXk6OHmagWv_VQiLCOBXrr3I8=452" style="display: none; width: 1px; height: 1px;">
</body></html>