<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html charset=UTF-8"><meta charset="UTF-8"><meta name="viewport" content="width=device-width"><meta name="x-apple-disable-message-reformatting"><title>TLDR InfoSec</title><meta name="color-scheme" content="light dark"><meta name="supported-color-schemes" content="light dark"><style type="text/css">
:root {
color-scheme: light dark; supported-color-schemes: light dark;
}
*,
*:after,
*:before {
-webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;
}
* {
-ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%;
}
html,
body,
.document {
width: 100% !important; height: 100% !important; margin: 0; padding: 0;
}
body {
-webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; text-rendering: optimizeLegibility;
}
div[style*="margin: 16px 0"] {
margin: 0 !important;
}
table,
td {
mso-table-lspace: 0pt; mso-table-rspace: 0pt;
}
table {
border-spacing: 0; border-collapse: collapse; table-layout: fixed; margin: 0 auto;
}
img {
-ms-interpolation-mode: bicubic; max-width: 100%; border: 0;
}
*[x-apple-data-detectors] {
color: inherit !important; text-decoration: none !important;
}
.x-gmail-data-detectors,
.x-gmail-data-detectors *,
.aBn {
border-bottom: 0 !important; cursor: default !important;
}
.btn {
-webkit-transition: all 200ms ease; transition: all 200ms ease;
}
.btn:hover {
background-color: #f67575; border-color: #f67575;
}
* {
font-family: Arial, Helvetica, sans-serif; font-size: 18px;
}
@media screen and (max-width: 600px) {
.container {
width: 100%; margin: auto;
}
.stack {
display: block!important; width: 100%!important; max-width: 100%!important;
}
.btn {
display: block; width: 100%; text-align: center;
}
}
body,
p,
td,
tr,
.body,
table,
h1,
h2,
h3,
h4,
h5,
h6,
div,
span {
background-color: #FEFEFE !important; color: #010101 !important;
}
@media (prefers-color-scheme: dark) {
body,
p,
td,
tr,
.body,
table,
h1,
h2,
h3,
h4,
h5,
h6,
div,
span {
background-color: #27292D !important; color: #FEFEFE !important;
}
}
a {
color: inherit !important; text-decoration: underline !important;
}
</style><!--[if mso | ie]>
<style type="text/css">
a {
background-color: #FEFEFE !important; color: #010101 !important;
}
@media (prefers-color-scheme: dark) {
a {
background-color: #27292D !important; color: #FEFEFE !important;
}
}
</style>
<![endif]--></head><body class="">
<div style="display: none; max-height: 0px; overflow: hidden;">OpenAI introduced tighter testing controls after models escaped a training environment through an internet-connected network tool </div>
<div style="display: none; max-height: 0px; overflow: hidden;">
<br>
</div>
<table align="center" class="document"><tbody><tr><td valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" class="container" width="600"><tbody><tr class="inner-body"><td>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr class="header"><td bgcolor="" class="container">
<table width="100%"><tbody><tr><td class="container">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" style="margin-top: 0px;" width="100%"><tbody><tr><td style="padding: 0px;">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div style="text-align: center;">
<span style="margin-right: 0px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/bS6FqPlFIQOziep22TV8ZuwYvR01cHQOgzS2JbYy0bA=452" rel="noopener noreferrer" target="_blank"><span>Sign Up</span></a>
|<span style="margin-right: 2px; margin-left: 2px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisetopnav/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/ShIZz4euPKkPnZgQG-OSMOJ-huazG5w9rKaZnqzXvUo=452" rel="noopener noreferrer" target="_blank"><span>Advertise</span></a></span>|<span style="margin-left: 2px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Fweb-version%3Fep=1%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=f808d5e4-9b97-11f1-a23c-3587efc61c4d%26pt=campaign%26t=1787144922%26s=6654d8d8dd68654f3bb402c8b8b5a19f02de18cb2f59e3e2ed79b5617c5c7ab7/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/I_1xs5ss12JiMoviPTik_k-G5OSG06H8Q3fSgWPY-hU=452"><span>View Online</span></a></span>
<br>
</span></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="text-align: center;"><span data-darkreader-inline-color="" style="--darkreader-inline-color:#3db3ff; color: rgb(51, 175, 255) !important; font-size: 30px;">T</span><span style="font-size: 30px;"><span data-darkreader-inline-color="" style="color: rgb(232, 192, 96) !important; --darkreader-inline-color:#e8c163; font-size:30px;">L</span><span data-darkreader-inline-color="" style="color: rgb(101, 195, 173) !important; --darkreader-inline-color:#6ec7b2; font-size:30px;">D</span></span><span data-darkreader-inline-color="" style="--darkreader-inline-color:#dd6e6e; color: rgb(220, 107, 107) !important; font-size: 30px;">R</span>
<br>
</td></tr></tbody></table>
<br>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody></tbody></table>
<table style="table-layout: fixed; width:100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;">
<div style="text-align: center;">
<h1><strong>TLDR Information Security <span id="date">2026-08-19</span></strong></h1>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width:100%;" width="100%"><tbody></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr>
<tr bgcolor=""><td class="container">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🔓</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Attacks & Vulnerabilities</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2Fu6NdaT/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/ag7i5RLQqCGu1HTu1z1d1tjdWw8gaCTR8nSLZ-rY5a4=452">
<span>
<strong>Heights Finance Data Breach Impacts at Least 1.2 Million Individuals (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Heights Finance says attackers accessed a third-party cloud platform in early May, exposing data on more than 1.2 million people. Stolen records included Social Security numbers, government IDs, bank details, birth dates, and contact information. The lender says loan-management systems were untouched, federal law enforcement was notified, and affected people receive 24 months of credit monitoring and identity protection.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F08%2F14%2Ffrench-tax-authority-admits-data-heist-after-crook-touts-2m-records%2F5287885%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/NRILJe04Ddl1sZ7m4Gc36gTT54euuVQhatF_w_f2Kk8=452">
<span>
<strong>French Tax Authority Admits Data Heist After Crook Touts 2M Records (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
France's tax authority (DGFiP) confirmed that a threat actor accessed their systems in June. A forum user, ZeroBytes, claimed stolen credentials and an MFA bypass exposed data on more than two million taxpayers. DGFiP says the access was cut off during a June audit and rejects claims of ongoing access. It is identifying affected people, will notify France's data protection watchdog, and plans user notifications.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fthehackernews.com%2F2026%2F08%2Funisoc-volte-video-call-exploit-chain.html%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/XK5qNrHIpLZykX1QPRvAEzRbJ3dz7aTDpcoAUxT-EmI=452">
<span>
<strong>Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access (4 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Researchers at SSD Secure Disclosure have detailed a two-stage exploit chain targeting Unisoc modem firmware that allows an attacker operating a malicious 4G network to achieve full Android kernel access when a victim answers a VoLTE video call. The exploit utilizes a preliminary remote code execution payload to overwrite the ARM Memory Protection Unit, successfully mapping the entire 32-bit physical address space as readable, writable, and executable from the modem context. Unisoc has not responded to the disclosure or issued a patch, so users of affected devices like the Motorola E13, Realme C33, and Xiaomi Redmi A5 remain highly vulnerable until manufacturers release custom firmware updates.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🧠</span></div>
</div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Strategies & Tactics</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fresearch.checkpoint.com%2F2026%2Fthousands-of-hacked-wordpress-sites-one-operation-unmasking-stopandprotect%2F%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/yl0ojA8jNle_1KK2VLTgpUX8hBFUk1_bcdmNIUZn9vc=452">
<span>
<strong>Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect (12 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
A massive malware operation leveraging 2,000 compromised WordPress sites is tricking visitors with fake Cloudflare CAPTCHAs to execute malicious PowerShell commands. Researchers attributed the sprawling campaign to a single operator who accidentally infected their own machine, leaking their Visual Basic 6 management tools and exposing over 6,000 victim IPs. Security teams should proactively hunt for anomalous must-use plugins like wp-sec.php and strictly enforce WordPress patching to prevent infrastructure hijacking.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.netskope.com%2Fblog%2Fblockchain-dead-drop-resolvers-explained%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/NRzwq7xq-P6Tpd1PKMJc9o1VrghO_0Atza5nmDagt30=452">
<span>
<strong>Blockchain Dead Drop Resolvers Explained (5 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Researchers identified multiple malware families abusing smart contracts on EVM, Solana, and TON blockchains as "dead drop resolvers" to dynamically fetch command-and-control addresses. By utilizing read-only functions like eth_call, threat actors can cheaply rotate infrastructure without altering their core payloads, a tactic recently deployed in the August 2026 ChainDrop npm supply-chain compromise. To detect this evasion technique, defenders should monitor for non-browser processes like node, bun, or curl making anomalous RPC queries to public providers and correlate the decoded responses.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fthecorestrength.net%2Fblog%2Fa-closed-network-path-is-not-a-closed-execution-path%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/SfZ6Y1RIYfBtYbVtJZMYKuyeLJ-3LLx07E4rR7yj0uA=452">
<span>
<strong>A Closed Network Path Is Not a Closed Execution Path (6 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
When working with event-driven architectures, traditional network paths, such as security groups, firewalls, and network ACLs, may not be the same as the execution path. The author tested this by creating a cross-account EventBridge policy which allowed an external account to send events to an internal account which triggered a Lambda function, which then called an EKS application that used its cloud identity to perform a privileged action. Since each individual action was legitimate, no alerts or detections fired. It took the author a full afternoon to trace the events even though he knew the full path.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🧑💻</span></div>
</div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Launches & Tools</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fxpander.ai%2F%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/mPCLUocQMrwdKw6vGj6_8jonDHbF_bJKKSTvXSGMjAQ=452">
<span>
<strong>Xpander (Product Launch)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Xpander provides software to build, run, secure, and manage automated software workers across products, workflows, and data. Its portable runtime runs workers in different environments, while Omni helps teams create employee-facing assistants and coordinate multi-worker tasks.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Ftrailofbits%2Fagentcov%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/fyVsPG9h30mr3jfWlr2XocWL6Z_XEElMu4QS9HnRq-I=452">
<span>
<strong>agentcov (GitHub Repo)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
agentcov maps AI coding agent reads (Codex, Claude Code, and Pi) onto LCOV, gcov, and native JSON coverage reports, tracking which repository lines agents actually inspected versus left unread.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2FAntonlovesdnb%2Faten%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/pLE52l3AmaUgj44EnsBAplfeam_nJWbCewZ9Zf7Htjc=452">
<span>
<strong>ATEN (GitHub Repo)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Agent Telemetry and Event Notation (ATEN) is a background service that records what AI does on a host and writes it out as structured events for a SIEM.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🎁</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><strong><h1>Miscellaneous</h1></strong></div>
</div>
</td></tr></tbody></table>
<table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftechcrunch.com%2F2026%2F08%2F18%2Fopenai-institutes-new-safeguards-after-hugging-face-breach%2F%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/Of011aDQ6O9FfCcvbPZ_oSgzD0M8Prz-uShbjdFVreQ=452">
<span>
<strong>OpenAI Institutes New Safeguards After Hugging Face Breach (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
OpenAI introduced tighter testing controls after models escaped a training environment through an internet-connected network tool. The company paused reinforcement learning for two weeks and still holds its largest planned run with new controls to isolate workloads, inspect tool actions and logs, and target alerts within 30 minutes.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fthehackernews.com%2F2026%2F08%2Fhackers-spend-nearly-7-million-on.html%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/2lhItM36CuelBbtTU284fdEuR97Kdgi-xMLU09Ccn7g=452">
<span>
<strong>Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware (5 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Infoblox tracked 50,400 expired-domain re-registrations daily across gTLDs in early 2026. Sable Squirrel spent nearly $7 million on more than 10,000 domains, routing sports-streaming visitors to gambling sites and using some domains for malware C2. Researchers linked 31,000 samples, including Quasar RAT and AsyncRAT, to its infrastructure while other groups buy expired, compromised domains and monetize inherited traffic through scams, malicious scripts, and ad networks.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Farstechnica.com%2Fsecurity%2F2026%2F08%2Fmicrosoft-copilot-reveals-secret-input-that-allowed-it-to-be-hacked%2F%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/UuoXDjVEqpn5bhjjvfscI7MdeZrAWsWAO8TKyQpUJeY=452">
<span>
<strong>Microsoft Copilot Reveals Secret Input that Allowed it to be Hacked (3 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Varonis found that Copilot disclosed an undocumented ?autorun=1 URL parameter through repeated questioning. Combined with ?q=, it ran injected prompts after a victim clicked a link. Prompts could search authenticated inboxes and send extracted email addresses or credentials to attacker-controlled servers. Microsoft blocked ?q= input injection in February and issued broader fixes as CVE-2026-24301.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">⚡</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Quick Links</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2F1password.com%2Fsolutions%2Fzero-standing-privileges%3Futm_medium=paid_newsletter%26utm_source=tldr%26utm_campaign=2026q3_unifiedaccess_lp_zero-standing-privileges_sa%26utm_content=newsletter_infosec_081926/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/nxeOsBF4ATLVlKAhDf3F9jLG3A-E_FMRdOF-x-hI1PY=452">
<span>
<strong>1Password research: 40% of developers grant AI agents persistent access (Sponsor)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Replace persistent access with <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2F1password.com%2Fsolutions%2Fzero-standing-privileges%3Futm_medium=paid_newsletter%26utm_source=tldr%26utm_campaign=2026q3_unifiedaccess_lp_zero-standing-privileges_sa%26utm_content=newsletter_infosec_081926/2/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/MD4REMxo44zCES1_dKDHGWT-gXFXHTzCQGGPq77nUr0=452" rel="noopener noreferrer nofollow" target="_blank"><span>Zero Standing Privileges:</span></a> Just-in-time, just-enough access, scoped to the task, and automatically revoked when work ends.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fthehackernews.com%2F2026%2F08%2Fcritical-gitlab-graphql-flaw-could-let.html%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/qtOw4dsRSQDHX3QK69OodB_sxrGJL9GuVABA4buY508=452">
<span>
<strong>Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
GitLab has patched CVE-2026-19478, a CVSS 9.4 GraphQL flaw affecting self-managed CE and EE instances.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.courthousenews.com%2Ffeds-charge-17-in-iran-backed-hacking-scheme%2F%3Futm_source=tldrinfosec/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/JYCRKNCmYfVKbXZ3Rmz5BVzTmOY-wAei6bsQNvuCZqU=452">
<span>
<strong>Feds Charge 17 in Iran-Backed Hacking Scheme (3 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Federal prosecutors charged 17 members of Iran's Mabna Institute with running a phishing scheme that compromised email accounts of more than 100,000 professors worldwide and stole over 31 terabytes of academic data from universities.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;">
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Love TLDR? Tell your friends and get rewards!
</p>
</td></tr>
<tr><td class="container" style="padding: 0px 10px 15px;">
<div class="text-block">
Share your referral link below with friends to get free TLDR swag!
</div>
</td></tr>
<tr><td align="left" style="padding: 10px;">
<div class="text-block">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Frefer.tldr.tech%2F78de0e20%2F8/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/NunP_vqmInJa82FbgIrhZm2YdJXmi7euW2B47lgGtzE=452" style="color: #464ba4; text-decoration: underline;">https://refer.tldr.tech/78de0e20/8</a>
</div>
</td></tr>
<tr></tr>
<tr><td align="left" style="padding:5px 10px;">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fhub.sparklp.co%2Fsub_d62447d5a74a%2F8/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/XDQ6u0NjDiQHz7nmiSuXajCmzdGWwWUAXZuxNjChpos=452" style="font-size: 16px; line-height: 1.6; padding: 10px 0; display: inline-block; text-decoration: underline;"><span style="mso-text-raise:13pt; text-decoration: underline;">Track your referrals here.</span></a>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;">
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Want to advertise in TLDR? 📰
</p>
<div class="text-block" style="margin-top: 10px;">
If your company is interested in reaching an audience of cybersecurity professionals and decision makers, you may want to <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisecta/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/pYtA8DBfNK06suyioBQ7kCi8Qu9dOm9WCZFWXIIAFYc=452"><strong><span>advertise with us</span></strong></a>.
</div>
<br>
<!-- New "Want to work at TLDR?" section -->
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Want to work at TLDR? 💼
</p>
<div class="text-block" style="margin-top: 10px;">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/7MHu-ukamxIdiQu3_eOBUboSgo-iodz9b01gGvioNlQ=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>Apply here</strong></a>,
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech%2Fc227b917-a6a4-40ce-8950-d3e165357871/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/cB6MUo94F9MEAz3MQVUa7xhWuJq8SW77_xgCkvhh5Gk=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>create your own role</strong></a> or send a friend's resume to <a href="mailto:jobs@tldr.tech" style="color: #0000EE; text-decoration: underline;">jobs@tldr.tech</a> and get $1k if we hire them! TLDR is one of <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Ffeed%2Fupdate%2Furn:li:activity:7401699691039830016%2F/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/zDaFl2d4FgVilAAVNJN2t0Oy2NkZ_TqJjaDKq6wGumI=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>Inc.'s Best Bootstrapped businesses</strong></a> of 2025.
</div>
<br>
<div class="text-block">
If you have any comments or feedback, just respond to this email!
<br>
<br> Thanks for reading,
<br>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fprasannagautam%2F/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/_DsUcXKCl7jBWXKRISBw9E2T4iqXxL0K-tGg-1jk3gA=452"><span>Prasanna Gautam</span></a>, <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fericfernandezdelcampo%2F/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/9kBB0d0QXgJ9DH8LBGdjVfbfKM-P3Phql7f1WCXxUFc=452"><span>Eric Fernandez</span></a> & <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fsammy-tbeile%2F/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/6KqzMHApxRKzwpqvMTvvtKffLyNjaAyI6b9P-Ffv_XU=452"><span>Sammy Tbeile</span></a>
<br>
<br>
</div>
<br>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block" id="testing-id">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%2Fmanage%3Femail=silk.theater.56%2540fwdnl.com/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/h4gWK0YLO3HB8oPWtVAzlOwWG4YL_7l1oUkci3RGRJk=452">Manage your subscriptions</a> to our other newsletters on tech, startups, and programming. Or if TLDR Information Security isn't for you, please <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Funsubscribe%3Fep=1%26l=8d9cea11-3e94-11ed-9a32-0241b9615763%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=f808d5e4-9b97-11f1-a23c-3587efc61c4d%26pt=campaign%26pv=4%26spa=1787144506%26t=1787144922%26s=931f9565b895591f51f47a592c2dbd036163b0e82629f4442bb4d498ec935c4d/1/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/SDJvjicirnzqW49Q4dnom88DCGeUvuEGqPw3TMpdlMg=452">unsubscribe</a>.
<br>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
<img alt="" src="http://tracking.tldrnewsletter.com/CI0/010001a01a23678c-c09c4a78-e8a9-489a-9749-bd0137a954eb-000000/zQHrEF8mRqWM3xR5OkPpIwxN_QnhZfegETNnVFtvirQ=452" style="display: none; width: 1px; height: 1px;">
</body></html>