Email: Skill Poisoning for Agentic Malware Drop 🦠, OpenAI RubyGems hack 💎, Malicious Twitch extensions 👾

Subject:
Skill Poisoning for Agentic Malware Drop 🦠, OpenAI RubyGems hack 💎, Malicious Twitch extensions 👾
Received:
9/15/2026, 1:09:44 PM
From:
"TLDR InfoSec" <dan@tldrnewsletter.com>
To:
silk.theater.56@fwdnl.com
&lt;!DOCTYPE html&gt;&lt;html lang="en"&gt;&lt;head&gt;
		&lt;meta http-equiv="Content-Type" content="text/html charset=UTF-8"&gt;
		&lt;meta charset="UTF-8"&gt;
		&lt;meta name="viewport" content="width=device-width"&gt;
		&lt;meta name="x-apple-disable-message-reformatting"&gt;
		&lt;title&gt;TLDR InfoSec&lt;/title&gt;
		&lt;meta name="color-scheme" content="light dark"&gt;
		&lt;meta name="supported-color-schemes" content="light dark"&gt;
		&lt;style type="text/css"&gt;
			:root {
				color-scheme: light dark; supported-color-schemes: light dark;
			}
			
			*,
			*:after,
			*:before {
				-webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;
			}
			
			* {
				-ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%;
			}
			
			html,
			body,
			.document {
				width: 100% !important; height: 100% !important; margin: 0; padding: 0;
			}
			
			body {
				-webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; text-rendering: optimizeLegibility;
			}
			
			div[style*="margin: 16px 0"] {
				margin: 0 !important;
			}
			
			table,
			td {
				mso-table-lspace: 0pt; mso-table-rspace: 0pt;
			}
			
			table {
				border-spacing: 0; border-collapse: collapse; table-layout: fixed; margin: 0 auto;
			}
			
			img {
				-ms-interpolation-mode: bicubic; max-width: 100%; border: 0;
			}
			
			*[x-apple-data-detectors] {
				color: inherit !important; text-decoration: none !important;
			}
			
			.x-gmail-data-detectors,
			.x-gmail-data-detectors *,
			.aBn {
				border-bottom: 0 !important; cursor: default !important;
			}
			
			.btn {
				-webkit-transition: all 200ms ease; transition: all 200ms ease;
			}
			
			.btn:hover {
				background-color: #f67575; border-color: #f67575;
			}
			
			* {
				font-family: Arial, Helvetica, sans-serif; font-size: 18px;
			}
			
			@media screen and (max-width: 600px) {
				.container {
					width: 100%; margin: auto;
				}
				.stack {
					display: block!important; width: 100%!important; max-width: 100%!important;
				}
				.btn {
					display: block; width: 100%; text-align: center;
				}
			}
			
			body,
			p,
			td,
			tr,
			.body,
			table,
			h1,
			h2,
			h3,
			h4,
			h5,
			h6,
			div,
			span {
				background-color: #FEFEFE !important; color: #010101 !important;
			}
			
			@media (prefers-color-scheme: dark) {
				body,
				p,
				td,
				tr,
				.body,
				table,
				h1,
				h2,
				h3,
				h4,
				h5,
				h6,
				div,
				span {
					background-color: #27292D !important; color: #FEFEFE !important;
				}
			}
			
			a {
				color: inherit !important; text-decoration: underline !important;
			}

		&lt;/style&gt;
		&lt;!--[if mso | ie]&gt;
		&lt;style type="text/css"&gt;
			a {
				background-color: #FEFEFE !important; color: #010101 !important;
			}
			@media (prefers-color-scheme: dark) {
				a {
					background-color: #27292D !important; color: #FEFEFE !important;
				}
			}
	 &lt;/style&gt;
			&lt;![endif]--&gt;
	&lt;/head&gt;
	&lt;body class=""&gt;





		&lt;div style="display: none; max-height: 0px; overflow: hidden;"&gt;China&#039;s National Computer Virus Emergency Response Center is warning of &quot;skill poisoning&quot; attacks, where counterfeit plugins compromise AIf&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;&lt;/div&gt;
		&lt;div style="display: none; max-height: 0px; overflow: hidden;"&gt;
			&lt;br&gt;
		&lt;/div&gt;

		&lt;table align="center" class="document"&gt;
			&lt;tbody&gt;
				&lt;tr&gt;
					&lt;td valign="top"&gt;

						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" class="container" width="600"&gt;
							&lt;tbody&gt;
								&lt;tr class="inner-body"&gt;
									&lt;td&gt;

										&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
											&lt;tbody&gt;
												&lt;tr class="header"&gt;
													&lt;td bgcolor="" class="container"&gt;

														&lt;table width="100%"&gt;
															&lt;tbody&gt;
																&lt;tr&gt;
																	&lt;td class="container"&gt;



																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" style="margin-top: 0px;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding: 0px;"&gt;

																						&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div style="text-align: center;"&gt;
																											&lt;span style="margin-right: 0px;"&gt;&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/vAud3sIPKRIrb8d_fWYwFdZxhcOBwxfoNgVN0GR-0kI=452" rel="noopener noreferrer" target="_blank"&gt;&lt;span&gt;Sign Up&lt;/span&gt;&lt;/a&gt;
																											|&lt;span style="margin-right: 2px; margin-left: 2px;"&gt;&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisetopnav/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/H7CuSiOSDPGTYqNcOJ0vlqvll9GjbQE2G5k20xXQcA0=452" rel="noopener noreferrer" target="_blank"&gt;&lt;span&gt;Advertise&lt;/span&gt;&lt;/a&gt;&lt;/span&gt;|&lt;span style="margin-left: 2px;"&gt;&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Fweb-version%3Fep=1%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=a7796e70-b0de-11f1-beda-e7f5e90937df%26pt=campaign%26t=1789477784%26s=265b7f7f3047c886f5868fad4fbd5166819487787ee61a82bc3de238df99ea5e/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/NjxLQ9VyRXxrDnLYfNV6zfCbmeScQlIWNygE_gNGVi4=452"&gt;&lt;span&gt;View Online&lt;/span&gt;&lt;/a&gt;&lt;/span&gt;
																											&lt;br&gt;
																											&lt;/span&gt;&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="text-align: center;"&gt;&lt;span data-darkreader-inline-color="" style="--darkreader-inline-color:#3db3ff; color: rgb(51, 175, 255) !important; font-size: 30px;"&gt;T&lt;/span&gt;&lt;span style="font-size: 30px;"&gt;&lt;span data-darkreader-inline-color="" style="color: rgb(232, 192, 96) !important; --darkreader-inline-color:#e8c163; font-size:30px;"&gt;L&lt;/span&gt;&lt;span data-darkreader-inline-color="" style="color: rgb(101, 195, 173) !important; --darkreader-inline-color:#6ec7b2; font-size:30px;"&gt;D&lt;/span&gt;&lt;/span&gt;&lt;span data-darkreader-inline-color="" style="--darkreader-inline-color:#dd6e6e; color: rgb(220, 107, 107) !important; font-size: 30px;"&gt;R&lt;/span&gt;
																										&lt;br&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;br&gt;

																						&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;&lt;/tbody&gt;
																						&lt;/table&gt;


																						&lt;table style="table-layout: fixed; width:100%;" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;"&gt;
																										&lt;div style="text-align: center;"&gt;

																											&lt;h1&gt;&lt;strong&gt;TLDR Information Security &lt;span id="date"&gt;2026-09-15&lt;/span&gt;&lt;/strong&gt;&lt;/h1&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table style="table-layout: fixed; width:100%;" width="100%"&gt;
																							&lt;tbody&gt;&lt;/tbody&gt;
																						&lt;/table&gt;
																																											&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;
																	&lt;/td&gt;
																&lt;/tr&gt;
															&lt;/tbody&gt;
														&lt;/table&gt;
													&lt;/td&gt;
												&lt;/tr&gt;
												&lt;tr bgcolor=""&gt;
													&lt;td class="container"&gt;

														&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
															&lt;tbody&gt;
																&lt;tr&gt;
																	&lt;td style="padding: 0px;"&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🔓&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;

																								&lt;h1&gt;&lt;strong&gt;Attacks &amp; Vulnerabilities&lt;/strong&gt;&lt;/h1&gt;
																							&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table style="table-layout: fixed; width: 100%;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fministryofcyberaffairs.com%2Fnews%2Fskill-poisioning-turning-ai-agents-into-malware-droppers-warns-china-s-national-cert-66b8bba4-9ffd-4583-a6c7-122e8149e0e8%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/kAo_jDZ5GRw7YVpLu1ORHHwt-C1ftCqJWHug-qMHikU=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Skill Poisoning Turns AI Agents Into Malware Droppers (3 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    China's National Computer Virus Emergency Response Center is warning of "skill poisoning" attacks, where counterfeit plugins compromise AI agents to secretly download malware. Analysts have already identified eight malicious skill packs in popular agent repositories that impersonate legitimate tools, granting attackers unauthorized file access and remote-control capabilities. These poisoned plugins exploit an AI agent's natural task-execution design, bypassing the need for a user to actually click a suspicious link.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FQBCx45/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/yLfwESu4PXSIRoVV4plDxoWmg3n5-Z8RwDMSMIQRPso=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Telus Warns Customers of Account Breaches (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Telus says attackers used compromised credentials to access consumer accounts from February 2025 through June 2026. Exposed data included contact details, account and billing records, partial card numbers, subscriptions, and payment history. Attackers attempted service transfers and changed some services. Telus reset credentials, added monitoring, notified police, and offered identity-theft protection.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F09%2F11%2Fmore-jfrog-artifactory-bugs-under-attack-and-all-3-have-patches%2F5295943%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/EFxwM06KyE44n40Cyqp-6g6F70DPiYAUQQ6LaEp3pm0=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;More JFrog Artifactory bugs under attack, and all 3 have patches (3 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Attackers are exploiting CVE-2026-42018, CVE-2026-42016, and CVE-2026-82329 in JFrog Artifactory. Activity includes admin-account creation, Rust backdoors, Groovy plugins, web shells, token minting, and key theft. Wiz found 59 percent exposed to CVE-2026-42016 and 62 percent to CVE-2026-42018, so please patch exposed instances, restrict network access, and audit privileged logins.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🧠&lt;/span&gt;&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;

																								&lt;h1&gt;&lt;strong&gt;Strategies &amp; Tactics&lt;/strong&gt;&lt;/h1&gt;
																							&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;


																		&lt;table style="table-layout: fixed; width: 100%;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FtImbXa/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/7Kdj_F2W3FVnk2K9KNnMlbX-KtFe0_6Q0pIFpine3eI=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Writing More Secure Code with LLMs: Why "Make No Mistakes" Falls Short (13 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Generic security prompts and OWASP-style checklists failed to improve AI coding security and occasionally increased the frequency of high-severity bugs when the Monad Foundation engineering team tasked an assistant with writing secure code for a URL unfurler. Utilizing an expert prompt that incorporates a specific application threat model reduced validated security findings by approximately 43 percent. Defenders must replace generic checklists with expert prompts incorporating specific application threat models to harden AI-generated code.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjasondoyle.ie%2Fwhitepapers%2Fai-makes-familiar-cyber-attacks-cheaper-to-run%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/P99zSzocmju8DOO7OVaDMfoUlziInOBxKLR-cNZbOYw=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;AI Makes Familiar Cyber Attacks Cheaper to Run (48 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Anthropic's threat intelligence report demonstrates that artificial intelligence lowers the cost of familiar cyber attacks against targeted organizations. The technology automates reconnaissance, retooling loops, and campaign coordination. Defenders must reassess their controls against repeated, parallel, and fast-adapting attack attempts despite the continued expense of compute resources and specialized exploits.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fsocket.dev%2Fblog%2Fmalicious-twitch-browser-extension%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/RY1zcWyvk7-t3Gy2ptb46ERU-nufYTFpRi2YsqLtT3g=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Malicious Twitch Browser Extension Exposes 30,000 Users' OAuth Tokens to Russian Bot Service (6 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Socket found that a cross-store browser extension, 'Twitch Enhanced Viewer | JeetBot', captures account OAuth tokens from Twitch pages. Current Chrome and Firefox builds add tokens to proxy redirect URLs for most viewed channels, but earlier builds sent tokens directly to set-token endpoints. The extension has about 31,000 installs across both stores, and anyone holding a token can access chat, whispers, account settings, and channel points. Remove the extension, disconnect Twitch sessions, and re-authenticate.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🧑‍💻&lt;/span&gt;&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;

																								&lt;h1&gt;&lt;strong&gt;Launches &amp; Tools&lt;/strong&gt;&lt;/h1&gt;
																							&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table style="table-layout: fixed; width: 100%;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FJJmoyH%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/QVT5Eh1NbY2HL2bVgIl59BX44jcAEclrawIzw8HHlxk=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Peak traffic shouldn't mean peak anxiety (Sponsor)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Traffic skyrocketing? If you're on &lt;a class="Hyperlink SCXW62283841 BCX8" href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FJJmoyH/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/8pAWwNYvQPDv40nFSViJsRUUxnq4mMdwfrgH3AuOr78=452" rel="noreferrer noopener" target="_blank"&gt;&lt;span&gt;Microsoft Azure&lt;/span&gt;&lt;/a&gt;, there's no reason to panic. When user demand spikes, Azure adjusts capacity in the background. Performance stays steady with no manual intervention, no late-night firefighting, and no scrambling to explain why the site went down during the big launch. &lt;a class="Hyperlink SCXW62283841 BCX8" href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FJJmoyH/2/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/bR2-rf48-O8lV2c29IstW_bEdfLOuTHgam1FKv2bkeU=452" rel="noreferrer noopener" target="_blank"&gt;&lt;span&gt;Build without limits with Azure&lt;/span&gt;&lt;/a&gt;
																											&lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fdev.profullstack.com%2F~anthony%2Fblog%2F135-post.html%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/Ylh8ObGao-vF5MAgl3phA_t2550v96I0d-m7gLaqUyc=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;OpenThreat: what a security tool found in the open, as one file (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    ThreatCrush launched OpenThreat to share public repository findings, threat indicators, and advisories in a single-file format without exposing private data or unredacted secrets. LogicSRC co-developed the specification to serve these descriptors at a standard web path. Nichedb.dev introduced the first directory for reading and distributing these descriptors across RSS, JSON, and APIs.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2FValentinNikolaev%2Fphp-analysis-tools-catalog%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/rRm8hSAzqedPMV_RYhw2Kg24KYUk6PwjQRz2iRNJHBQ=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;PHP Analysis Tools Catalog (GitHub Repo)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    A curated, auto-updated catalog of PHP static-analysis, code-quality, linting, metrics, refactoring, and security tools.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Fjfrog%2Fboost%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/dn8d48jAPewg4XSndWRu-KytwM5wxd-Pd8oj8hsP8Ig=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Boost (GitHub Repo)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Boost wraps the commands your agents already run, turning noisy logs into compact, structured context.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;


																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🎁&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;strong&gt;&lt;h1&gt;Miscellaneous&lt;/h1&gt;&lt;/strong&gt;&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F09%2F13%2Fsecurity-through-obscurity-is-dead-and-ai-delivered-the-fatal-blow%2F5296000%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/lSUPDsr8Zg10hx5PvDPPRZeI9-j2AEkMH5GUucAVneM=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Security Through Obscurity Is Dead And AI Delivered The Fatal Blow (6 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Artificial intelligence has delivered a fatal blow to security through obscurity by enabling the rapid discovery of deeply buried vulnerabilities in aging code and proprietary systems. Security experts warn that this rapid discovery creates immense pressure on defenders by exposing critical operational technologies. Defenders must respond by shifting away from endless patching toward proactive process improvements and systemic prevention.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.rubyhack.ai%2F%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/b2xh1-u-Vp7QfEGLBDy_Da_sYPzYlRY-XM7DppnwMMY=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;OpenAI agents carried out an undisclosed cyber-attack on RubyGems (4 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Hundreds of malicious RubyGems packages appeared in May, attributed by researchers to internal OpenAI agents. The packages attempted API-key theft through an unreported RubyGems server flaw and used RubyDoc.info builds for arbitrary code execution. RubyGems halted registrations for four days, removed more than 500 packages, and later saw further uploads in May and June.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjoshuasaxe181906.substack.com%2Fp%2Feveryones-talking-past-each-other%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/x-OKH1dLWs0PP1kO_KWuJxfOCS7sxoZHNV4Hh9nsQ_I=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Everyone's Talking Past Each Other About the OpenAI/Huggingface Hack so Here's a Synthesized View (6 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Joshua Saxes attempts to synthesize different perspectives from AI safety researchers, cybersecurity experts, and policymakers on the OpenAI/Huggingface hack. Alignment and security go hand in hand to provide traditional and AI-native controls, with policy also acting as a backstop. Security's job is to provide a deterministic framework to reduce the blast radius of what an agent can do, whereas alignment's job is to constrain what an agent wants to do.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;⚡&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;

																								&lt;h1&gt;&lt;strong&gt;Quick Links&lt;/strong&gt;&lt;/h1&gt;
																							&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fthehackernews.com%2F2026%2F09%2Fattackers-use-passkey-phishing-to.html%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/1jrFEsuiuvi_tkHNHEnc1NYFVzRhTcAyLTaWTRACa7Q=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data (5 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Threat actors target Microsoft enterprise users with passkey lures to bypass multi-factor authentication.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Findustrialcyber.co%2Fregulation-standards-and-compliance%2Fenisa-launches-single-reporting-platform-as-eu-cyber-resilience-act-vulnerability-reporting-obligations-take-effect%2F%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/DIBFMk8i_IKdFK5V_mgeS3_QxmAOet0ZlsR2QzuoS-w=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;ENISA launches Single Reporting Platform as EU Cyber Resilience Act vulnerability reporting obligations take effect (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    ENISA launched its Single Reporting Platform for Cyber Resilience Act notifications.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fopensourcesecurity.io%2F2026%2F2026-09-daniel-cra%3Futm_source=tldrinfosec/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/Jh9iQ7jRTgQJGVNIrYxFSi2NKMDGxfQBFxXrYPhAseQ=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;CRA vulnerability reporting with Daniel Thompson (35 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    The Open Source Security podcast notes that the European Union Cyber Resilience Act requires manufacturers to report actively exploited vulnerabilities to ENISA.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;


																		
																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;"&gt;

																						&lt;p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;"&gt;
																							Love TLDR? Tell your friends and get rewards!
																						&lt;/p&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding: 0px 10px 15px;"&gt;
																						&lt;div class="text-block"&gt;
																							Share your referral link below with friends to get free TLDR swag!
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																				&lt;tr&gt;
																					&lt;td align="left" style="padding: 10px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Frefer.tldr.tech%2F78de0e20%2F8/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/PGylHcjgAfpAsUa3Oy5fQ_OUXF2uLQFT39RKQ18gQDg=452" style="color: #464ba4; text-decoration: underline;"&gt;https://refer.tldr.tech/78de0e20/8&lt;/a&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																				&lt;tr&gt;&lt;/tr&gt;
																				&lt;tr&gt;
																					&lt;td align="left" style="padding:5px 10px;"&gt;
																						&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fhub.sparklp.co%2Fsub_d62447d5a74a%2F8/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/QkS5frKzIZBPXIMyzMezLIvjKMaWBCtjn4zjudOPSOI=452" style="font-size: 16px; line-height: 1.6;  padding: 10px 0; display: inline-block;  text-decoration: underline;"&gt;&lt;span style="mso-text-raise:13pt; text-decoration: underline;"&gt;Track your referrals here.&lt;/span&gt;&lt;/a&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		


																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;"&gt;

																						&lt;p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;"&gt;
																							Want to advertise in TLDR? 📰
																						&lt;/p&gt;
																						&lt;div class="text-block" style="margin-top: 10px;"&gt;
																							If your company is interested in reaching an audience of cybersecurity professionals and decision makers, you may want to &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisecta/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/jazOjp8bI-bO_5m6b9PiODgf2jLRTl8MDUnKjFYiEBw=452"&gt;&lt;strong&gt;&lt;span&gt;advertise with us&lt;/span&gt;&lt;/strong&gt;&lt;/a&gt;.
																						&lt;/div&gt;
																						&lt;br&gt;

																						&lt;!-- New "Want to work at TLDR?" section --&gt;

																						&lt;p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;"&gt;
																							Want to work at TLDR? 💼
																						&lt;/p&gt;
																						&lt;div class="text-block" style="margin-top: 10px;"&gt;
																							&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/POjL6ywwiOs4DW1A3t9IR-W9Gq0A0DJ8k9w6Jrt6YQo=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"&gt;&lt;strong&gt;Apply here&lt;/strong&gt;&lt;/a&gt;,
																							&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech%2Fc227b917-a6a4-40ce-8950-d3e165357871/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/QwMqI6KIsI-B6idTLdJf7V21ZeV2Ot7nwaG4VMNQpVU=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"&gt;&lt;strong&gt;create your own role&lt;/strong&gt;&lt;/a&gt; or send a friend's resume to &lt;a href="mailto:jobs@tldr.tech" style="color: #0000EE; text-decoration: underline;"&gt;jobs@tldr.tech&lt;/a&gt; and get $1k if we hire them! TLDR is one of &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Ffeed%2Fupdate%2Furn:li:activity:7401699691039830016%2F/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/rj19X026rd0bIzajf81DWN-dWCUS3NRkrjwX8bQqNMY=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"&gt;&lt;strong&gt;Inc.'s Best Bootstrapped businesses&lt;/strong&gt;&lt;/a&gt; of 2025.
																						&lt;/div&gt;
																						&lt;br&gt;

																						&lt;div class="text-block"&gt;
																							If you have any comments or feedback, just respond to this email!
																							&lt;br&gt;
																							&lt;br&gt; Thanks for reading,
																							&lt;br&gt;
																							&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fprasannagautam%2F/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/b0ECG3LkJ_T1cLyVomRpVY1xz-OfbTmd1ND4zgbn3go=452"&gt;&lt;span&gt;Prasanna Gautam&lt;/span&gt;&lt;/a&gt;, &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fericfernandezdelcampo%2F/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/6lXBttgAXbM_2QIBuuN7x7yDDkSm4VvDYhtU62VD8rA=452"&gt;&lt;span&gt;Eric Fernandez&lt;/span&gt;&lt;/a&gt; &amp; &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fsammy-tbeile%2F/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/VR10GZEHh994NeKhrK_Xhn9ImUWUb8n9NWLcnPp_--g=452"&gt;&lt;span&gt;Sammy Tbeile&lt;/span&gt;&lt;/a&gt;
																							&lt;br&gt;
																							&lt;br&gt;
																						&lt;/div&gt;
																						&lt;br&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding: 15px 15px;"&gt;
																						&lt;div class="text-block" id="testing-id"&gt;
																							&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%2Fmanage%3Femail=silk.theater.56%2540fwdnl.com/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/W0P8G5Ru4ofoGwB1TQj6JRmpgLCKEmNR7R30BXzjsqY=452"&gt;Manage your subscriptions&lt;/a&gt; to our other newsletters on tech, startups, and programming. Or if TLDR Information Security isn't for you, please &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Funsubscribe%3Fep=1%26l=8d9cea11-3e94-11ed-9a32-0241b9615763%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=a7796e70-b0de-11f1-beda-e7f5e90937df%26pt=campaign%26pv=5%26spa=1789477339%26t=1789477784%26s=90ec1900534780d28d67dbce83e9c367de6cb7e4f4abf859d3075ed1bd109a13/1/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/G0zYy80t3k1fq8bOyFRmUApIVjXCA-_VrQbWIgb-R6c=452"&gt;unsubscribe&lt;/a&gt;.
																							&lt;br&gt;

																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																	&lt;/td&gt;
																&lt;/tr&gt;
															&lt;/tbody&gt;
														&lt;/table&gt;
													&lt;/td&gt;
												&lt;/tr&gt;
											&lt;/tbody&gt;
										&lt;/table&gt;
									&lt;/td&gt;
								&lt;/tr&gt;
							&lt;/tbody&gt;
						&lt;/table&gt;
					&lt;/td&gt;
				&lt;/tr&gt;
			&lt;/tbody&gt;
		&lt;/table&gt;



	

&lt;img alt="" src="http://tracking.tldrnewsletter.com/CI0/010001a0a5300bfa-a18a68ec-7c20-4b9f-b288-19659ded0490-000000/wQOu6WtuC11KuW3tEyD48VD-AqWWSo3hDYMJhN5XTM0=452" style="display: none; width: 1px; height: 1px;"&gt;
&lt;/body&gt;&lt;/html&gt;
Email Content
