{
 "site": "ctxsec",
 "generated": "2026-10-13T23:55:28Z",
 "sections": [
  {
   "id": "context",
   "title": "Context & Harness Attacks",
   "nav": "Context & Harness",
   "desc": "Prompt injection, MCP and skill supply chain, agent identity, agentic-browser attacks and sandbox escapes: the layer around the model."
  },
  {
   "id": "news",
   "title": "Cybersecurity News",
   "nav": "News",
   "desc": "Exploited-now vulnerabilities and patch alerts, each checked against CISA KEV or the vendor."
  },
  {
   "id": "hunting",
   "title": "Threat Hunting",
   "nav": "Hunting",
   "desc": "Hunt ideas and query sketches (KQL / Sigma-style) tied to current threats, with sources."
  },
  {
   "id": "ai",
   "title": "AI",
   "nav": "AI",
   "desc": "AI security and AI for security: vuln-hunting agents and tools, with honest caveats."
  },
  {
   "id": "playbooks",
   "title": "Playbooks",
   "nav": "Playbooks",
   "desc": "Step-by-step paths with checklists you can work through."
  },
  {
   "id": "tips",
   "title": "Tips & Guides",
   "nav": "Tips",
   "desc": "Short, practical how-tos."
  },
  {
   "id": "industry",
   "title": "Industry News",
   "nav": "Industry",
   "desc": "Vendor, policy and market news that affects defenders."
  }
 ],
 "items": [
  {
   "id": "sap-oct-2026-89111",
   "section": "news",
   "date": "2026-10-13",
   "status_label": "confirmed (vendor)",
   "title": "SAP October Patch Day: CVSS 10.0 OAuth2 SSRF in Cloud SDK for Python (CVE-2026-89111)",
   "body": "SAP's Oct 13 Security Patch Day ships 16 new notes and 4 GitHub advisories. Highest severity: CVE-2026-89111 (CVSS 10.0) in SAP Cloud SDK for Python &lt;0.45.2 \u2014 attacker-controlled <code>tenant_subdomain</code> can redirect OAuth2 token requests and exfiltrate client credentials in multi-tenant BTP apps. Fix: upgrade to 0.45.2+; workaround: allowlist tenant subdomains. Also Critical: NetWeaver Visual Composer broken access control (CVE-2026-89110, 9.9) and S/4HANA Manage Substitution/Validation Rules code injection (CVE-2026-89107, 9.9).",
   "sources": [
    [
     "SAP Security Patch Day \u2014 October 2026",
     "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/october-2026.html"
    ],
    [
     "GitHub advisory GHSA-4mv3-jxxm-9cx2",
     "https://github.com/SAP/cloud-sdk-python/security/advisories/GHSA-4mv3-jxxm-9cx2"
    ],
    [
     "CVE-2026-89111",
     "https://www.cve.org/CVERecord?id=CVE-2026-89111"
    ]
   ]
  },
  {
   "id": "meta-github-breach-2026-10",
   "section": "news",
   "date": "2026-10-13",
   "status_label": "confirmed (vendor)",
   "title": "Meta: stolen employee credential used to access GitHub repos; ~1,500 people notified",
   "body": "Meta told SecurityWeek that an outside group used a Meta employee's stolen credentials to access some company GitHub repositories. About 99% of what was taken was business/source code; ~1% was personal data stored against policy (some synthetic/anonymized test data). Roughly 1,500 people \u2014 mostly U.S. Meta employees \u2014 are being notified. Meta says no Meta product vulnerability and internal systems were not breached; secrets were rotated and new controls added to keep user data out of GitHub. Law enforcement and GitHub were engaged.",
   "sources": [
    [
     "SecurityWeek (Meta statement)",
     "https://www.securityweek.com/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach/"
    ],
    [
     "The Verge",
     "https://www.theverge.com/tech/1010737/meta-says-its-github-was-hacked-exposing-1500-peoples-personal-data"
    ]
   ]
  },
  {
   "id": "xbow-chrome-fullchain-2026-10",
   "section": "ai",
   "date": "2026-10-13",
   "status_label": "confirmed (author's post)",
   "title": "XBOW: AI-assisted Chrome full-chain (6 days) earns Google's first $250k 2026 VRP award",
   "body": "XBOW published that researchers plus AI agents (OpenAI GPT-5.6 Sol) built a three-bug Chrome\u2192Windows full-chain in six days (Aug 2\u20137), winning Google's first $250,000 Chrome full-chain VRP under 2026 rules. Chain crossed V8 sandbox and renderer sandbox; bugs were reported, fixed, and never used against users. XBOW estimates ~$40k API compute. Caveat: this is a responsible-disclosure research write-up, not an in-the-wild campaign \u2014 keep Chrome updated and relaunch after updates.",
   "sources": [
    [
     "XBOW blog",
     "https://xbow.com/blog/xbow-built-a-chrome-full-chain-exploit"
    ],
    [
     "XBOW Labs technical post",
     "https://xbow.com/labs/research/zero-to-calc-in-six-days-inside-xbow-chrome-full-chain"
    ]
   ]
  },
  {
   "id": "mdo-prompt-injection-protection",
   "section": "context",
   "date": "2026-10-13",
   "status_label": "confirmed (vendor)",
   "title": "Defender for Office 365: prompt-injection protection quarantines high-confidence email before Copilot sees it",
   "body": "Microsoft documents a mail-flow layer that detects prompt-injection content in inbound email before delivery to users or AI assistants. Detections land as High confidence phishing with technology \"Prompt injection protection\" (MDO Plan 2 / E5-class). Focus: instructions that try to exfiltrate via URL, reveal system prompts, or enumerate write-capable tools \u2014 including hidden/white-on-white text. Runtime Copilot safeguards remain a second layer. This is harness/context defense at the email channel, not a new CVE.",
   "sources": [
    [
     "Microsoft Learn: Prompt injection protection",
     "https://learn.microsoft.com/en-us/defender-office-365/step-by-step-guides/prompt-injection-protection-defender-for-office-365"
    ],
    [
     "Microsoft Learn: Copilot prompt defense in depth",
     "https://learn.microsoft.com/en-us/microsoft-365/copilot/copilot-prompt-defense-in-depth"
    ]
   ]
  },
  {
   "id": "hunt-putty-etherhiding",
   "section": "hunting",
   "date": "2026-10-13",
   "status_label": "hunt idea",
   "title": "Hunt: SEO fake-PuTTY MSI \u2192 Node BYOI loader with EtherHiding C2",
   "body": "Unit 42 (Oct 12 TTI): SEO-poisoned \"PuTTY\" downloads serve Putty-x86_64.msi that drops a signed PuTTY 0.85 decoy plus a Node.js bring-your-own-interpreter loader. C2 URL is resolved via Ethereum <code>eth_call</code> (EtherHiding) and polled every 500 ms as fake static assets; operators push recon, cookie theft, and near-live screen streaming.<pre>// KQL sketch \u2014 AppData node + msiexec\u2192curl Node zip\nDeviceProcessEvents\n| where FileName =~ \"node.exe\" and FolderPath has @\"AppData\\Local\"\n| project Timestamp, DeviceName, FolderPath, ProcessCommandLine\nDeviceProcessEvents\n| where InitiatingProcessFileName =~ \"msiexec.exe\"\n| where FileName in~ (\"curl.exe\",\"cmd.exe\") and ProcessCommandLine has \"nodejs.org\"</pre>Also watch eth_call from non-browser processes to public Ethereum RPCs. Sketch only; validate IOCs from Unit 42 before alerting.",
   "sources": [
    [
     "Unit 42 timely threat intel",
     "https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2026-10-12-MSI-impersonating-PuTTY-delivers-malware.txt"
    ],
    [
     "@Unit42_Intel",
     "https://x.com/Unit42_Intel/status/2110107318444499172"
    ]
   ]
  },
  {
   "id": "tip-patch-motw-first",
   "section": "tips",
   "date": "2026-10-13",
   "status_label": "guide",
   "title": "Patch Tuesday triage: MotW bypass first, then exposed edge, then RCEs",
   "body": "For October's record Microsoft release, prioritize by exploitation evidence, not CVSS alone: (1) CVE-2026-96951 Windows Shell MotW bypass \u2014 already exploited and on CISA KEV (due Oct 16); (2) internet-facing edge already in KEV (Ivanti Connect Secure CVE-2026-104935); (3) high-likelihood RCEs Microsoft flags as \"Exploitation More Likely\" (Exchange, AD DS, MSMQ, Outlook). Use MSRC risk cohorts for shared-boundary bundles, then confirm with VEX. Restart browsers after Chrome updates so sandbox fixes take effect.",
   "sources": [
    [
     "CISA KEV alert Oct 13",
     "https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-adds-two-known-exploited-vulnerabilities-catalog"
    ],
    [
     "MSRC risk cohorts",
     "https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates"
    ],
    [
     "SANS ISC Patch Tuesday diary",
     "https://isc.sans.edu/diary/0"
    ]
   ]
  },
  {
   "id": "unprompted-state-of-ai-cyber",
   "section": "context",
   "date": "2026-10-13",
   "status_label": "confirmed (author's post)",
   "title": "State of AI Cybersecurity: harness-layer attack proposals up 175% (12 \u2192 33), March to October",
   "body": "Rob T. Lee and Indre Altman compared the [un]prompted AI Security Practitioner Conference CFP rounds: 469 submissions in March and 490 in October. Harness-layer attack proposals rose from 12 to 33. 94 submissions used the word 'harness'. 71% of the October pool is agent-native (harness, MCP and skill supply chain, agent identity, prompt injection, agentic-browser attacks). Only 12% carry production evidence. Caveat: this is a CFP census, not incident data. The full report is linked from the conference site; we've only verified the figures quoted in the author's post.",
   "sources": [
    [
     "Rob T. Lee on X",
     "https://x.com/robtlee/status/2110127235349008754"
    ],
    [
     "[un]prompted conference",
     "https://unpromptedcon.org"
    ]
   ]
  },
  {
   "id": "cve-2026-96951",
   "section": "news",
   "date": "2026-10-13",
   "status_label": "confirmed",
   "title": "Windows Shell zero-day CVE-2026-96951 exploited; on CISA KEV, due Oct 16",
   "body": "Microsoft's October Patch Tuesday marks this Windows Shell security feature bypass (CVSS 8.8) as 'Exploitation Detected'. CISA added it to KEV on Oct 13 (listed as a Windows command injection) with an Oct 16 federal due date. Patch Windows endpoints first.",
   "sources": [
    [
     "MSRC",
     "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951"
    ],
    [
     "CISA KEV",
     "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    ]
   ]
  },
  {
   "id": "cve-2026-104935",
   "section": "news",
   "date": "2026-10-13",
   "status_label": "confirmed",
   "title": "Ivanti Connect Secure CVE-2026-104935 added to KEV, due Oct 16",
   "body": "Authentication bypass by spoofing leading to remote command execution (CVSS 8.6). Listed in CISA KEV on Oct 13 with an Oct 16 due date. Apply Ivanti's fix and review appliance integrity.",
   "sources": [
    [
     "Ivanti advisory",
     "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935"
    ],
    [
     "CISA KEV",
     "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    ]
   ]
  },
  {
   "id": "pt-2026-10",
   "section": "news",
   "date": "2026-10-13",
   "status_label": "confirmed",
   "title": "October 2026 Patch Tuesday: criticals to prioritize after the zero-day",
   "body": "Record-scale Microsoft release (reporting outlets cite ~1,411\u20131,419 Microsoft CVEs depending on counting). Actively exploited: Windows Shell MotW bypass CVE-2026-96951 (CVSS 8.8, CISA KEV due Oct 16). Publicly disclosed before patch (not known exploited per Microsoft/SANS): .NET Framework WDAC bypass CVE-2026-108398 and MessagePack-CSharp DoS CVE-2026-92707. High-value not-known-exploited: Exchange RCE CVE-2026-70571 (8.1) and AD Domain Services RCE CVE-2026-70229 (8.1), both 'Exploitation More Likely'; Outlook RCEs (e.g. CVE-2026-70242); Message Queuing RCE CVE-2026-100202 (9.8). Severity and exploitability labels are Microsoft's.",
   "sources": [
    [
     "MSRC release notes",
     "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct"
    ],
    [
     "NVD CVE-2026-70571",
     "https://nvd.nist.gov/vuln/detail/CVE-2026-70571"
    ],
    [
     "NVD CVE-2026-70229",
     "https://nvd.nist.gov/vuln/detail/CVE-2026-70229"
    ],
    [
     "NVD CVE-2026-70242",
     "https://nvd.nist.gov/vuln/detail/CVE-2026-70242"
    ],
    [
     "NVD CVE-2026-100202",
     "https://nvd.nist.gov/vuln/detail/CVE-2026-100202"
    ],
    [
     "SANS ISC Patch Tuesday",
     "https://isc.sans.edu/diary/0"
    ],
    [
     "ZDI October review",
     "https://www.zerodayinitiative.com/blog/2026/10/13/the-october-2026-security-update-review"
    ]
   ]
  },
  {
   "id": "redcap",
   "section": "news",
   "date": "2026-10-13",
   "status_label": "exploited (researcher), not on KEV",
   "title": "REDCap CVE-2026-90817 unauthenticated RCE exploited via public surveys",
   "body": "Unit 42 reports attacks dropping a webshell then a fileless XMRig miner. Fixed in 16.0.49, 17.3.10 and 17.4.4. Not in CISA KEV as of Oct 13; NVD has no entry yet.",
   "sources": [
    [
     "Unit 42 (via @Unit42_Intel)",
     "https://x.com/Unit42_Intel/status/2109811397617992120"
    ]
   ]
  },
  {
   "id": "vcenter-kev",
   "section": "news",
   "date": "2026-10-13",
   "status_label": "confirmed",
   "title": "VMware vCenter CVE-2026-59310 on CISA KEV since Aug 18 (known ransomware use)",
   "body": "Broadcom VMware vCenter path traversal that lets a network-adjacent attacker execute code. CISA added it to KEV on Aug 18 with an Aug 21 federal due date and marks known ransomware campaign use. A separate dark-web monitor also claimed an exploit for sale (~$10k) on Oct 13; treat that as secondary noise. Patch vCenter and keep it off the public internet.",
   "sources": [
    [
     "CISA KEV",
     "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    ],
    [
     "Broadcom advisory",
     "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
    ],
    [
     "NVD",
     "https://nvd.nist.gov/vuln/detail/CVE-2026-59310"
    ],
    [
     "@ptdbugs (sale claim)",
     "https://x.com/ptdbugs/status/2109657410138693679"
    ]
   ]
  },
  {
   "id": "agentic-bug-hunter",
   "section": "ai",
   "date": "2026-10-13",
   "status_label": "tool, community",
   "title": "Agentic Bug Hunter (community bug-bounty toolkit)",
   "body": "Built around Claude Code: recon, known-CVE scanning and attack-surface ranking. Caveats: third-party community project, not audited by us; needs Claude Code or API access and won't run fully on local models without changes; only point it at targets you're authorized to test.",
   "sources": [
    [
     "GitHub",
     "https://github.com/awarexone/Agentic-Bug-Hunter"
    ]
   ]
  },
  {
   "id": "hunt-ahsay",
   "section": "hunting",
   "date": "2026-10-13",
   "status_label": "hunt idea",
   "title": "Hunt: AhsayCBS / REDCap post-exploitation (webshell \u2192 miner)",
   "body": "Both campaigns end in web-server-spawned shells and miners. Look for the web service process spawning cmd/powershell/sh, new script files in web roots, and outbound connections to mining pools.<pre>// KQL (Defender) sketch\nDeviceProcessEvents\n| where InitiatingProcessFileName in~ (\"java.exe\",\"w3wp.exe\",\"httpd\",\"php-fpm\")\n| where FileName in~ (\"cmd.exe\",\"powershell.exe\",\"sh\",\"bash\")\n| project Timestamp, DeviceName, InitiatingProcessFileName, ProcessCommandLine</pre>Tune the parent list to your stack. Sketch only; validate before alerting.",
   "sources": [
    [
     "Huntress",
     "https://www.huntress.com/blog/ahsaycbs-flaws-exploit"
    ],
    [
     "Unit 42 (via X)",
     "https://x.com/Unit42_Intel/status/2109811397617992120"
    ]
   ]
  },
  {
   "id": "hunt-sma",
   "section": "hunting",
   "date": "2026-10-13",
   "status_label": "hunt idea",
   "title": "Hunt: SonicWall SMA1000 SSRF abuse",
   "body": "Review SMA1000 access logs for unauthenticated requests to unusual Work Place paths, and investigate unexpected connections from the appliance to internal services. Rotate credentials for anything reachable through the appliance's trust context.",
   "sources": [
    [
     "SonicWall PSIRT",
     "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017"
    ]
   ]
  },
  {
   "id": "tip-kev-feed",
   "section": "tips",
   "date": "2026-10-13",
   "status_label": "guide",
   "title": "Track CISA KEV yourself in one command",
   "body": "KEV is a public JSON feed. Pull the latest additions with: <pre>curl -s https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json | jq '.vulnerabilities | sort_by(.dateAdded) | .[-5:][] | {cveID, dateAdded, dueDate}'</pre>",
   "sources": [
    [
     "CISA KEV",
     "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    ]
   ]
  },
  {
   "id": "msrc-risk-cohorts",
   "section": "news",
   "date": "2026-10-13",
   "status_label": "confirmed (vendor)",
   "title": "MSRC introduces 'risk cohorts' to help triage October's huge release",
   "body": "Alongside October Patch Tuesday, MSRC published guidance that groups CVEs by shared deployment, exposure or trust-boundary questions, so one assessment covers many CVEs. MSRC is explicit that cohorts don't replace per-CVE assessment or change update guidance: exploitation status and severity still decide priority.",
   "sources": [
    [
     "MSRC blog",
     "https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates"
    ],
    [
     "ZDI October review",
     "https://www.zerodayinitiative.com/blog/2026/10/13/the-october-2026-security-update-review"
    ]
   ]
  },
  {
   "id": "openai-recording-device",
   "section": "industry",
   "date": "2026-10-13",
   "status_label": "confirmed (DOJ + company)",
   "title": "OpenAI: employee arrested for planting a recording device in an executive conference room",
   "body": "OpenAI said it found a hidden recording device, used its own AI to trace it, and referred the case to the FBI. DOJ says Abdulrahman Alfozan was arrested Oct 9 and charged with intercepting oral communications. OpenAI says it has no indication that model weights, source code or customer data were accessed or exfiltrated. The employee was terminated. Insider-threat reminder for AI labs.",
   "sources": [
    [
     "DOJ press release",
     "https://www.justice.gov/opa/pr/saudi-national-arrested-installing-surreptitious-audio-recording-device-openai"
    ],
    [
     "Reuters via NBC",
     "https://www.nbcnews.com/tech/tech-news/openai-employee-arrested-hidden-listening-device-company-says-rcna603262"
    ],
    [
     "TechCrunch",
     "https://techcrunch.com/2026/10/13/fbi-arrests-openai-employee-accused-of-planting-hidden-recording-device-in-conference-room/"
    ]
   ]
  },
  {
   "id": "mde-attack-disruption",
   "section": "tips",
   "date": "2026-10-13",
   "status_label": "tip / practitioner opinion",
   "title": "Automatic attack disruption needs Defender for Endpoint Plan 2, not Plan 1",
   "body": "A red-teamer reports MDE P2's automatic attack disruption repeatedly cut off an internal test where other products didn't (opinion, one engagement). The licensing fact is from Microsoft Learn: attack disruption needs MDE Plan 2 (or E5-class / Defender for Business). P1 gives prevention and manual response only. Set device groups to Full or Semi automation and keep the Sense agent current.",
   "sources": [
    [
     "@techspence on X",
     "https://x.com/techspence/status/2110025535636013080"
    ],
    [
     "Microsoft Learn: configure attack disruption",
     "https://learn.microsoft.com/en-us/defender-xdr/configure-attack-disruption"
    ]
   ]
  },
  {
   "id": "france-fridge-ot-2026-10",
   "section": "news",
   "date": "2026-10-12",
   "status_label": "confirmed (vendor statements)",
   "title": "French supermarket chains hit via refrigeration controllers; food spoilage and prosecutor probe",
   "body": "Attackers remotely forced defrost cycles on vulnerable Danfoss refrigeration controllers (obsolete AK-SM800/AK-SC355 or unpatched AK-SM800A), with reports of programmed temps up to ~50\u00b0C. Coop\u00e9rative U's CEO confirmed impact from Oct 11; Groupement Mousquetaires reported ~150 Intermarch\u00e9 + 30 Netto stores; Carrefour ~80 of 6,000; Casino said ~5% of Monoprix. Paris prosecutor opened a large-scale cyber-attack investigation. OT reminder: keep ICS management interfaces offline or VPN-segmented \u2014 Claroty previously found thousands of similar controllers internet-exposed.",
   "sources": [
    [
     "Infosecurity Magazine",
     "https://www.infosecurity-magazine.com/news/french-supermarket-chains/"
    ],
    [
     "AP News",
     "https://apnews.com/article/france-cyberattack-supermarkets-refrigeration-systems-78a813a8efd466b360655339f96083dc"
    ]
   ]
  },
  {
   "id": "ahsay",
   "section": "news",
   "date": "2026-10-12",
   "status_label": "exploited (vendor/researcher), not on KEV",
   "title": "AhsayCBS CVE-2026-105133 + CVE-2026-105134 chain exploited since Oct 7",
   "body": "Auth bypass chained with Replication Receiver RCE gives SYSTEM. Huntress observed webshells and a disguised crypto miner. The first fix was incomplete: install hotfix 10.3.4.45 (v10) or 9.15.2.70 (v7-v9), reboot, then hunt for compromise. Not in CISA KEV as of Oct 13.",
   "sources": [
    [
     "Huntress",
     "https://www.huntress.com/blog/ahsaycbs-flaws-exploit"
    ],
    [
     "Ahsay",
     "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update"
    ]
   ]
  },
  {
   "id": "bricksforge",
   "section": "news",
   "date": "2026-10-12",
   "status_label": "exploited (Patchstack), not independently re-verified",
   "title": "Bricksforge WordPress plugin CVE-2026-85097 unauthenticated RCE",
   "body": "Patchstack reports first exploitation on Oct 7. Update the plugin or remove it. We could not reach a primary advisory page today, so treat details as preliminary. Not in KEV as of Oct 13.",
   "sources": [
    [
     "Patchstack database",
     "https://patchstack.com/database/"
    ],
    [
     "@averyjparker summary",
     "https://x.com/averyjparker/status/2109617279910674795"
    ]
   ]
  },
  {
   "id": "fuzzing-taskflow",
   "section": "ai",
   "date": "2026-10-11",
   "status_label": "tool",
   "title": "GitHub Security Lab Fuzzing Taskflow",
   "body": "Open-source taskflows for the seclab-taskflow-agent framework that use an LLM to plan, build and triage fuzzing harnesses. Caveats: needs model API access and real compute; LLM-written harnesses still need human review, and crashes are not vulnerabilities until triaged.",
   "sources": [
    [
     "seclab-taskflows-fuzzing",
     "https://github.com/GitHubSecurityLab/seclab-taskflows-fuzzing"
    ],
    [
     "seclab-taskflow-agent",
     "https://github.com/GitHubSecurityLab/seclab-taskflow-agent"
    ]
   ]
  },
  {
   "id": "sonicwall",
   "section": "news",
   "date": "2026-10-09",
   "status_label": "exploitation reported, not on KEV",
   "title": "SonicWall SMA1000 CVE-2026-102255 pre-auth SSRF under attack",
   "body": "Pre-auth SSRF in the Work Place interface (advisory SNWLID-2026-0017). Upgrade to 12.4.3-03670 or 12.5.0-03082; note 12.5.0-02952, the September zero-day fix, is now listed as affected. Canada's Cyber Centre cites open-source reports of exploitation. Not in KEV as of Oct 13.",
   "sources": [
    [
     "SonicWall PSIRT",
     "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017"
    ],
    [
     "CVE record",
     "https://www.cve.org/CVERecord?id=CVE-2026-102255"
    ],
    [
     "Cyber Centre AV26-1017",
     "https://www.cyber.gc.ca/en/alerts-advisories/sonicwall-security-advisory-av26-1017"
    ]
   ]
  },
  {
   "id": "doj-famous-chollima-2026-10",
   "section": "industry",
   "date": "2026-10-02",
   "status_label": "confirmed (DOJ)",
   "title": "DOJ/FBI disrupt DPRK remote IT worker \"laptop farms\" affecting 70+ U.S. companies",
   "body": "DOJ announced coordinated actions against North Korean remote IT-worker schemes that place fraudulently hired workers inside U.S. firms via stolen identities and U.S.-based laptop farms. Actions include indictments, arrests of U.S. facilitators, and searches; CrowdStrike published assistance on disrupting FAMOUS CHOLLIMA operations. Defender takeaway: identity proofing for remote hires, geolocation/device anomalies on corporate endpoints, and vendor/contractor access reviews remain high priority.",
   "sources": [
    [
     "DOJ press release",
     "https://www.justice.gov/opa/pr/justice-department-announces-coordinated-actions-combat-north-korean-remote-it-worker"
    ],
    [
     "CrowdStrike blog",
     "https://www.crowdstrike.com/en-us/blog/fbi-disrupts-famous-chollima-operation-with-crowdstrike-assistance/"
    ]
   ]
  },
  {
   "id": "msrc-vex",
   "section": "news",
   "date": "2026-09-08",
   "status_label": "confirmed (vendor)",
   "title": "Microsoft now publishes VEX statements for all Microsoft-assigned CVEs",
   "body": "Since Sept 8, 2026, MSRC has published machine-readable CSAF VEX documents for every Microsoft CVE, extending the Azure Linux pilot from Oct 2025. Feed your scanner from msrc.microsoft.com/csaf/vex/ to cut false positives. It doesn't add any updates you have to deploy.",
   "sources": [
    [
     "MSRC blog",
     "https://www.microsoft.com/en-us/msrc/blog/2026/09/toward-greater-transparency-expanding-machine-readable-vulnerability-exploitable-exchange"
    ],
    [
     "CSAF VEX directory",
     "https://msrc.microsoft.com/csaf/vex/"
    ]
   ]
  },
  {
   "id": "safeharness",
   "section": "context",
   "date": "2026-04-15",
   "status_label": "research (benchmark, not production)",
   "title": "SafeHarness: defenses built into the agent harness lifecycle",
   "body": "An arXiv paper treating the harness (tool use, context management, state) as the attack surface. It proposes four defense layers: adversarial context filtering, causal verification of decisions, privilege-separated tool control and safe rollback. It reports ~42% lower attack success on benchmarks. Caveat: simulated evaluation, not production evidence.",
   "sources": [
    [
     "arXiv 2604.13630",
     "https://arxiv.org/abs/2604.13630"
    ],
    [
     "Code",
     "https://github.com/liu-yang-maker/SafeHarness"
    ]
   ]
  }
 ],
 "playbooks": [
  {
   "slug": "patch-tuesday-triage",
   "title": "Patch Tuesday Triage",
   "summary": "A six-step path from release-notes day to verified rollout. Work top to bottom; each step ends with a checklist.",
   "audience": [
    "Security lead",
    "Sysadmin",
    "Helpdesk"
   ],
   "steps": [
    {
     "t": "Pull the facts",
     "d": "Start from primary sources, not headlines. Open the MSRC release notes and the CISA KEV catalog side by side.",
     "c": [
      "Note every CVE Microsoft marks 'Exploitation Detected'",
      "Note anything publicly disclosed",
      "Check KEV for same-day additions and their due dates",
      "Record the KB numbers for each Windows build you run"
     ]
    },
    {
     "t": "Map to what you own",
     "d": "A critical bug in a product you don't run is noise. Match the list against your asset inventory.",
     "c": [
      "List affected products present in your estate (Exchange, AD DS, Outlook, DHCP, MSMQ, QUIC, Hyper-V)",
      "Flag internet-facing systems",
      "Flag domain controllers and identity infrastructure separately"
     ]
    },
    {
     "t": "Rank by real risk",
     "d": "Order: exploited and exposed \u2192 exploited internal \u2192 'More Likely' on exposed services \u2192 everything else.",
     "c": [
      "Exploited zero-days get an emergency change",
      "Check whether features like the Outlook Preview Pane are an attack vector",
      "Write down the order and why, in one line per item"
     ]
    },
    {
     "t": "Mitigate what you can't patch today",
     "d": "Buy time where patching needs a maintenance window.",
     "c": [
      "Apply vendor workarounds where published",
      "Restrict exposure (firewall, disable unused roles like MSMQ)",
      "Turn on extra logging or detection for the affected component"
     ]
    },
    {
     "t": "Roll out in rings",
     "d": "Pilot, then broad, then the stragglers. Keep a rollback plan for domain controllers and Exchange.",
     "c": [
      "Ring 0: IT and test devices within 24 hours",
      "Ring 1: broad endpoints within the week",
      "Servers in agreed windows; DCs one at a time",
      "Track failed installs and reboots pending"
     ]
    },
    {
     "t": "Verify and close",
     "d": "A deployed patch isn't a fixed vulnerability until you've checked.",
     "c": [
      "Confirm build numbers or KBs installed via your management tool",
      "Rescan with your vulnerability scanner",
      "Hunt for signs of exploitation predating the patch on exposed systems",
      "Log exceptions with an owner and expiry date"
     ]
    }
   ]
  }
 ]
}