<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html charset=UTF-8"><meta charset="UTF-8"><meta name="viewport" content="width=device-width"><meta name="x-apple-disable-message-reformatting"><title>TLDR InfoSec</title><meta name="color-scheme" content="light dark"><meta name="supported-color-schemes" content="light dark"><style type="text/css">
:root {
color-scheme: light dark; supported-color-schemes: light dark;
}
*,
*:after,
*:before {
-webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;
}
* {
-ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%;
}
html,
body,
.document {
width: 100% !important; height: 100% !important; margin: 0; padding: 0;
}
body {
-webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; text-rendering: optimizeLegibility;
}
div[style*="margin: 16px 0"] {
margin: 0 !important;
}
table,
td {
mso-table-lspace: 0pt; mso-table-rspace: 0pt;
}
table {
border-spacing: 0; border-collapse: collapse; table-layout: fixed; margin: 0 auto;
}
img {
-ms-interpolation-mode: bicubic; max-width: 100%; border: 0;
}
*[x-apple-data-detectors] {
color: inherit !important; text-decoration: none !important;
}
.x-gmail-data-detectors,
.x-gmail-data-detectors *,
.aBn {
border-bottom: 0 !important; cursor: default !important;
}
.btn {
-webkit-transition: all 200ms ease; transition: all 200ms ease;
}
.btn:hover {
background-color: #f67575; border-color: #f67575;
}
* {
font-family: Arial, Helvetica, sans-serif; font-size: 18px;
}
@media screen and (max-width: 600px) {
.container {
width: 100%; margin: auto;
}
.stack {
display: block!important; width: 100%!important; max-width: 100%!important;
}
.btn {
display: block; width: 100%; text-align: center;
}
}
body,
p,
td,
tr,
.body,
table,
h1,
h2,
h3,
h4,
h5,
h6,
div,
span {
background-color: #FEFEFE !important; color: #010101 !important;
}
@media (prefers-color-scheme: dark) {
body,
p,
td,
tr,
.body,
table,
h1,
h2,
h3,
h4,
h5,
h6,
div,
span {
background-color: #27292D !important; color: #FEFEFE !important;
}
}
a {
color: inherit !important; text-decoration: underline !important;
}
</style><!--[if mso | ie]>
<style type="text/css">
a {
background-color: #FEFEFE !important; color: #010101 !important;
}
@media (prefers-color-scheme: dark) {
a {
background-color: #27292D !important; color: #FEFEFE !important;
}
}
</style>
<![endif]--></head><body class="">
<div style="display: none; max-height: 0px; overflow: hidden;">Boston Scientific reported a cyberattack disrupting access to core IT systems and business applications. The outage has impaired order processing </div>
<div style="display: none; max-height: 0px; overflow: hidden;">
<br>
</div>
<table align="center" class="document"><tbody><tr><td valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" class="container" width="600"><tbody><tr class="inner-body"><td>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr class="header"><td bgcolor="" class="container">
<table width="100%"><tbody><tr><td class="container">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" style="margin-top: 0px;" width="100%"><tbody><tr><td style="padding: 0px;">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div style="text-align: center;">
<span style="margin-right: 0px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/teU8tv2hfTeh8mwo4PxeT-PeS6yNODtgPFpzDPyLu34=452" rel="noopener noreferrer" target="_blank"><span>Sign Up</span></a>
|<span style="margin-right: 2px; margin-left: 2px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisetopnav/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/xiO0fA_143qE65NER6G8iWqmBvExByumyygC-DA3888=452" rel="noopener noreferrer" target="_blank"><span>Advertise</span></a></span>|<span style="margin-left: 2px;"><a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Fweb-version%3Fep=1%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=a52f3db4-a2a3-11f1-b953-6301ba115ae9%26pt=campaign%26t=1787922498%26s=182a977363186d5c08d7c46028bb27c0b205edd0244406b3761ed8338397bdcc/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/_b3t_AsTbOdc12SdZMCbr734VRT6nnfeYusIJbx5zJ0=452"><span>View Online</span></a></span>
<br>
</span></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="text-align: center;"><span data-darkreader-inline-color="" style="--darkreader-inline-color:#3db3ff; color: rgb(51, 175, 255) !important; font-size: 30px;">T</span><span style="font-size: 30px;"><span data-darkreader-inline-color="" style="color: rgb(232, 192, 96) !important; --darkreader-inline-color:#e8c163; font-size:30px;">L</span><span data-darkreader-inline-color="" style="color: rgb(101, 195, 173) !important; --darkreader-inline-color:#6ec7b2; font-size:30px;">D</span></span><span data-darkreader-inline-color="" style="--darkreader-inline-color:#dd6e6e; color: rgb(220, 107, 107) !important; font-size: 30px;">R</span>
<br>
</td></tr></tbody></table>
<br>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody></tbody></table>
<table style="table-layout: fixed; width:100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;">
<div style="text-align: center;">
<h1><strong>TLDR Information Security <span id="date">2026-08-28</span></strong></h1>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width:100%;" width="100%"><tbody></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr>
<tr bgcolor=""><td class="container">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;">
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🔓</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Attacks & Vulnerabilities</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftechcrunch.com%2F2026%2F08%2F26%2Fmedical-device-maker-boston-scientific-says-a-cyberattack-is-causing-a-global-disruption-to-its-operations%2F%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/_lan0lnwUPGriba-Sa_WJpJWCFuQyBB-Ayz7wljGCMo=452">
<span>
<strong>Medical Device Maker Boston Scientific Says a Cyberattack is Causing a ‘Global Disruption' to its Operations (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Boston Scientific reported a cyberattack disrupting access to core IT systems and business applications. The outage has impaired order processing and shipments, but the company has not confirmed whether implanted devices, patients, or customer data are affected. Its investigation continues, and there is no restoration timeline.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FDjubkN/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/cYBYK7qT1uteTbvix9aniexePSQwfez_ZgjsWhDvHlE=452">
<span>
<strong>'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month (3 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
NovaCookies rents AitM phishing infrastructure for $320 monthly. It relays Microsoft 365 logins and steals authenticated session cookies, bypassing MFA. Island found at least 755 supporting domains targeting hundreds of organizations and uses fake DocuSign document shares and trusted redirect hops. Defenders should deploy phishing-resistant MFA, correlate browser and token activity, and revoke active sessions and refresh tokens after suspected compromise.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.theguardian.com%2Fbusiness%2F2026%2Faug%2F27%2Fuk-airports-operator-cyber-attack-customer-data-accessed%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/jfF3i8bb1fnPdz0kYJUyYidLWeT8nob69I0BfxgkYlQ=452">
<span>
<strong>Three UK Airports Hit By Cyber Attack With Data of 8.7M Accessed (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Manchester, London Stansted, and East Midlands airports suffered a data breach where attackers accessed data belonging to 8.7M customers. The incident involved data related to car park, lounges, and fast-track bookings, and in-airport WiFi signups. The breached data includes email addresses, phone numbers, vehicle registration numbers, and postcodes.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🧠</span></div>
</div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Strategies & Tactics</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fblog.trailofbits.com%2F2026%2F08%2F26%2Fvms-wont-contain-cyber-capable-agents%2F%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/We3fqjp0rG2ntTi3Lsb4Ipf2NqcNUsJlHUbAZBZWIws=452">
<span>
<strong>VMs Won't Contain Cyber-Capable Agents (5 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Trail of Bits gave GPT 5.6-Cyber preview access and tasked it with escaping a QEMU/KVM sandbox on a patched Debian 12 host, and it broke out three separate times over roughly 12 hours of largely unsupervised operation. The agent chained a recently disclosed host-kernel bug first, then pivoted to an unpatched libslirp CVE paired with an unmarked bug fix after the kernel got updated, and finally, once QEMU was rebuilt from upstream source, synthesized a full exploit chain from three fresh 0-days (a QEMU VAPIC SMRAM flaw, a KVM shadow-page desync, and a libslirp ICMP-reflection bug) plus one kernel fix that hadn't reached the distribution's stable branch. Trail of Bits recommends treating such agents as advanced persistent threats: move to minimal-attack-surface hypervisors like Firecracker (which held even after a kernel hardlock), track upstream patches rather than trusting distro backport cycles, and enforce least-privilege network access, time-boxed runs, and pristine per-session environments.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.sentinelone.com%2Fblog%2Fwhat-two-independent-datasets-reveal-about-whos-exploiting-your-perimeter%2F%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/kkRwjf2W31F-vOh_0eQYI7Nt4wggujKMwT9m9k0yV9k=452">
<span>
<strong>Edge Infrastructure Under Siege: What Two Independent Datasets Reveal About Who's Exploiting Your Perimeter (9 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
A joint analysis by Tenable and SentinelOne revealed that state-sponsored groups and ransomware operators are independently exploiting the same edge device vulnerabilities. Researchers identified 12 flaws with confirmed multi-nexus exploitation by evaluating 93 CVE attribution pairs, including critical bugs in PAN-OS GlobalProtect (CVE-2024-3400) and Check Point Quantum (CVE-2024-24919). The underlying exposure data highlights severe remediation bottlenecks across major enterprise vendors. F5 appliances led exposure rates with 54 percent of customer environments carrying an actively exploited CVE, while Citrix deployments suffered a median patch time of 461 days. Additionally, Ivanti edge products demonstrated a predictable pattern of serial exploitation refreshing every 8.5 to 13 months. Security teams must prioritize patching F5 and Citrix appliances immediately while deploying feature set minimization and strict endpoint protections to block lateral movement following a perimeter breach.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.aikido.dev%2Fblog%2Faustralian-gym-hack-openclaw-test%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/3biDQk1ARaKqxcT69OfvGp10Jw2uG7bshnc0RFeyb3Y=452">
<span>
<strong>Could OpenClaw Have Actually Hacked That Australian Gym? We Decided To Test It (6 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Aikido recreated an Australian gym-booking incident using OpenClaw and Claude Opus 4.6. The test app exposed two flaws: client-side-only booking limits and an IDOR cancellation endpoint. Across ten runs, the model bypassed the booking window nine times. It cancelled another user's reservation in two runs, including one response to a generic waitlist request. Replay tests covered 16 decision points and found dominant responses averaged 96.38 percent with the model's actions shifting with small prompt and context changes.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🧑💻</span></div>
</div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Launches & Tools</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa16y.ai%2Fblog%2Fthe-hidden-security-risks-in-100k-enterprise-ai-sessions%3Futm_source=newsletter%26utm_medium=email%26utm_campaign=tldr_agentsrep/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/a8fhRDAgz5DZOmQ3cLx72gqfkuFnvf10rXl8F2ASUCk=452">
<span>
<strong>OpenAI's agent broke into Hugging Face. What are yours up to? (Sponsor)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa16y.ai%3Futm_source=newsletter%26utm_medium=email%26utm_campaign=tldr_agentsrep/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/ppvk7nOMxjcO9NgoydwOVWtU2tB-Hg5jtEjS-kWs3zU=452" rel="noopener noreferrer nofollow" target="_blank"><span>Autonomous Security</span></a> analyzed telemetry from 100k enterprise AI sessions. The agents your team already uses hunt for credentials, learn from untrusted instructions, and build insecure tooling that runs in the background. Overall, 30% of sessions involved off-script agent behavior. To prevent dangerous improvisations, you need deterministic guardrails. <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa16y.ai%2Fblog%2Fthe-hidden-security-risks-in-100k-enterprise-ai-sessions%3Futm_source=newsletter%26utm_medium=email%26utm_campaign=tldr_agentsrep/2/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/57U8uFtQ7UoXDVkOCnFoycsMPzVdrOP2zfWq1MigV5c=452" rel="noopener noreferrer nofollow" target="_blank"><span>See the full findings</span></a>
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2FIshannaik%2Fagent-sweep%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/n0k7gtuHkQhZ6IeRwARnbbmmA1c9-Kw_fcO4NCVsnT0=452">
<span>
<strong>AgentSweep (GitHub Repo)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
AgentSweep is a fully offline tool to find and redact secrets in your AI coding agent's local history.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Fluiacuaniello%2Fperspectivegraph%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/tw1S6ijwfJedn5aaOBn1MlYDsojw165VCAEzafjbR5Q=452">
<span>
<strong>PerspectiveGraph (GitHub Repo)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
PerspectiveGraph is a tool that finds the reachable paths from internet exposure, through excessive privilege, to a sensitive asset, by correlating the scanners you already run into one live graph of your environment
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Fwarpedatom%2Fnoisehound%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/H9NaE8slB_7NX846apCFya-mrCtE9q5UmPK3GujeD9o=452">
<span>
<strong>NoiseHound (GitHub Repo)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
NoiseHound is a tool that ingests the same graph data as BloodHound and re-ranks paths by expected detection cost instead of hop count.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">🎁</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><strong><h1>Miscellaneous</h1></strong></div>
</div>
</td></tr></tbody></table>
<table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FdVpPdC/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/U3fjQ14rgbk-NNrCGogsqjXYPCt5jKd4lm_bOrAz-Dk=452">
<span>
<strong>Disrupting a New Covert Influence Campaign From Russia (7 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
OpenAI banned Russian-origin accounts promoting the International Burke Institute, a fake Israel-based think tank. Operators used VPNs and Russian prompts to create posts for X, LinkedIn, Facebook, Substack, and Telegram. IBI republished academic work under false names and published a “sovereignty” index praising Russia, and its Telegram channels drew 10,000–20,000 followers.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fthehackernews.com%2F2026%2F08%2Fcisa-red-team-compromised-two-critical.html%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/ackrk4RjCCffnHWHlOtSvbf2Icih_cBEwPaeQ2Q061U=452">
<span>
<strong>CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing (3 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
CISA's red team gained domain-level access at two critical-infrastructure organizations. One organization missed the intrusion amid false positives, disconnected SOC tooling, default credentials, AD CS flaws, cleartext secrets, and permanent AWS keys. The other organization isolated phishing-hit workstations within 2–20 minutes, yet assessors later obtained domain-controller secrets through an SCCM-stored service credential.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fsecurityaffairs.com%2F197873%2Fapt%2Ffbi-seizes-china-linked-hacking-platforms-qscan-and-qtrouter-used-against-critical-infrastructure.html%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/LBeuMCFqwuT7ZblA3w-MrV9E2WhanySX8mEqK7uM18Q=452">
<span>
<strong>FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure (5 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
The FBI has seized QScan and QTRouter, China-linked hacking platforms used against critical infrastructure. Organizations should hunt for indicators of compromise associated with these platforms and report any findings to authorities.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;"><span style="font-size: 36px;">⚡</span></div></div>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding-top: 0px; padding-bottom: 0px;">
<div class="text-block">
<div style="text-align: center;">
<h1><strong>Quick Links</strong></h1>
</div>
</div>
</td></tr></tbody></table>
<table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"><tbody><tr><td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fcyberscoop.com%2Fenergy-department-cybersecurity-executive-order-rules%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/B1FFKaneSTSzj7qcSpQdl3NzHxtkwkuiosCFXs-SCfE=452">
<span>
<strong>Cyber Threats Nudge Trump to Sign Executive Order On Foreign Equipment in US Energy Infrastructure (2 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Recent cyber threats prompted Trump to sign an executive order on foreign equipment in US energy infrastructure.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.scworld.com%2Fbrief%2Fring-adopts-new-take-encryption-standard-for-smart-home-devices%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/UCeczKx7mq7MzNqQYBbXMiEBUmWNc74J1keuXilFrTw=452">
<span>
<strong>Ring Adopts New TAKE Encryption Standard for Smart Home Devices (1 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Ring is adopting the TAKE (Throw Away the Key Encryption) encryption standard for its smart home devices.
</span>
</span>
</div>
</td></tr></tbody></table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block">
<span>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fkrebsonsecurity.com%2F2026%2F08%2Ftwo-alleged-teampcp-hackers-arrested-in-australia%2F%3Futm_source=tldrinfosec/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/D3ho8XLrETToWIa84cekuHFEcYcbqdp-_ZYWX1RuLXQ=452">
<span>
<strong>Two Alleged ‘TeamPCP' Hackers Arrested in Australia (10 minute read)</strong>
</span>
</a>
<br>
<br>
<span style="font-family: "Helvetica Neue", Helvetica, Arial, Verdana, sans-serif;">
Australian police arrested two Western Australian men, aged 21 and 23, over alleged TeamPCP activity.
</span>
</span>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;">
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Love TLDR? Tell your friends and get rewards!
</p>
</td></tr>
<tr><td class="container" style="padding: 0px 10px 15px;">
<div class="text-block">
Share your referral link below with friends to get free TLDR swag!
</div>
</td></tr>
<tr><td align="left" style="padding: 10px;">
<div class="text-block">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Frefer.tldr.tech%2F78de0e20%2F8/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/UY38zmHrzStIUCT8I7fKD7euesxi7SSu_XEUrZT9mDk=452" style="color: #464ba4; text-decoration: underline;">https://refer.tldr.tech/78de0e20/8</a>
</div>
</td></tr>
<tr></tr>
<tr><td align="left" style="padding:5px 10px;">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fhub.sparklp.co%2Fsub_d62447d5a74a%2F8/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/i-p6TG3NKfv24OcHX6OUjUF9K4Fd5EoiQH9CuUW9-0c=452" style="font-size: 16px; line-height: 1.6; padding: 10px 0; display: inline-block; text-decoration: underline;"><span style="mso-text-raise:13pt; text-decoration: underline;">Track your referrals here.</span></a>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;">
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Want to advertise in TLDR? 📰
</p>
<div class="text-block" style="margin-top: 10px;">
If your company is interested in reaching an audience of cybersecurity professionals and decision makers, you may want to <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisecta/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/55sbIugDHFzu-KjAEhaSaosZf8R10uzrW9NAZAKJ8hQ=452"><strong><span>advertise with us</span></strong></a>.
</div>
<br>
<!-- New "Want to work at TLDR?" section -->
<p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;">
Want to work at TLDR? 💼
</p>
<div class="text-block" style="margin-top: 10px;">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/PaK4VQ8D-r1bSkC4bSgYZk54qSmnFX5M1-77GqYNtTU=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>Apply here</strong></a>,
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech%2Fc227b917-a6a4-40ce-8950-d3e165357871/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/WEIJE7-G9NumHYywvb1Xo7An-Z5WAnaXhnNJ5YBmmBo=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>create your own role</strong></a> or send a friend's resume to <a href="mailto:jobs@tldr.tech" style="color: #0000EE; text-decoration: underline;">jobs@tldr.tech</a> and get $1k if we hire them! TLDR is one of <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Ffeed%2Fupdate%2Furn:li:activity:7401699691039830016%2F/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/USTbD3MJb352WfRLEKB8ZuIZuEequ_3hwReRjz1LAjM=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"><strong>Inc.'s Best Bootstrapped businesses</strong></a> of 2025.
</div>
<br>
<div class="text-block">
If you have any comments or feedback, just respond to this email!
<br>
<br> Thanks for reading,
<br>
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fprasannagautam%2F/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/O6UTXb6t0uq3rduJCc6VPm-9HORM3bpM2kI6Yx7BvXs=452"><span>Prasanna Gautam</span></a>, <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fericfernandezdelcampo%2F/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/HCoM-kHYAcJl7MajAG_uH-WaXVZ5xFIROx9tgh0Xan0=452"><span>Eric Fernandez</span></a> & <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fsammy-tbeile%2F/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/m0efglI8j2eriK496n9zfa4lXQkuHQv-errzBnoQqao=452"><span>Sammy Tbeile</span></a>
<br>
<br>
</div>
<br>
</td></tr></tbody></table>
<table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td class="container" style="padding: 15px 15px;">
<div class="text-block" id="testing-id">
<a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%2Fmanage%3Femail=silk.theater.56%2540fwdnl.com/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/XTiI9FO5WjfdsgrrXELF4zPQwefG0AoVUvRV5kaLS6M=452">Manage your subscriptions</a> to our other newsletters on tech, startups, and programming. Or if TLDR Information Security isn't for you, please <a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Funsubscribe%3Fep=1%26l=8d9cea11-3e94-11ed-9a32-0241b9615763%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=a52f3db4-a2a3-11f1-b953-6301ba115ae9%26pt=campaign%26pv=4%26spa=1787922084%26t=1787922498%26s=d8f6ebf40e77af04770af7e9bc27fe20c0804060e6133b04d900219a589a0a7a/1/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/Xc0YDfSKQniGHczTQn3BUkfIpdewFlH6fr-AtwXCoXk=452">unsubscribe</a>.
<br>
</div>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table>
<img alt="" src="http://tracking.tldrnewsletter.com/CI0/010001a0487c4293-73ac0b49-b1b0-46b0-991f-2a2266c155b6-000000/oHwIiXg9Cu5oY9t_2profpRbt39DW0arcIfvW4qLaQU=452" style="display: none; width: 1px; height: 1px;">
</body></html>