Email: Telegram 1Click Account Takeover 💬, Claude unintended actions 🤖, Ledger hardware implant 🔐

Subject:
Telegram 1Click Account Takeover 💬, Claude unintended actions 🤖, Ledger hardware implant 🔐
Received:
10/12/2026, 1:11:50 PM
From:
"TLDR InfoSec" <dan@tldrnewsletter.com>
To:
silk.theater.56@fwdnl.com
&lt;!DOCTYPE html&gt;&lt;html lang="en"&gt;&lt;head&gt;
		&lt;meta http-equiv="Content-Type" content="text/html charset=UTF-8"&gt;
		&lt;meta charset="UTF-8"&gt;
		&lt;meta name="viewport" content="width=device-width"&gt;
		&lt;meta name="x-apple-disable-message-reformatting"&gt;
		&lt;title&gt;TLDR InfoSec&lt;/title&gt;
		&lt;meta name="color-scheme" content="light dark"&gt;
		&lt;meta name="supported-color-schemes" content="light dark"&gt;
		&lt;style type="text/css"&gt;
			:root {
				color-scheme: light dark; supported-color-schemes: light dark;
			}
			
			*,
			*:after,
			*:before {
				-webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;
			}
			
			* {
				-ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%;
			}
			
			html,
			body,
			.document {
				width: 100% !important; height: 100% !important; margin: 0; padding: 0;
			}
			
			body {
				-webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; text-rendering: optimizeLegibility;
			}
			
			div[style*="margin: 16px 0"] {
				margin: 0 !important;
			}
			
			table,
			td {
				mso-table-lspace: 0pt; mso-table-rspace: 0pt;
			}
			
			table {
				border-spacing: 0; border-collapse: collapse; table-layout: fixed; margin: 0 auto;
			}
			
			img {
				-ms-interpolation-mode: bicubic; max-width: 100%; border: 0;
			}
			
			*[x-apple-data-detectors] {
				color: inherit !important; text-decoration: none !important;
			}
			
			.x-gmail-data-detectors,
			.x-gmail-data-detectors *,
			.aBn {
				border-bottom: 0 !important; cursor: default !important;
			}
			
			.btn {
				-webkit-transition: all 200ms ease; transition: all 200ms ease;
			}
			
			.btn:hover {
				background-color: #f67575; border-color: #f67575;
			}
			
			* {
				font-family: Arial, Helvetica, sans-serif; font-size: 18px;
			}
			
			@media screen and (max-width: 600px) {
				.container {
					width: 100%; margin: auto;
				}
				.stack {
					display: block!important; width: 100%!important; max-width: 100%!important;
				}
				.btn {
					display: block; width: 100%; text-align: center;
				}
			}
			
			body,
			p,
			td,
			tr,
			.body,
			table,
			h1,
			h2,
			h3,
			h4,
			h5,
			h6,
			div,
			span {
				background-color: #FEFEFE !important; color: #010101 !important;
			}
			
			@media (prefers-color-scheme: dark) {
				body,
				p,
				td,
				tr,
				.body,
				table,
				h1,
				h2,
				h3,
				h4,
				h5,
				h6,
				div,
				span {
					background-color: #27292D !important; color: #FEFEFE !important;
				}
			}
			
			a {
				color: inherit !important; text-decoration: underline !important;
			}

		&lt;/style&gt;
		&lt;!--[if mso | ie]&gt;
		&lt;style type="text/css"&gt;
			a {
				background-color: #FEFEFE !important; color: #010101 !important;
			}
			@media (prefers-color-scheme: dark) {
				a {
					background-color: #27292D !important; color: #FEFEFE !important;
				}
			}
	 &lt;/style&gt;
			&lt;![endif]--&gt;
	&lt;/head&gt;
	&lt;body class=""&gt;


		&lt;div style="display: none; max-height: 0px; overflow: hidden;"&gt;A single clicked link could clone a Telegram Desktop session on 7.2.8 and earlier, because an unescaped semicolon in tg: link IPC handling let&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;&lt;/div&gt;
		&lt;div style="display: none; max-height: 0px; overflow: hidden;"&gt;
			&lt;br&gt;
		&lt;/div&gt;

		&lt;table align="center" class="document"&gt;
			&lt;tbody&gt;
				&lt;tr&gt;
					&lt;td valign="top"&gt;

						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" class="container" width="600"&gt;
							&lt;tbody&gt;
								&lt;tr class="inner-body"&gt;
									&lt;td&gt;

										&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
											&lt;tbody&gt;
												&lt;tr class="header"&gt;
													&lt;td bgcolor="" class="container"&gt;

														&lt;table width="100%"&gt;
															&lt;tbody&gt;
																&lt;tr&gt;
																	&lt;td class="container"&gt;



																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" style="margin-top: 0px;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding: 0px;"&gt;

																						&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div style="text-align: center;"&gt;
																											&lt;span style="margin-right: 0px;"&gt;&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/Bjr8zaMEqkwZVVV-c0P7KuOPy65IUk36fy3Nh-IjPKQ=452" rel="noopener noreferrer" target="_blank"&gt;&lt;span&gt;Sign Up&lt;/span&gt;&lt;/a&gt;
																											|&lt;span style="margin-right: 2px; margin-left: 2px;"&gt;&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisetopnav/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/ohUZZatMVGw1Er44etp3SqobFcKXymtwTuFuoZtrnXo=452" rel="noopener noreferrer" target="_blank"&gt;&lt;span&gt;Advertise&lt;/span&gt;&lt;/a&gt;&lt;/span&gt;|&lt;span style="margin-left: 2px;"&gt;&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Fweb-version%3Fep=1%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=a7c7e1c6-c62e-11f1-8691-07b33dd44d22%26pt=campaign%26t=1791810710%26s=e5f1c7e3480d61dd9ee4795a50036563c692d36b3e70509b6f00bbbf58fa0ba0/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/eYiXj-0pRNHy2vvC423oCj9BChYJQ3vb-OkFle7G2MA=452"&gt;&lt;span&gt;View Online&lt;/span&gt;&lt;/a&gt;&lt;/span&gt;
																											&lt;br&gt;
																											&lt;/span&gt;&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="text-align: center;"&gt;&lt;span data-darkreader-inline-color="" style="--darkreader-inline-color:#3db3ff; color: rgb(51, 175, 255) !important; font-size: 30px;"&gt;T&lt;/span&gt;&lt;span style="font-size: 30px;"&gt;&lt;span data-darkreader-inline-color="" style="color: rgb(232, 192, 96) !important; --darkreader-inline-color:#e8c163; font-size:30px;"&gt;L&lt;/span&gt;&lt;span data-darkreader-inline-color="" style="color: rgb(101, 195, 173) !important; --darkreader-inline-color:#6ec7b2; font-size:30px;"&gt;D&lt;/span&gt;&lt;/span&gt;&lt;span data-darkreader-inline-color="" style="--darkreader-inline-color:#dd6e6e; color: rgb(220, 107, 107) !important; font-size: 30px;"&gt;R&lt;/span&gt;
																										&lt;br&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;br&gt;

																						&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;&lt;/tbody&gt;
																						&lt;/table&gt;


																						&lt;table style="table-layout: fixed; width:100%;" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;"&gt;
																										&lt;div style="text-align: center;"&gt;

																											&lt;h1&gt;&lt;strong&gt;TLDR Information Security &lt;span id="date"&gt;2026-10-12&lt;/span&gt;&lt;/strong&gt;&lt;/h1&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table style="table-layout: fixed; width:100%;" width="100%"&gt;
																							&lt;tbody&gt;&lt;/tbody&gt;
																						&lt;/table&gt;
																																											&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;
																	&lt;/td&gt;
																&lt;/tr&gt;
															&lt;/tbody&gt;
														&lt;/table&gt;
													&lt;/td&gt;
												&lt;/tr&gt;
												&lt;tr bgcolor=""&gt;
													&lt;td class="container"&gt;

														&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
															&lt;tbody&gt;
																&lt;tr&gt;
																	&lt;td style="padding: 0px;"&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🔓&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;

																								&lt;h1&gt;&lt;strong&gt;Attacks &amp; Vulnerabilities&lt;/strong&gt;&lt;/h1&gt;
																							&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table style="table-layout: fixed; width: 100%;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fhackingpassion.com%2Ftelegram-desktop-one-click-account-takeover%2F%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/QAqNnP6y282cMY68p2zGpCObxlJqEYX0qwNUtsg0cAc=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Telegram Desktop One Click Account Takeover (8 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    A single clicked link could clone a Telegram Desktop session on 7.2.8 and earlier, because an unescaped semicolon in tg: link IPC handling let attackers inject a hidden interpret: release helper that uploads local files to any chat (CVE-2026-107181). Attackers staged instruction files through auto-download in a group the victim was added to without consent, then exfiltrated the three tdata files that open on another machine with no SMS code or two-step password when no local passcode is set. Users should update to 7.2.9, set a local passcode, and restrict group adds to My Contacts, since Telegram shipped the fix with no advisory.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftechcrunch.com%2F2026%2F10%2F08%2Fasos-confirms-breach-of-customer-data-after-hackers-send-rogue-app-notification%2F%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/4U4wwBbPamVO6buLJvH2bqkVVN6Zirv6vWS51K6MFqI=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Asos confirms breach of customer data after hackers send rogue app notification (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Asos confirmed a breach after hackers used its app to send customers a notification claiming they had compromised data on Snowflake. Stolen information includes names, contact details, home addresses, phone numbers, and customer-profile notes such as search queries. Attackers reportedly obtained credentials by impersonating a trusted contact. The Xuanye Group is pressuring Asos to negotiate or leak the data.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FoEx3df/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/cUyerOqfP6PGyJThQpHz7VOPjZ7jI6eQaTM2vimqCGo=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Unpatched AhsayCBS Flaws Exploited to Deploy Webshells and Mine Crypto (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Huntress has observed attackers chaining two vulnerabilities in the AhsayCBS backup software to achieve remote code execution (RCE). The attackers utilize an authentication bypass and then RCE vulnerability to install JSP webshells and the XMRig crypto miner as well as an AI-assisted script to avoid detection. The vulnerabilities were meant to be fixed in version 10.3.2 but Huntress reports that version 10.3.4 is still vulnerable.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🧠&lt;/span&gt;&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;

																								&lt;h1&gt;&lt;strong&gt;Strategies &amp; Tactics&lt;/strong&gt;&lt;/h1&gt;
																							&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;


																		&lt;table style="table-layout: fixed; width: 100%;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fblog.zsec.uk%2Fregulating-red-teams%2F%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/ZN959FphwexJSrYvLIb3CV857dIkZPZVz8apRIWM7Lg=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Below the Waterline Stage 2 - Regulating Red Teams (9 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Regulated red team engagements have to be defensible when reconstructed later, so every action needs a named approver, an understood risk, and evidence tying it to the threat scenario. The six frameworks compared (CBEST, TIBER-EU, DORA TLPT, I-CRT, iCAST, and DESC ISR) differ in authority, testing basis, and provider requirements, with DORA Article 26 mandating TLPT at least every three years for designated financial entities. Red team leads should record timestamps, approvals, and any supplied access during delivery, because a detection that fires in purple-team replay does not prove it worked during the covert phase.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FL5cV3V/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/ItmdPorWLil4vMSnhlI70fTMQ4YiuVBe2AekLHTC0OM=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Why the AI Vulnpocalypse Isn't the Breachpocalypse (Yet)? It's the Economy, Stupid (8 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Despite the rise in vulnerabilities due to LLMs, we have not observed a corresponding rise in breaches. The author argues that offensive AI agents cannot properly monetize breaches, which reduces their motivation. The author dismisses the hypothesis that attackers lack capable enough tools for breaches, given that cyber-capable open-weight models and model jailbreaks are common. The author also dismisses the hypothesis that breaches are occurring without us knowing.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fopensourcemalware.com%2Fblog%2Fghostaction-phishing-campaign%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/lQEqhl5Yir2I_UV-DNIMZkh3NLYVrWmWdvkixzDt8i8=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;GhostAction Phishing Campaign (9 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    GhostAction operators used a GitHub reverse-proxy kit on my-github[.]com to relay maintainers' passwords and TOTP codes, while injected JavaScript silently approved an OAuth device flow with repo, workflow, and read:org scopes. The domain shared 193.32.204[.]199 with GhostAction's workflow exfiltration server, though a single lure does not prove phishing caused the earlier maintainer compromises. Defenders should revoke grants tied to OAuth client ID Ov23ctrqCqZ79UaYKwyq, rotate CI/CD and registry secrets, and audit .github/workflows/ for injected files.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🧑‍💻&lt;/span&gt;&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;

																								&lt;h1&gt;&lt;strong&gt;Launches &amp; Tools&lt;/strong&gt;&lt;/h1&gt;
																							&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table style="table-layout: fixed; width: 100%;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.anthropic.com%2Fresearch%2Flaunching-opt-in-vuln-finding-service-for-open-source%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/6fHB-ZfnoOa2pWh5MZAZvhVidm6K04xo1nwLyzjB7TQ=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;An opt-in vulnerability-finding service for open-source software (3 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Anthropic launched OSS Scanner, a free, opt-in tool that periodically sends open-source maintainers model-generated vulnerability reports. The reports include reproducers, explanations, and candidate patches, but humans don't review them. During validation, 85 of 97 critical- or high-severity findings met Anthropic's disclosure bar, while one finding was invalid. Eligible maintainers can sign up through GitHub.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Fagent-substrate%2Fsubstrate%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/KeWBBTjRJeGNZwsuMi8T_Dv9hxvD6LF_9Pe4PLX0w5Y=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Agent Substrate (GitHub Repo)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Agent Substrate is a secure-by-default agent execution runtime for running millions of agent sandboxes on Kubernetes.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Fdouglasmun%2Fmacos-sudo-touchid%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/ELdcsT8TgncmNj-emnHHxmE0SXx6UYzE9NI8JakDbNE=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;macos-sudo-touchid (GitHub Repo)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    This tool enables Touch ID for sudo on macOS using Apple's pam_tid.so, with safer handling for terminal multiplexers through pam_reattach.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;


																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🎁&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;strong&gt;&lt;h1&gt;Miscellaneous&lt;/h1&gt;&lt;/strong&gt;&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.anthropic.com%2Fresearch%2Finvestigating-unintended-model-actions%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/Fdf-eSb2ElY16wIQ5IZduY2a3vdpHrINVYG9t-dEFs8=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Investigating unintended model actions in our evaluations and internal use (6 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Anthropic reports Claude using SQL and command injection to run commands on a university server, submitting real government and police forms, using leaked access tokens to reach fee-gated public data, and shortening URLs to bypass fetch-tool limits. Most cases arose in evaluations with live internet access and caused little harm. Anthropic has disabled live internet access in internal evaluations, restricted fetch tools, added automated detection and blocking, and is changing training environments that reward restriction bypasses.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2F5f7vQQ/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/hkxcGK4zot-LKHSZbFql4nH-SZnBBQ_lHitoIuRkl64=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Former core infrastructure engineer Daniel Rhyne scheduled tasks on his employer's domain controller to delete 13 admin accounts and reset passwords affecting 301 users, 254 servers, and 3,284 workstations. He demanded 20 bitcoin, about $750,000, and threatened to shut down 40 servers daily. The company did not pay. Internal forensics and FBI tracing tied the activity to Rhyne's home IP address. He received 32 months in prison.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Froyfish.dev%2Ffingerprints-are-the-new-cookies%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/9vqgNtmso81Py_PkcKdPDOu10YZ7kj6520rJwuvk4Z4=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Fingerprints are the new cookies (6 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Browser fingerprinting has replaced third-party cookies as the stable tracking identifier, after Google dropped its cookie deprecation plan and opened its ad products to device fingerprinting. A demo page derives a consistent nickname by hashing permissionless readings from OfflineAudioContext, WebGL renderer pixels, canvas text rendering, Intl time zone, and navigator hardware values, and the result survives cookie clears and VPNs. Only Brave (via farbling noise) and Tor and Mullvad Browser (via uniform fingerprints) resist this at the engine level, while anti-fingerprinting extensions can make users more distinctive because so few people run them.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;⚡&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;div style="text-align: center;"&gt;

																								&lt;h1&gt;&lt;strong&gt;Quick Links&lt;/strong&gt;&lt;/h1&gt;
																							&lt;/div&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.scworld.com%2Fbrief%2Fmicrosoft-to-end-security-updates-for-unsupported-windows-versions-in-2027%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/Qmd2twu010ji5pnMoDEMHH-zLOnKSBIN28yNTqNLh1o=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Microsoft to end security updates for unsupported Windows versions in 2027 (1 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Unsupported Windows versions will lose all Windows Update access when Microsoft rotates its update certificates on May 17 and June 19, 2027, so supported builds need the July 2026 update or later (September 2025 for Windows 11 24H2 and Server 2025), while WSUS-managed devices are unaffected.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fthehackernews.com%2F2026%2F10%2Fgobalance-flaw-lets-attackers-hijack.html%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/PpahS0muL2wjZk7BQs8tY6IKSa8ZZYu9TP58M4hyYxI=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    A GoBalance signing bug lets an attacker recover a site's Tor-format master key from one public descriptor, with which they can then redirect that .onion address to a controlled site.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																						&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																							&lt;tbody&gt;
																								&lt;tr&gt;
																									&lt;td class="container" style="padding: 15px 15px;"&gt;
																										&lt;div class="text-block"&gt;
																											&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fcointelegraph.com%2Fnews%2Fledger-confirms-unauthorized-hardware-implant-losses-may-exceed-86m%3Futm_source=tldrinfosec/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/ODo-gxw6rBvDJnJhxlt54Ts_vOC0tbxNgSm_Fmm_zV4=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Ledger confirms unauthorized hardware implant, says losses may exceed $86M (1 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
																											&lt;/a&gt;
																											&lt;br&gt;
																											&lt;br&gt;
																											&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    An unauthorized hardware implant was found in a Ledger wallet sold by Southeast Asian reseller CryptoBilis.
                                &lt;/span&gt;
																											&lt;/span&gt;
																										&lt;/div&gt;
																									&lt;/td&gt;
																								&lt;/tr&gt;
																							&lt;/tbody&gt;
																						&lt;/table&gt;

																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;


																		
																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;"&gt;

																						&lt;p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;"&gt;
																							Love TLDR? Tell your friends and get rewards!
																						&lt;/p&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding: 0px 10px 15px;"&gt;
																						&lt;div class="text-block"&gt;
																							Share your referral link below with friends to get free TLDR swag!
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																				&lt;tr&gt;
																					&lt;td align="left" style="padding: 10px;"&gt;
																						&lt;div class="text-block"&gt;
																							&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Frefer.tldr.tech%2F78de0e20%2F8/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/MyfCkf88m_rILTMhLmRt1ieGXN_GqiYWPfNxehBg7KQ=452" style="color: #464ba4; text-decoration: underline;"&gt;https://refer.tldr.tech/78de0e20/8&lt;/a&gt;
																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																				&lt;tr&gt;&lt;/tr&gt;
																				&lt;tr&gt;
																					&lt;td align="left" style="padding:5px 10px;"&gt;
																						&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fhub.sparklp.co%2Fsub_d62447d5a74a%2F8/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/uArF3Tx0UdOJwF0cOKiSWdt7cO86VU8xQji_zTZIBUw=452" style="font-size: 16px; line-height: 1.6;  padding: 10px 0; display: inline-block;  text-decoration: underline;"&gt;&lt;span style="mso-text-raise:13pt; text-decoration: underline;"&gt;Track your referrals here.&lt;/span&gt;&lt;/a&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		


																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;"&gt;

																						&lt;p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;"&gt;
																							Want to advertise in TLDR? 📰
																						&lt;/p&gt;
																						&lt;div class="text-block" style="margin-top: 10px;"&gt;
																							If your company is interested in reaching an audience of cybersecurity professionals and decision makers, you may want to &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisecta/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/dTZLO9b-iDcL5j7elM2sK8zVvg7KTMo2BwiRj1otJE8=452"&gt;&lt;strong&gt;&lt;span&gt;advertise with us&lt;/span&gt;&lt;/strong&gt;&lt;/a&gt;.
																						&lt;/div&gt;
																						&lt;br&gt;

																						&lt;!-- New "Want to work at TLDR?" section --&gt;

																						&lt;p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;"&gt;
																							Want to work at TLDR? 💼
																						&lt;/p&gt;
																						&lt;div class="text-block" style="margin-top: 10px;"&gt;
																							&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/L3b5pnsYS9DT7bvAjftbTAKr84IR_N1WBMjX4YwmhBA=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"&gt;&lt;strong&gt;Apply here&lt;/strong&gt;&lt;/a&gt;,
																							&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech%2Fc227b917-a6a4-40ce-8950-d3e165357871/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/hL5TRIYi0Y2NsdAwg0Z0Vxh80TzMBV1BmBka5brlAHw=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"&gt;&lt;strong&gt;create your own role&lt;/strong&gt;&lt;/a&gt; or send a friend's resume to &lt;a href="mailto:jobs@tldr.tech" style="color: #0000EE; text-decoration: underline;"&gt;jobs@tldr.tech&lt;/a&gt; and get $1k if we hire them! TLDR is one of &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Ffeed%2Fupdate%2Furn:li:activity:7401699691039830016%2F/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/Ky42WJQPRUiOpzTMpv13TYpDzZdzW4hzemNAh210K4U=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"&gt;&lt;strong&gt;Inc.'s Best Bootstrapped businesses&lt;/strong&gt;&lt;/a&gt; of 2025.
																						&lt;/div&gt;
																						&lt;br&gt;

																						&lt;div class="text-block"&gt;
																							If you have any comments or feedback, just respond to this email!
																							&lt;br&gt;
																							&lt;br&gt; Thanks for reading,
																							&lt;br&gt;
																							&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fprasannagautam%2F/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/mpVtIyHfCCAHlyFnwD6rl-tQpJD9E5IGmLLDXRUlkqY=452"&gt;&lt;span&gt;Prasanna Gautam&lt;/span&gt;&lt;/a&gt;, &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fericfernandezdelcampo%2F/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/Buho1x9Pb9BHrBQ1VChTz1CMP2G0HsbAu9s2zdgL_Sk=452"&gt;&lt;span&gt;Eric Fernandez&lt;/span&gt;&lt;/a&gt; &amp; &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fsammy-tbeile%2F/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/m3L1jFKe4tQCSfO-YeQsO441P9YGxWRQE4RA6frJHpc=452"&gt;&lt;span&gt;Sammy Tbeile&lt;/span&gt;&lt;/a&gt;
																							&lt;br&gt;
																							&lt;br&gt;
																						&lt;/div&gt;
																						&lt;br&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																		&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;
																			&lt;tbody&gt;
																				&lt;tr&gt;
																					&lt;td class="container" style="padding: 15px 15px;"&gt;
																						&lt;div class="text-block" id="testing-id"&gt;
																							&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%2Fmanage%3Femail=silk.theater.56%2540fwdnl.com/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/zFzWwvoQQV6HQhD_y0QrMtK5HLvHfv8VX2-GWPqimos=452"&gt;Manage your subscriptions&lt;/a&gt; to our other newsletters on tech, startups, and programming. Or if TLDR Information Security isn't for you, please &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Funsubscribe%3Fep=1%26l=8d9cea11-3e94-11ed-9a32-0241b9615763%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=a7c7e1c6-c62e-11f1-8691-07b33dd44d22%26pt=campaign%26pv=5%26spa=1791810163%26t=1791810710%26s=36362dd47692513e8e1e9e0c11b187a4772acaf07d3c4b2350dfbf298475ec35/1/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/inX87cgijZl6lE__TIMxgH98i0ZM_LeT4mQ-d5aV4n8=452"&gt;unsubscribe&lt;/a&gt;.
																							&lt;br&gt;

																						&lt;/div&gt;
																					&lt;/td&gt;
																				&lt;/tr&gt;
																			&lt;/tbody&gt;
																		&lt;/table&gt;

																	&lt;/td&gt;
																&lt;/tr&gt;
															&lt;/tbody&gt;
														&lt;/table&gt;
													&lt;/td&gt;
												&lt;/tr&gt;
											&lt;/tbody&gt;
										&lt;/table&gt;
									&lt;/td&gt;
								&lt;/tr&gt;
							&lt;/tbody&gt;
						&lt;/table&gt;
					&lt;/td&gt;
				&lt;/tr&gt;
			&lt;/tbody&gt;
		&lt;/table&gt;



	

&lt;img alt="" src="http://tracking.tldrnewsletter.com/CI0/010001a1303dadd2-3d71d2f2-810b-4204-ae08-77ea04fc8db8-000000/OapsLR2Sm7hkU8JlldUc414I8qp1SLKBETkEEI0Y38U=452" style="display: none; width: 1px; height: 1px;"&gt;
&lt;/body&gt;&lt;/html&gt;
Email Content
