An open-source tool named AnonymProxy has been developed in Rust to evade anti-bot systems that use TLS fingerprinting techniques such as JA3 and JA4. It works by intercepting raw TCP ClientHello packets and dynamically mutating the TLS handshake extensions using a Fisher-Yates shuffle, resulting in unique and unpredictable TLS fingerprints per connection. This evasion technique targets platforms like Cloudflare and Akamai that rely on static TLS fingerprinting to block automated traffic. The tool is asynchronous, lightweight, and publicly available on GitHub. No known exploits in the wild or patches are applicable since this is a tool for evasion rather than a vulnerability. The impact is primarily on the effectiveness of anti-bot and automated traffic detection systems relying on TLS fingerprinting. No geographic targeting is indicated.
CVE-2026-46300, known as Fragnesia, is a Linux kernel vulnerability that enables an unprivileged local attacker to escalate privileges to root on the host. It specifically affects GKE Standard clusters running Ubuntu nodes, while GKE Standard clusters with Container-Optimized OS nodes, GKE Autopilot, and GKE Sandbox are not impacted. Upstream kernel patches have recently been released but are still being integrated into GKE releases. Partial mitigations include running workloads as non-root, using seccomp profiles set to RuntimeDefault, and disabling privilege escalation in container security contexts. Patch versions for other affected environments like VMware GDC and GKE on AWS/Azure are pending. The vulnerability is rated as high severity due to the potential for container breakout and host compromise.
Cybersecurity leaders and practitioners brought their burning AI cybersecurity questions to EXPOSURE 2026. They left with clear answers and a blueprint for building an exposure management program. Get a recap and see highlights from the event in words and pictures. Key takeaways As frontier AI models simultaneously accelerate the pace of vulnerability discovery and exploitation and drastically reduce the cost and complexity of launching attacks, cybersecurity faces a critical inflection point where traditional threat models and manual workflows are no longer viable. EXPOSURE 2026 gave attendees a much-needed opportunity to connect with peers, learn how they’re addressing the challenges of AI and building it into their workflows, and develop a game plan, with exposure management at its core, for protecting their organizations from AI-powered adversaries. Tenable Co-CEOs Steve Vintz (right) and Mark Thurmond For the cybersecurity leaders and practitioners who attended EXPOSURE 2026 in Boston this week, the event could not have come at a better time. While momentum for exposure management as a means to proactively reduce cyber risk has been building for more than a year, recent rapid advances in frontier AI models have made it even more critical. EXPOSURE ‘26 attendees arrived at Boston’s historic Park Plaza Hotel on Monday, May 18, 2026, just six weeks after Anthropic unveiled its groundbreaking frontier model, Claude Mythos Preview . They showed up with pressing questions about securing AI, the impact of frontier AI models on cybersecurity, and how exposure management can address all that and more. They left with clear answers, following an intensive day of training and two days of thought-provoking mainstage and breakout sessions featuring Anthropic Field CTO (Cyber) Brett Andrews, CISOs from GEICO, Smithfield Foods, Munich Re, and EōS Fitness, and Tenable experts. EXPOSURE 2026 gave attendees a rare opportunity to catch their breath amid the escalating, machine-speed pace of cybersecurity. It kicked off with an immersive day of training that provided attendees with a blueprint for building a successful exposure management program. And it offered them a chance to compare notes with peers and work collaboratively to develop a game plan for protecting their organizations from AI-powered adversaries with exposure management at its core. Cybersecurity’s quadruple AI challenge Four challenges that AI creates for cybersecurity underpinned every session at EXPOSURE 2026: Frontier AI models like Anthropic’s Claude Opus 4.6 and Mythos make it vastly faster, easier, and more economical for threat actors to discover new vulnerabilities and build exploits for them. AI creates new attack vectors (e.g., prompt injection, jailbreaks, model poisoning, context poisoning in memory, etc.) that traditional cybersecurity controls weren’t designed to address. AI expands every organization’s attack surface, giving threat actors even more entry points to exploit. AI functions as a force-multiplier for threat actors, giving them speed and the advanced, 32-step reasoning capabilities required to autonomously execute an entire network attack chain. Anthropic Field CTO Brett Andrews (left) with Tenable SVP of Product Strategy Eitan Goldstein Anthropic’s Andrews discussed the impact of frontier models on cybersecurity, the threat landscape, and how defenders can leverage AI to their advantage. To illustrate what organizations are up against, several presentations highlighted the sharp contrast between the steady acceleration in vulnerability discovery and exploitation, and the simultaneous deceleration in organizations’ patching and remediation. Tenable CTO Vlad Korsunsky In 2021, for example, the median time to exploit was 84 days, according to Zero Day Clock . Today, it’s 1.6 days. Meanwhile, in 2025, it took organizations an average of 43 days to patch critical CVEs, up 34% from 32 days in 2024, according to data that Tenable Research contributed to the 2026 Verizon Data Breach Investigations Report (DBIR) , which was released on the first day of EXPOSURE 2026. Referencing additional data from the DBIR, Tenable Chief Product Officer Eric Doerr noted that 31% of breaches in 2025 began with an unpatched CVE as the initial access vector. This trend will likely intensify, as frontier AI models accelerate vulnerability discovery, unless security teams adapt. Doerr also spoke to data from Tenable showing that nearly two-thirds of breaches begin with something that isn’t a CVE, such as a misconfiguration, stolen credential, or exposed secret. He used this stat to prove the point that if you’re only concerned about CVEs, you’re leaving two-thirds of your organization’s attack surface exposed. It’s this other attack surface beyond just CVEs that exposure management addresses. Tenable Chief Product Officer Eric Doerr AI-powered exposure management: the blueprint for preemptive defense Presenters used these and other statistics from the DBIR, Tenable’s own telemetry, and other sources to make the case for cybersecurity transformation focused on a preemptive and much more autonomous defense. They showed how explosive, enterprisewide adoption of AI combined with AI-enabled threat actors requires that organizations build these exposure management capabilities into their cybersecurity programs: Unified visibility - Continuous, deterministic asset discovery across the entire hybrid attack surface, capturing every vulnerability, misconfiguration, and excessive permission across on-prem and cloud infrastructure, OT environments, and the rapidly expanding AI attack surface. Contextual, AI-powered insights - Moving past standard CVSS scores to focus on real-world exploitability and business impact, and mapping viable attack paths to understand exactly how an attacker could move laterally toward core assets. Machine-speed action - Shifting from manual workflows to automated, orchestrated fixes. Because human teams cannot triage alerts at machine speed, organizations must deploy agentic AI workflows with appropriate guardrails, including human oversight, to proactively harden posture and isolate active threats. Tenable CSO Robert Huber Tenable CSO Robert Huber shared his experience transforming his vulnerability management program and team into an exposure management program and team, which began two years ago. The impetus was the challenge that Huber and his team faced every quarter when he needed to report on cyber risk to the board of directors: His team had to manually gather, aggregate, harmonize, and analyze data from 50 different security tools that each had their own unique way of reporting on risk. Now, Huber’s team can produce reports in minutes. They’ve also extended their scope of visibility from less than 10,000 assets to more than 100,000 assets and reduced alert to ticket volume by 1,500 to 1, all with the same number of staff. A live AI vs. AI attack simulation created and led by Tenable Researchers Robert McSulla and Ben Smith demonstrated the capabilities of a fully autonomous, agentic defense against a fully autonomous, agentic adversary. McSulla and Smith impressed several key points upon their audience, including: Speed is not the only factor in AI-driven attacks. Yes, AI makes threat actors faster. It also makes them smarter. The demo showed how the adversarial agents reason, make decisions, adapt, and find new, unmapped attack surfaces. Defenders can gain the same advantages as attackers. Defensive agents proactively assess posture, develop and deploy patches for vulnerabilities, and take other hardening actions to reduce risk and mitigate threats. Security leaders and their teams need to get comfortable with autonomous defense. Consider your tolerance for fully autonomous defensive agents: Would you let them shut down a service, configure firewall rules, rotate credentials, or write and deploy patches? That’s what it takes to keep up with agentic attacks that achieve their objectives within three minutes. It’s time to build a governance framework for agentic defense. McSulla and Smith built a governance framework for the defensive agents in their simulation that determines intent, evaluates severity levels, and applies rules, such as when to require a human to make a decision or take an action. Bob McSulla (left) and Ben Smith Custom kicks and other fun Amid the seriousness of cybersecurity, attendees got to pick out custom Converse sneakers featuring Tenable’s iconic new branding. The "Sneaker Bar" at EXPOSURE 2026 EXPOSURE attendees also had the chance to experience the perfect summer evening at Fenway Park, home of the Boston Red Sox. An evening at Fenway Park during EXPOSURE 2026 Tenable announcements at EXPOSURE 2026 EXPOSURE 2026 was punctuated by a host of significant announcements from Tenable, including: The general availability of Tenable Hexa AI , the agentic engine of the Tenable One Exposure Management Platform that gives preemptive security teams capabilities to operate at machine speed. New AI initiatives with Anthropic to increase the agentic capabilities of Tenable One. A strategic integration with the Claude Compliance API designed to help customers improve their visibility into Claude usage across their organizations. The release of the Tenable One Open Connector , which allows customers to bring third-party, custom, and internal data from any source into Tenable One. The launch of the Tenable Open Partner Exchange Network . The Tenable Research team’s prolific contributions to the 2026 Verizon Data Breach Investigations Report .
DockSec is an open source tool developed as an OWASP incubator project that uses AI to correlate and prioritize vulnerability findings from multiple container security scanners. It generates clear remediation guidance and exact Dockerfile fixes to help developers address vulnerabilities in Docker images. The tool does not introduce new scanning capabilities but enhances existing scanners by reducing noise and focusing on impactful vulnerabilities. DockSec operates locally, ensuring image content privacy, and supports multiple large language models for remediation explanation. It aims to bridge the gap between vulnerability detection and fixing, addressing the challenge of unfixed vulnerabilities in container images that may be deployed in production or CI/CD pipelines.
A daily security digest reports 14 newly identified critical and high-severity supply-chain threats affecting npm, PyPI, and AI ecosystems as of 2026-05-26. Critical issues include credential harvesting and self-propagation malware in u/cap-js packages, a worm payload in u/beproduct/nestjs-auth, and a supply chain compromise in guardrails-ai. High-severity vulnerabilities include denial-of-service (DoS) attacks in Parse Server and other npm packages, remote code execution (RCE) in AI toolchains Diffusers and lmdeploy, SSRF vulnerabilities in Crawlee and SillyTavern, and injection or hijacking attacks in samlify and js-cookie. Immediate remediation actions are recommended for critical packages, including upgrading or uninstalling affected versions. Several vulnerabilities enable denial-of-service or remote code execution, posing significant risk if exploited.
The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.
Security Fix(es):
* dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)
* dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)
* dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)
* dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)
* dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
NoPeek is an open-source Android tool designed to detect smart glasses and VR headsets nearby by scanning immutable Bluetooth Low Energy (BLE) manufacturer company IDs. These company IDs are embedded in every BLE advertisement frame and cannot be randomized or hidden, unlike MAC addresses. The tool uses a three-layer detection approach: primary detection via BLE manufacturer IDs, secondary confirmation via device name keywords, and a low-confidence fallback using MAC OUI prefixes. It targets devices such as Meta Ray-Ban glasses, Snap Spectacles, Meta Quest VR, Apple Vision Pro, and others. NoPeek operates locally on the device without internet connectivity, preserving user privacy. Detection is probabilistic and limited to devices broadcasting BLE signals when powered on. The tool is intended as a privacy awareness aid rather than a comprehensive security solution.
For the latest discoveries in cyber research for the week of 25th May, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES 7-Eleven, the global convenience store chain, confirmed a breach after an unauthorized access to systems used for franchisee documents. ShinyHunters claimed responsibility and said it stole more than 600,000 Salesforce records containing personal […] The post 25th May – Threat Intelligence Report appeared first on Check Point Research .
TeamPCP now operates across three package ecosystems in parallel, it reached GitHub&#;x26;#;39;s own internal codebase, it trojanized an officially Microsoft-published Python SDK, and it appears to have open-sourced its own framework on GitHub.
Vyrox Security open-sourced a critical component of their AI SOC analyst platform: a Rust-based proxy service responsible for executing approved endpoint detection and response (EDR) actions such as isolating hosts or killing processes. This proxy enforces strict controls including HMAC-SHA256 request authentication, rate limiting, and append-only audit logging. It is designed to be fail-closed by default (dry run mode) to prevent unintended disruptions. The project is in alpha and the vendor is actively seeking community feedback to identify potential security weaknesses in the threat model. No known exploits or vulnerabilities have been reported to date.
This report highlights 14 supply-chain threats affecting npm, PyPI, and AI-related packages as of May 22, 2026, involving critical worms, credential harvesting, and remote code execution (RCE) vulnerabilities. The information originates from a Reddit cybersecurity post with minimal technical details and no specific affected versions or patches provided. No known exploits in the wild are reported at this time. The severity is assessed as critical based on the nature of the threats mentioned, but detailed technical or remediation information is lacking.
Open-source framework ROADtools is being misused by threat actors for cloud intrusions. Learn how to identify its malicious use. The post Paved With Intent: ROADtools and Nation-State Tactics in the Cloud appeared first on Unit 42 .
Basira is an open source AI code reviewer that includes an OWASP audit feature and supports Bring Your Own Key (BYOK) encryption. According to the provided information, Basira currently has zero reported CVEs, indicating no known vulnerabilities. The mention of 'RCE' in the tags and newsworthiness assessment appears to be related to the topic context rather than a confirmed vulnerability. There is no indication of any active exploits or security issues associated with Basira at this time.
In this edition of the Threat Source newsletter, William explores the value of being "ungovernable" in a professional setting, sharing how challenging the status quo and seeking out the smartest people in the room can lead to a more fulfilling and successful career.
Recently, Rob wrote about a tool, Proxifier, that can intercept requests from specific processes. Proxifier is available for Windows, macOS, and Android. But I have not seen a generic Linux option yet. The advantage of a tool like Proxifier is the ability to target specific software. For debugging, reverse engineering, and similar tasks, selecting a specific process is quite useful, as it creates less noise to sift through and simplifies analysis.
A highly critical vulnerability has been reported in Drupal Core that could allow remote code execution (RCE) on sites using PostgreSQL as the database backend. The information originates from a Reddit cybersecurity discussion referencing an external news source. No specific affected versions or technical details have been provided, and there is no confirmation of known exploits in the wild. Patch availability and remediation status are not confirmed from the available data.
The AI systems shipping inside enterprises today are fundamentally different from the ones we were building even two years ago, because they have moved well past answering questions and into accessing your email, retrieving records from your CRM, writing and executing code, and taking actions on your behalf across dozens of connected systems. The post Introducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow appeared first on Microsoft Security Blog .