<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html charset=UTF-8"><meta charset="UTF-8"><meta name="viewport" content="width=device-width"><meta name="x-apple-disable-message-reformatting"><title>TLDR InfoSec</title><meta name="color-scheme" content="light dark"><meta name="supported-color-schemes" content="light dark"><style type="text/css">
:root {
color-scheme: light dark; supported-color-schemes: light dark;
}
*,
*:after,
*:before {
-webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;
}
* {
-ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%;
}
html,
body,
.document {
width: 100% !important; height: 100% !important; margin: 0; padding: 0;
}
body {
-webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; text-rendering: optimizeLegibility;
}
div[style*="margin: 16px 0"] {
margin: 0 !important;
}
table,
td {
mso-table-lspace: 0pt; mso-table-rspace: 0pt;
}
table {
border-spacing: 0; border-collapse: collapse; table-layout: fixed; margin: 0 auto;
}
img {
-ms-interpolation-mode: bicubic; max-width: 100%; border: 0;
}
*[x-apple-data-detectors] {
color: inherit !important; text-decoration: none !important;
}
.x-gmail-data-detectors,
.x-gmail-data-detectors *,
.aBn {
border-bottom: 0 !important; cursor: default !important;
}
.btn {
-webkit-transition: all 200ms ease; transition: all 200ms ease;
}
.btn:hover {
background-color: #f67575; border-color: #f67575;
}
* {
font-family: Arial, Helvetica, sans-serif; font-size: 18px;
}
@media screen and (max-width: 600px) {
.container {
width: 100%; margin: auto;
}
.stack {
display: block!important; width: 100%!important; max-width: 100%!important;
}
.btn {
display: block; width: 100%; text-align: center;
}
}
body,
p,
td,
tr,
.body,
table,
h1,
h2,
h3,
h4,
h5,
h6,
div,
span {
background-color: #FEFEFE !important; color: #010101 !important;
}
@media (prefers-color-scheme: dark) {
body,
p,
td,
tr,
.body,
table,
h1,
h2,
h3,
h4,
h5,
h6,
div,
span {
background-color: #27292D !important; color: #FEFEFE !important;
}
}
a {
color: inherit !important; text-decoration: underline !important;
}
</style><!--[if mso | ie]>
<style type="text/css">
a {
background-color: #FEFEFE !important; color: #010101 !important;
}
@media (prefers-color-scheme: dark) {
a {
background-color: #27292D !important; color: #FEFEFE !important;
}
}
</style>
<![endif]--></head><body class="">
<div style="display: none; max-height: 0px; overflow: hidden;">Cloud-based collaboration and communication firm RingCentral disclosed a data breach in which a threat actor compromised its systems </div>
<div style="display: none; max-height: 0px; overflow: hidden;">
<br>
</div>
<table align="center" class="document"><tbody><tr><td valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" class="container" width="600"><tbody><tr class="inner-body"><td>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr class="header"><td bgcolor="" class="container">
<table width="100%"><tbody><tr><td class="container">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" style="margin-top: 0px;" width="100%"><tbody><tr><td style="padding: 0px;">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div style="text-align: center;">
<span style="margin-right: 0px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/Al0xDl2v78zbl43DlZcZpI4r5ckmHWo_2CtjNmaiRJ8=452" rel="noopener noreferrer" target="_blank"><span>Sign Up</span></a>
|<span style="margin-right: 2px; margin-left: 2px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisetopnav/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/uJEaxutrGoBSobi4SFvogrQnG5YWJSsYYLWpP88XFg0=452" rel="noopener noreferrer" target="_blank"><span>Advertise</span></a></span>|<span style="margin-left: 2px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Fweb-version%3Fep=1%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=4cc909fa-9a30-11f1-93d8-115f516a9c19%26pt=campaign%26t=1786972089%26s=c2dbf1b29dca6c27b768cc5af9c0745863b9bc23c4395a7826510edb9bad53f6/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/wNgWv04QRt1XUs85FpR1JjUu1GaURnMOvl4m-R3gV4g=452"><span>View Online</span></a></span>
<br>
</span></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="text-align: center;"><span data-darkreader-inline-color="" style="--darkreader-inline-color:#3db3ff; color: rgb(51, 175, 255) !important; font-size: 30px;">T</span><span style="font-size: 30px;"><span data-darkreader-inline-color="" style="color: rgb(232, 192, 96) !important; --darkreader-inline-color:#e8c163; font-size:30px;">L</span><span data-darkreader-inline-color="" style="color: rgb(101, 195, 173) !important; --darkreader-inline-color:#6ec7b2; font-size:30px;">D</span></span><span data-darkreader-inline-color="" style="--darkreader-inline-color:#dd6e6e; color: rgb(220, 107, 107) !important; font-size: 30px;">R</span>
<br>
</td></tr></tbody></table>
<br>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr id="together-with"><td align="center" height="20" style="vertical-align:middle !important;" valign="middle" width="100%"><strong style="vertical-align:middle !important; height: 100%;">Together With </strong>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fazure.microsoft.com%2Fen-us%2Fexplore%2F%3Futm_source=TLDR%26utm_medium=newsletter%26utm_campaign=2026-08-17_Primary_Microsoft%26utm_content=header_feel_like_tabs/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/AvCofOkGNhbjVN_Tcd8nVuHPTssJ_wUTa9UWi0wlhlg=452"><img src="https://images.tldr.tech/microsoftnvidia.png" valign="middle" style="vertical-align: middle !important; height: 100%;" alt="Microsoft"></a></td></tr></tbody></table>
<table style="table-layout: fixed; width:100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;">
<div style="text-align: center;">
<h1><strong>TLDR Information Security <span id="date">2026-08-17</span></strong></h1>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width:100%;" width="100%"><tbody><tr id="sponsy-copy"><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fazure.microsoft.com%2Fen-us%2Fexplore%2F%3Futm_source=TLDR%26utm_medium=newsletter%26utm_campaign=2026-08-17_Primary_Microsoft%26utm_content=header_feel_like_tabs/2/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/HvzTvUsE2OClTvtCs8LfbVYr3R0iLvrgBUQv7hDAfSQ=452">
<span>
<strong>Feel like your tabs have tabs? (Sponsor)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Developer tool sprawl is real. You've got one tab for logs, another for metrics, half a dozen for cloud services, and somewhere in there is the code you're actually trying to ship. <p></p><p>🫣 Stop playing hide-and-seek with your tools. <a class="Hyperlink SCXW9241458 BCX8" href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fazure.microsoft.com%2Fen-us%2Fexplore%2F%3Futm_source=TLDR%26utm_medium=newsletter%26utm_campaign=2026-08-15_Primary_Microsoft%26utm_content=Body_microsoft_azure/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/xeztv_0kXVlINNF-BczKRS63sIxZyxR3hKGa3QQeZVk=452" rel="noreferrer noopener" target="_blank"><span>Microsoft Azure</span></a> brings together everything you need to build and run software in a single workspace. </p>
<p>Goodbye, hunting for the right dashboard. Hello, one unified view—and a faster path to innovation. </p>
<p><a class="Hyperlink SCXW9241458 BCX8" href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fazure.microsoft.com%2Fen-us%2Fexplore%2F%3Futm_source=TLDR%26utm_medium=newsletter%26utm_campaign=2026-08-15_Primary_Microsoft%26utm_content=cta_simplify_stack_azure/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/RQdOfG7p7EQH3PnpRmxN7kBRmnd-0KdA-35hpAEogXA=452" rel="noreferrer noopener" target="_blank"><span>Simplify your stack with Azure →</span></a><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fazure.microsoft.com%2Fen-us%2Fexplore%2F%3Futm_source=TLDR%26utm_medium=newsletter%26utm_campaign=2026-08-15_Primary_Microsoft%26utm_content=cta_simplify_stack_azure/2/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/6bVEYJK5r76eR2pL00ORC4-nsh4l8h6XYmucHAGI16A=452" rel="noopener noreferrer nofollow" target="_blank"><span> </span></a>
</p>
</span></span></div>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr>
<tr bgcolor=""><td class="container">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🔓</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Attacks & Vulnerabilities</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FEajxq1/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/w--BgNuxSzQTVF3plgl1_LdfpExndAGAJHdUCGv9p-I=452">
<span>
<strong>RingCentral Data Breach Exposed Info of 1.6M Accounts (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Cloud-based collaboration and communication firm RingCentral disclosed a data breach in which a threat actor compromised its systems through a “sophisticated social engineering campaign.” According to Have I Been Pwned, the data contained names, email, physical addresses, and phone numbers belonging to 1.6M individuals.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FG0yqjr/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/jisAxGo1NcHV6CYFWtnaJ-ZdtUR09cCMAg3AldgRagw=452">
<span>
<strong>New AmnesiaStealer macOS Malware Hijacks Browser Sessions via Remote Control (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Jamf researchers are warning of a new macOS infostealer that spreads via ClickFix attacks. The malware first captures the user's macOS password and uses it to collect keychain data. It also features a streaming profile that allows attackers to remotely control browser sessions and duplicate browser profiles on Chromium-based browsers.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fsimonkoeck.com%2Fwriteups%2Fn8n-gsuiteadmin-prototype-pollution-rce%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/ijf8sVuDsyQyqpQAnKWKyB5jRCm7wmx9KhDEEg-qtJk=452">
<span>
<strong>From a Schema Name to RCE in n8n (3 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
A critical prototype pollution vulnerability (CVE-2026-33696) in n8n allows authenticated attackers to achieve remote code execution across all deployment types by manipulating the GSuiteAdmin node's "Custom Fields" schema. By polluting Object.prototype, attackers can chain the exploit through a subsequent Git node to inject a malicious GIT_SSH_COMMAND or crash the instance entirely by breaking the underlying database query builder. Administrators must immediately upgrade their self-hosted, worker, and Cloud instances to the latest patched versions to secure their environments against malicious schema-name inputs.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🧠</span></div>
</div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Strategies & Tactics</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fblog.cloudflare.com%2Fengineering-standards-enforcement%2F%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/Yyzio50XA1fugYXsgwYFlNF9Z_bE-Karuoara0hJ96c=452">
<span>
<strong>How Cloudflare Enforces Engineering Standards Using AI (9 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Cloudflare designed the Cloudflare Codex to serve as an RFC-style shared source for engineering guidance for humans and agents. To guide models to relevant RFCs, Cloudflare uses a dedicated agent to compact SHOULD and MUST statements into a dedicated JSON structure and enrich it with metadata that supports lazy discovery. Thus far, Cloudflare has developed a code reviewer agent, spec reviewer, and incident reviewer agent that all use the Codex.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Faws.amazon.com%2Fblogs%2Fsecurity%2Fhow-aws-iam-role-manager-rethinks-the-starting-point-for-iam-roles%2F%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/SDTrQhMUVHh4bZKFaM2aE7CGqz-GJWLK8rPDgnpySxc=452">
<span>
<strong>How AWS IAM Role Manager Rethinks the Starting Point for IAM Roles (4 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
The newly released AWS IAM Role Manager is designed to enable users who are new to AWS to quickly deploy services without needing to manually create IAM roles for services. With role manager enabled, when users create new workloads, an IAM role with the requisite permissions is automatically created and attached. Roles may be over-provisioned, so users are encouraged to limit capabilities afterward.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fblog.vulnetic.ai%2Fhow-well-can-open-weight-models-evade-siem-detection-d1a512fed614%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/2feztsmTHEf48Oi3n-1LcIiuAz7U0Lce_0OdrAaEt6s=452">
<span>
<strong>How Well Can Open-Weight Models Evade SIEM Detection? (8 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Vulnetic claims its autonomous "Sable" agent successfully compromised an Active Directory domain while evading high-severity alerts in Wazuh by utilizing LLM-driven living-off-the-land tradecraft. The agent mapped the network using remote BloodHound enumeration, executed a DCSync attack via DRSUAPI, and deployed a memory-resident HTTPS beacon inside a wsmprovhost process via WinRM to bypass standard detections. By pacing its actions and recognizing a custom prompt-injection canary, the agent generated only six low-severity alerts during the four-hour intrusion, though defenders should note these results stem entirely from the vendor's internal lab testing.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🧑💻</span></div>
</div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Launches & Tools</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Ffosrl%2Fpangolin%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/KuzxmHsiOsQRuQHkFzs-PUW6mryKs-ojYrRZ5Z_D8oo=452">
<span>
<strong>Pangolin (GitHub Repo)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Pangolin is an identity-based remote access tool that combines reverse-proxy and VPN capabilities to enable secure connectivity from anywhere.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Feugene1g%2Fagent-safehouse%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/ai-DWd-WiXakm56wl9ZrVHgFNCPQpEWlyyVYkH_1tNw=452">
<span>
<strong>Agent Safehouse (GitHub Repo)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Agent Safehouse is a macOS agent sandbox to limit local LLMs' access to only the files and integrations that they need.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fblog.cloudflare.com%2Fmcp-security-updates%2F%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/5p0Oh5X4Mx9KtSMzipWzJnJkQOcLdsHCqcTsn73Hqp8=452">
<span>
<strong>How Cloudflare detects MCP traffic and helps secure it (12 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Cloudflare has introduced protocol-level detection for Model Context Protocol (MCP) traffic in Gateway by analyzing the MCP-Protocol-Version header on TLS-inspected requests. Security teams can now combine the experimental.is_mcp boolean selector with the mcp_portal traffic source tag to mandate that all agent traffic routes through approved portals, effectively blocking direct shadow MCP connections. Furthermore, the update delivers a dedicated traffic dashboard, pre-registered OAuth client support, and Agents SDK v0.20.0 to bridge compatibility between legacy handshakes and the new stateless MCP 2026-07-28 specification.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🎁</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><strong><h1>Miscellaneous</h1></strong></div>
</div>
</td></tr></tbody></table>
<table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.infostealers.com%2Farticle%2Fmassive-azure-exfiltration-campaign-exposes-millions-of-enterprise-records-via-compromised-credentials-mcdonalds-vodafone-kyndryl-others%2F%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/KCua7TP895mr-hb3QdBgOgnQdbx6pW485GwlPbF7SBQ=452">
<span>
<strong>Massive Azure Exfiltration Campaign Exposes Millions of Enterprise Records (3 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
A threat actor known as "TheHatman" is allegedly selling approximately 3.6 million internal Azure and Entra employee directories belonging to major corporations, including McDonald's, Vodafone, and Kyndryl. The exposed data includes sensitive service accounts and Global Administrator listings that match standard Azure export formats, which Hudson Rock researchers suspect stems from credential theft via infostealers. The exact intrusion vectors remain unconfirmed, and the report originates from a vendor selling credential-monitoring services, so defenders should await independent verification while actively auditing their Azure identities for compromised access.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fcyberscoop.com%2Fnear-autonomous-ai-attack-government-target-taiwan%2F%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/dyV7tGBV68G1MWAKgY1D1Fj6EkeYWu_0RfHK1wnqwPo=452">
<span>
<strong>Researchers observe first 'near-autonomous' AI attack on government target in Taiwan (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Researchers at Dream have identified the first publicly known "near-autonomous" AI cyberattack, utilizing the open-source Hermes and OpenClaw frameworks to extract over 2,500 Taiwanese government personnel records. Suspected Chinese threat actors deployed the malware to run self-directed "Learning Cycles" that autonomously adapted to prior failures and expanded the attack into IT supply chains, nuclear safety agencies, and energy companies. Despite these autonomous features, researchers noted the campaign still required substantial human engineering to operate successfully.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fthecybersecguru.com%2Fanalysis%2Fbrave-1-93-gpu-fingerprinting%2F%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/DC6W1Pc4Ro7wi5P7B1TuHGbwReGgI8hGvfgg9vmIe-E=452">
<span>
<strong>The GPU Serial Number: How Brave Is Fighting the Next Generation of Web Tracking (33 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Brave version 1.93 introduces default "farbling" protections to combat cross-site tracking by obscuring highly identifying WebGL and WebGPU hardware signals. To disrupt the stability of GPU fingerprinting, the browser now replaces vendor and renderer strings with generic values, empties WebGPU adapter descriptors, and randomizes the WebGL extension list based on the session and site context. This shifts the browser toward capability-based feature detection, effectively preventing trackers from generating highly accurate device fingerprints without breaking legitimate web graphics rendering.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">⚡</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Quick Links</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.analyticsinsight.net%2Fnews%2Fapple-spyware-threat-alerts-what-users-need-to-know%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/Cup22uj3ocRELDEaqs6KgVKi-IdIH7IQD7cH1KeCJoQ=452">
<span>
<strong>Apple Spyware Threat Alerts: What Users Need To Know (1 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Apple sent mercenary spyware threat notifications to users in 110 countries, urging targeted individuals to enable Lockdown Mode, verify alerts only on account.apple.com, and seek help through resources such as Access Now's Digital Security Helpline.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fhwbusters.com%2Fnews%2Fchatgpt-computer-history-logs-every-click-and-keystroke-on-your-mac%2F%3Futm_source=tldrinfosec/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/WcglOTs-uA2DyfDZUiz7cgHXjgsj79b0UbKLnYp_24k=452">
<span>
<strong>ChatGPT Computer History Logs Every Click and Keystroke on Your Mac (3 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
OpenAI's new Computer History feature for ChatGPT on macOS logs clicks, keystrokes, and app switches via the accessibility API into unencrypted plain-text Markdown files accessible by any app under the same user account.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;">
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Love TLDR? Tell your friends and get rewards!
</p>
</td></tr>
<tr><td class="container" style="padding: 0px 10px 15px;">
<div class="text-block">
Share your referral link below with friends to get free TLDR swag!
</div>
</td></tr>
<tr><td align="left" style="padding: 10px;">
<div class="text-block">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Frefer.tldr.tech%2F78de0e20%2F8/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/vOhhrW-u0sBxxwUo68C9EIGb7lu9wYA-8y4xHMmMcLU=452" style="color: #464ba4; text-decoration: underline;">https://refer.tldr.tech/78de0e20/8</a>
</div>
</td></tr>
<tr></tr>
<tr><td align="left" style="padding:5px 10px;">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fhub.sparklp.co%2Fsub_d62447d5a74a%2F8/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/65ECBqbCgyGc63uwotWjnaQPQ8ccfIu586Celg929jY=452" style="font-size: 16px; line-height: 1.6; padding: 10px 0; display: inline-block; text-decoration: underline;"><span style="mso-text-raise:13pt; text-decoration: underline;">Track your referrals here.</span></a>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;">
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Want to advertise in TLDR? 📰
</p>
<div class="text-block" style="margin-top: 10px;">
If your company is interested in reaching an audience of cybersecurity professionals and decision makers, you may want to <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisecta/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/2Y5L1RncWfBWuIuvQzrrfkSo_kPFzcrBkQXKjtXHD54=452"><strong><span>advertise with us</span></strong></a>.
</div>
<br>
<!-- New "Want to work at TLDR?" section -->
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Want to work at TLDR? 💼
</p>
<div class="text-block" style="margin-top: 10px;">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/KTeIx4ua-7HsZGYbYvNE3DCtljPFJB7IpbU4WJjOiVI=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>Apply here</strong></a>,
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech%2Fc227b917-a6a4-40ce-8950-d3e165357871/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/0dtpqrsH_v-xCyguOMDse_x3HgWda-0iEFKXfkEMNV0=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>create your own role</strong></a> or send a friend's resume to <a href="mailto:jobs@tldr.tech" style="color: #0000EE; text-decoration: underline;">jobs@tldr.tech</a> and get $1k if we hire them! TLDR is one of <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Ffeed%2Fupdate%2Furn:li:activity:7401699691039830016%2F/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/vAxZBB00ZoKlJT79EbHlMdIXrPPyNBSSdSIWExtL2Rc=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>Inc.'s Best Bootstrapped businesses</strong></a> of 2025.
</div>
<br>
<div class="text-block">
If you have any comments or feedback, just respond to this email!
<br>
<br> Thanks for reading,
<br>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fprasannagautam%2F/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/BsLSCsll2Gfei3KNY0n4gy0l_ha5wb6z8_NdQ1yjHjo=452"><span>Prasanna Gautam</span></a>, <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fericfernandezdelcampo%2F/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/uwG2qXwSp_wuRtX666PfHIqAbNc2vcNA7aTPyQEChX0=452"><span>Eric Fernandez</span></a> & <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fsammy-tbeile%2F/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/finolanY2e6P-54IaLaDBQAPVv6d580x3wsisDK8YsE=452"><span>Sammy Tbeile</span></a>
<br>
<br>
</div>
<br>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block" id="testing-id">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%2Fmanage%3Femail=silk.theater.56%2540fwdnl.com/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/UR5O2Sb2q0fkvWU9UTeNGTovDRmwJCedlZr4BKDRA1I=452">Manage your subscriptions</a> to our other newsletters on tech, startups, and programming. Or if TLDR Information Security isn't for you, please <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Funsubscribe%3Fep=1%26l=8d9cea11-3e94-11ed-9a32-0241b9615763%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=4cc909fa-9a30-11f1-93d8-115f516a9c19%26pt=campaign%26pv=4%26spa=1786971666%26t=1786972089%26s=3f41288f00ac88b05ecf01a1b71fbc153381cda2826125ba92fb0df66625eee0/1/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/NpEBDpkN8JuCWaWHKE97ynVF4svr5GFOOaQxTDIMyBg=452">unsubscribe</a>.
<br>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
<img alt="" src="http://tracking.tldrnewsletter.com/CI0/010001a00fd62bed-bff7a2a7-a976-4104-88f4-d407680ccd4e-000000/FosH2utRh8pRm2_BT8gqxp-sL_6OYG0-xgDZcYMCWfo=452" style="display: none; width: 1px; height: 1px;">
</body></html>