Elastic rejects claims of a zero-day RCE flaw in Defend EDR
Source: https://www.bleepingcomputer.com/news/security/elastic-rejects-claims-of-a-zero-day-rce-flaw-in-defend-edr/
How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories
Source: https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories/
Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
Source: https://thehackernews.com/2025/08/taiwan-web-servers-breached-by-uat-7237.html
Hacked Law Enforcement and Government Email Accounts Sold on Dark Web
Source: https://www.infosecurity-magazine.com/news/law-enforcement-government-emails/
# Summer cybersecurity news catch up
Paris Natural History Museum and hosting provider Francelink paralyzed, Google victim of an attack documented by their own services, urgent CISA directive for Exchange and 5 new KEV vulnerabilities, Microsoft Patch Tuesday with 111 vulnerabilities patched, Alltricks and Manpower compromised, Dell laptops hacked with vegetables 🤯, etc.
There are also some cool articles and cool tools.
Content in french but most of the articles are in english.
Hackers leak 2.8M sensitive records from Allianz Life in Salesforce data breach
Source: https://securityaffairs.com/181093/data-breach/hackers-leak-2-8m-sensitive-records-from-allianz-life-in-salesforce-data-breach.html
Chapter #1
Reward : $100
This challenge is part of ongoing research at Malwation examining the potential of abusing foundation model via manipulation for malware development. We are currently preparing a comprehensive paper documenting the scope and implications of AI-assisted threat development.
The ZigotRansomware sample was developed entirely through foundation model interactions without any human code contribution. No existing malware code was mixed in or given as source code sample, no pre-built packer were integrated, and no commercial/open-source code obfuscation product were applied post-generation.
Research Objectives
This challenge demonstrates the complexity level achievable through pure AI code generation in adversarial contexts. The sample serves as a controlled test case to evaluate:
\- Reverse engineering complexity of AI-generated malware
\- Code structure and analysis patterns unique to AI-generated threats
\- Defensive capability gaps against novel generation methodologies
New TETRA Radio Encryption Flaws Expose Law Enforcement Communications
Source: https://thehackernews.com/2025/08/new-tetra-radio-encryption-flaws-expose.html
Google suffers data breach in ongoing Salesforce data theft attacks
Source: https://www.bleepingcomputer.com/news/security/google-suffers-data-breach-in-ongoing-salesforce-data-theft-attacks/
