Email: CenterPoint 1M leak ⚡, Claude 0-click flaw 🤖, curl HTTP/2 UAF RCE 🐛

Subject:
CenterPoint 1M leak ⚡, Claude 0-click flaw 🤖, curl HTTP/2 UAF RCE 🐛
Received:
10/16/2026, 1:09:25 PM
From:
"TLDR InfoSec" <dan@tldrnewsletter.com>
To:
silk.theater.56@fwdnl.com
&lt;!DOCTYPE html&gt;&lt;html lang="en"&gt;&lt;head&gt;&lt;meta http-equiv="Content-Type" content="text/html charset=UTF-8"&gt;&lt;meta charset="UTF-8"&gt;&lt;meta name="viewport" content="width=device-width"&gt;&lt;meta name="x-apple-disable-message-reformatting"&gt;&lt;title&gt;TLDR InfoSec&lt;/title&gt;&lt;meta name="color-scheme" content="light dark"&gt;&lt;meta name="supported-color-schemes" content="light dark"&gt;&lt;style type="text/css"&gt;
			:root {
				color-scheme: light dark; supported-color-schemes: light dark;
			}
			
			*,
			*:after,
			*:before {
				-webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;
			}
			
			* {
				-ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%;
			}
			
			html,
			body,
			.document {
				width: 100% !important; height: 100% !important; margin: 0; padding: 0;
			}
			
			body {
				-webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; text-rendering: optimizeLegibility;
			}
			
			div[style*="margin: 16px 0"] {
				margin: 0 !important;
			}
			
			table,
			td {
				mso-table-lspace: 0pt; mso-table-rspace: 0pt;
			}
			
			table {
				border-spacing: 0; border-collapse: collapse; table-layout: fixed; margin: 0 auto;
			}
			
			img {
				-ms-interpolation-mode: bicubic; max-width: 100%; border: 0;
			}
			
			*[x-apple-data-detectors] {
				color: inherit !important; text-decoration: none !important;
			}
			
			.x-gmail-data-detectors,
			.x-gmail-data-detectors *,
			.aBn {
				border-bottom: 0 !important; cursor: default !important;
			}
			
			.btn {
				-webkit-transition: all 200ms ease; transition: all 200ms ease;
			}
			
			.btn:hover {
				background-color: #f67575; border-color: #f67575;
			}
			
			* {
				font-family: Arial, Helvetica, sans-serif; font-size: 18px;
			}
			
			@media screen and (max-width: 600px) {
				.container {
					width: 100%; margin: auto;
				}
				.stack {
					display: block!important; width: 100%!important; max-width: 100%!important;
				}
				.btn {
					display: block; width: 100%; text-align: center;
				}
			}
			
			body,
			p,
			td,
			tr,
			.body,
			table,
			h1,
			h2,
			h3,
			h4,
			h5,
			h6,
			div,
			span {
				background-color: #FEFEFE !important; color: #010101 !important;
			}
			
			@media (prefers-color-scheme: dark) {
				body,
				p,
				td,
				tr,
				.body,
				table,
				h1,
				h2,
				h3,
				h4,
				h5,
				h6,
				div,
				span {
					background-color: #27292D !important; color: #FEFEFE !important;
				}
			}
			
			a {
				color: inherit !important; text-decoration: underline !important;
			}

		&lt;/style&gt;&lt;!--[if mso | ie]&gt;
		&lt;style type="text/css"&gt;
			a {
				background-color: #FEFEFE !important; color: #010101 !important;
			}
			@media (prefers-color-scheme: dark) {
				a {
					background-color: #27292D !important; color: #FEFEFE !important;
				}
			}
	 &lt;/style&gt;
			&lt;![endif]--&gt;&lt;/head&gt;&lt;body class=""&gt;



&lt;div style="display: none; max-height: 0px; overflow: hidden;"&gt;CenterPoint Energy told Texas authorities that a data breach affected 1,062,060 residents. Exposed data includes names, addresses, Social&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;‌&nbsp;&lt;/div&gt;
&lt;div style="display: none; max-height: 0px; overflow: hidden;"&gt;
&lt;br&gt;
&lt;/div&gt;

&lt;table align="center" class="document"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td valign="top"&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" class="container" width="600"&gt;&lt;tbody&gt;&lt;tr class="inner-body"&gt;&lt;td&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr class="header"&gt;&lt;td bgcolor="" class="container"&gt;

&lt;table width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container"&gt;



&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" style="margin-top: 0px;" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style="padding: 0px;"&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div style="text-align: center;"&gt;
&lt;span style="margin-right: 0px;"&gt;&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/aBHGIbT7SQLTWtiCCpyi_UKRCQMfEebLnWnph6Z4dwo=452" rel="noopener noreferrer" target="_blank"&gt;&lt;span&gt;Sign Up&lt;/span&gt;&lt;/a&gt;
|&lt;span style="margin-right: 2px; margin-left: 2px;"&gt;&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisetopnav/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/BN3mQ0BAFHN-0w8QH-QesVJcjivnrDLrIJAc77pbQok=452" rel="noopener noreferrer" target="_blank"&gt;&lt;span&gt;Advertise&lt;/span&gt;&lt;/a&gt;&lt;/span&gt;|&lt;span style="margin-left: 2px;"&gt;&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Fweb-version%3Fep=1%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=2de3208e-c956-11f1-b9d4-1f9f347697d2%26pt=campaign%26t=1792156165%26s=173f98343487722cb3f52f0b4f8a2b24da868e2c0fe63a2337cd7be7a1b53f25/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/u31YfuQC_QuFrLMzOh15R6epGLhl9ZVta1VhSvjt3lc=452"&gt;&lt;span&gt;View Online&lt;/span&gt;&lt;/a&gt;&lt;/span&gt;
&lt;br&gt;
&lt;/span&gt;&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="text-align: center;"&gt;&lt;span data-darkreader-inline-color="" style="--darkreader-inline-color:#3db3ff; color: rgb(51, 175, 255) !important; font-size: 30px;"&gt;T&lt;/span&gt;&lt;span style="font-size: 30px;"&gt;&lt;span data-darkreader-inline-color="" style="color: rgb(232, 192, 96) !important; --darkreader-inline-color:#e8c163; font-size:30px;"&gt;L&lt;/span&gt;&lt;span data-darkreader-inline-color="" style="color: rgb(101, 195, 173) !important; --darkreader-inline-color:#6ec7b2; font-size:30px;"&gt;D&lt;/span&gt;&lt;/span&gt;&lt;span data-darkreader-inline-color="" style="--darkreader-inline-color:#dd6e6e; color: rgb(220, 107, 107) !important; font-size: 30px;"&gt;R&lt;/span&gt;
&lt;br&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;br&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr id="together-with"&gt;&lt;td align="center" height="20" style="vertical-align:middle !important;" valign="middle" width="100%"&gt;&lt;strong style="vertical-align:middle !important; height: 100%;"&gt;Together With &lt;/strong&gt;
&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fsecurity.googlecloudcommunity.com%2Fevents%2Fcommunity-capture-the-flag-with-hack-the-box-operation-cymbal-cold-room-141%3Futm_source=tldr%26utm_medium=newsletter%26utm_campaign=STO10000055%26utm_content=community_header_google_secops_ctf%26utm_term=-_2026-10-16_tldr_infosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/t921DRE_l2a26QpOV3vynm7Etla0tKtkM-HXCBNpvCQ=452"&gt;&lt;img src="https://images.tldr.tech/googlecloud2.png" valign="middle" style="vertical-align: middle !important; height: 100%;" alt="Google Cloud"&gt;&lt;/a&gt;&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;


&lt;table style="table-layout: fixed; width:100%;" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;"&gt;
&lt;div style="text-align: center;"&gt;

&lt;h1&gt;&lt;strong&gt;TLDR Information Security &lt;span id="date"&gt;2026-10-16&lt;/span&gt;&lt;/strong&gt;&lt;/h1&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table style="table-layout: fixed; width:100%;" width="100%"&gt;&lt;tbody&gt;&lt;tr id="sponsy-copy"&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fsecurity.googlecloudcommunity.com%2Fevents%2Fcommunity-capture-the-flag-with-hack-the-box-operation-cymbal-cold-room-141%3Futm_source=tldr%26utm_medium=newsletter%26utm_campaign=STO10000055%26utm_content=community_header_google_secops_ctf%26utm_term=-_2026-10-16_tldr_infosec/2/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/4ciU5BGcSxJcdYQwIy_QsGnTGGRD-ZTx_Q-8coGOvK4=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Google SecOps CTF with Hack The Box (Sponsor)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Cymbal Investments has collapsed after three breaches nobody connected. Its environment sits sealed in a cold room. Your job: get in, untangle attacker movements in Google Security Operations, and &lt;strong&gt;rebuild every intrusion before rival investigators do&lt;/strong&gt;. Earn CPE credits and compete for a chance to win:&lt;p&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;strong&gt;Limited edition&lt;/strong&gt; Google Cloud Security + Hack The Box t-shirts&lt;p&gt;&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;strong&gt;Professional Security Operations Engineer&lt;/strong&gt; exam vouchers&lt;p&gt;&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;strong&gt;Swag &lt;/strong&gt;like backpacks, speakers, and more&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;The challenge kicks-off Oct. 29th, at 9AM PT, and registration closes Oct. 22nd. The first 25 finishers win. &lt;br&gt;&lt;br&gt;&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fsecurity.googlecloudcommunity.com%2Fevents%2Fcommunity-capture-the-flag-with-hack-the-box-operation-cymbal-cold-room-141%3Futm_source=tldr%26utm_medium=newsletter%26utm_campaign=STO10000055%26utm_content=community_cta_register%26utm_term=-_2026-10-16_tldr_infosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/07Tfe5eawoA8xPqddm5oIWheJYSDefwonU0cKFv7mBY=452" rel="noopener noreferrer nofollow" target="_blank"&gt;&lt;span&gt;Register now&lt;/span&gt;&lt;/a&gt;


&lt;/p&gt;
&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;
&lt;/td&gt;&lt;/tr&gt;
&lt;tr bgcolor=""&gt;&lt;td class="container"&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style="padding: 0px;"&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
&lt;div class="text-block"&gt;
&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🔓&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
&lt;div class="text-block"&gt;
&lt;div style="text-align: center;"&gt;

&lt;h1&gt;&lt;strong&gt;Attacks &amp; Vulnerabilities&lt;/strong&gt;&lt;/h1&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table style="table-layout: fixed; width: 100%;" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FN3Zxs9/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/vOy2T7SI_SCxu4qbfXeAVTpslNztDO_SqAgBQ0UDw3c=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;CenterPoint Energy Data Breach Impacts 1 Million Texans (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    CenterPoint Energy told Texas authorities that a data breach affected 1,062,060 residents. Exposed data includes names, addresses, Social Security numbers, and driver's license numbers. A hacker claimed to have taken nearly 7.5 million records and published a 2.5 GB archive containing about 3 million phone numbers.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FY6Re8W/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/F3AdaRNYE5irE0ctQ3eroVsDkoD8gg9y2FHMM5ampWk=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Hirudo Android Malware Replaces Banking Apps to Evade Security Checks (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Security researchers at ThreatFabric released a report on a malware campaign that targets Android users by impersonating banking apps. The malware is delivered via shopping, adult content, or short-drama apps that appear legitimate but then request additional permissions, such as Accessibility, for an “update.” The malware then launches the legitimate banking app's uninstaller, downloads a patched copy, and abuses its Accessibility permissions to install it.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.rte.ie%2Fnews%2Fireland%2F2026%2F1015%2F1595452-garda-social-account-hack%2F%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/BPRJBNarKh6N3WZHaGZm6p9l4x2k9KPiyIWzD2MRA9A=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Garda Social Media Accounts Breached By Crypto Hackers (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    An Garda Síochána, the Irish police force, confirmed that hackers compromised two of its X accounts. Threat actors removed the branding from @GardaInfo and @GardaTraffic accounts and started publishing posts about cryptocurrency. Users are advised not to interact with these posts while internal investigations take place.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
&lt;div class="text-block"&gt;
&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🧠&lt;/span&gt;&lt;/div&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
&lt;div class="text-block"&gt;
&lt;div style="text-align: center;"&gt;

&lt;h1&gt;&lt;strong&gt;Strategies &amp; Tactics&lt;/strong&gt;&lt;/h1&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;


&lt;table style="table-layout: fixed; width: 100%;" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fsecuritylabs.datadoghq.com%2Farticles%2Fjev-as-a-judge-how-counterfeit-policy-steers-jev%2F%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/G8DkFPShj25pHRHEwwUCFsSJrJ5bDU1wXSDZx_7QSPs=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Jev as a judge: How counterfeit policy steers Jev (9 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    A "counterfeit policy" prepended to untrusted content, supplying Jev's desired answers and redefining every attack category as something harmless, cut the decision model's prompt injection recall from 82.90% to 3.88% across 4,643 benchmark attacks. Datadog researchers then planted the policy in a user-editable profile field. They dropped LangChain tool-risk gating's mean risk score for an unauthorized edit from 0.893 to 0.290, under the 0.5 block threshold. Teams using Jev as a security gate should treat every user-controlled field that reaches the classifier as an attack surface and keep hard authorization checks outside the model.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.databricks.com%2Fblog%2Freducing-noise-how-atlassian-built-ocsf-security-lakehouse-databricks%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/wAon0p2Fg2FSPzs2FItUiuJo_fORmhbDjRVTp9eiwq0=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Reducing the noise: How Atlassian built an OCSF security lakehouse on Databricks (5 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Atlassian normalized 44 billion daily security events to OCSF by embedding the full schema in Go structs, so every log was validated at compile time, and its agentic mapping workflow could not emit invalid fields. That rigid typing enabled SOC analysts to self-serve log onboarding through a canary-gated pipeline, mapping two-thirds of the data in two months after the first third had taken a year. Standardized entity values like actor.user then enabled the detection team to replace one-to-one alerts with clustered, risk-based signals across 500+ detections.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flabs.itresit.es%2F2026%2F10%2F15%2Fcopycats-at-machine-speed-reproducing-frontier-windows-kernel-exploitation-research%2F%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/cvyPGPIJiNVT9nQBMSndin_jqzJZ2MVAne9C2-hZTC0=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Copycats at Machine Speed: Reproducing Frontier Windows Kernel Exploitation Research (11 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    ITRES Labs researchers fed photos of Juan Sacco's BruCON slides, his since-deleted physmem.exe binary, and older public projects into ChatGPT to rebuild his Native SSDT and Shadow SSDT kernel redirection techniques, reaching SYSTEM on Windows 11 with VBS, HVCI, and kernel shadow stacks enabled. Four months of original research were reproduced in roughly 24 hours of activity, though 39 refusals and broken generated code forced the final Shadow SSDT SYSTEM integration to be finished by hand. Researchers releasing slides or compiled binaries should assume partial disclosures can now be turned into working exploits within days.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
&lt;div class="text-block"&gt;
&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🧑‍💻&lt;/span&gt;&lt;/div&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
&lt;div class="text-block"&gt;
&lt;div style="text-align: center;"&gt;

&lt;h1&gt;&lt;strong&gt;Launches &amp; Tools&lt;/strong&gt;&lt;/h1&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table style="table-layout: fixed; width: 100%;" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="http://tracking.tldrnewsletter.com/CL0/http:%2F%2Fworkbrew.com%3Futm_campaign=Secondary10162026%26utm_source=tldrinfosec%26utm_medium=newsletter/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/OnwVMMWJui1GMEwLbsQCl2i0NxaJbkQ1vYihwrr8EvA=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Workbrew: secure the open source running your company (Sponsor)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    One &lt;em&gt;$ install&lt;/em&gt; is all it takes for Homebrew packages, npm modules, editor extensions, and apps to land on Macs, with zero review. Workbrew gives you instant software visibility across your fleet, flags vulnerable packages and lets you upgrade or remove them in one click. &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fworkbrew.com%2Fwebinars%2Fworkbrew-2-0%3Futm_source=tldr-infosec%26utm_medium=newsletter%26utm_campaign=10162026%26utm_content=secondary/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/KJSj52LvI9YD-0ah3IwYn_XBQJU-Xajp71GT5Eg6BNA=452" rel="noopener noreferrer nofollow" target="_blank"&gt;&lt;span&gt;Watch CEO John Britton demo it live&lt;/span&gt;&lt;/a&gt;, or &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fworkbrew.com%2Ffree%3Futm_campaign=Secondary10162026%26utm_source=tldrinfosec%26utm_medium=newsletter/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/voQhEkS3N7ur3ErsT0xuUxJPpa8sPOdm0alTgWbD8aQ=452" rel="noopener noreferrer nofollow" target="_blank"&gt;&lt;span&gt;start free, with no device limits.&lt;/span&gt;&lt;/a&gt;
&lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.harmonic.security%2F%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/OdLWHeIUTl1k0Bn-YDSwSjsbP70A4zDY3cnwuBwlx9g=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Harmonic Security (Product Launch)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Harmonic Security secures employee AI use across browser-based AI, desktop tools, and agent workflows. Its models classify tasks, detect risks such as personal-account use and sensitive-data exposure, apply real-time controls, and show which AI use cases create value.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Fsims718718%2FUnifiedThreatHunting%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/P5SwSjiSbQ7kgNmDjAjgdElJNxus4JgRwkX4ZncwJSU=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;A Unified Threat Hunting Process (GitHub Repo)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    This repository synthesizes several threat hunting models into a unified process that can be followed by agents or humans.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fgithub.com%2Fluca-ramseyer%2Framl-kql%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/UYaragpe3Y-V2SMguuKV59S3MSmCdwfdYILetf9ppW0=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Raml KQL (GitHub Repo)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Raml KQL is a desktop app for macOS, Linux, and Windows that provides a VS Code-like interface to run KQL queries across many Azure Log Analytics workspaces at once, across many Entra tenants, and many authenticated accounts.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;


&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
&lt;div class="text-block"&gt;
&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;🎁&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
&lt;div class="text-block"&gt;
&lt;div style="text-align: center;"&gt;&lt;strong&gt;&lt;h1&gt;Miscellaneous&lt;/h1&gt;&lt;/strong&gt;&lt;/div&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftechcrunch.com%2F2026%2F10%2F15%2Fcitizen-lab-says-governments-are-abusing-online-ads-to-hack-people-with-zero-click-spyware%2F%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/R-LAZrF9b5_I8gLGCS7-ykGUAWa68P0foN6Xsk4QPs4=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Citizen Lab says governments are abusing online ads to hack people with ‘zero-click' spyware (4 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Citizen Lab reports that Israeli firm Discover-Tech's ad platform, Controlium, let spyware vendors Candiru and Bindecy target people through online ads. At least 45 Al Jazeera Windows computers were infected with Candiru spyware in 2024–2025. Exposed source code, login records, and billions of bidding records showed ads reached government, military, and critical-infrastructure devices.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Flinks.tldrnewsletter.com%2FqezkOs/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/xR85ASkgmJ21jB1103owzXNTg6JdkMG3B3ua8G48BdQ=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    A flaw in Claude Code Desktop's preview pane let malicious HTML in a public repository run automatically when a developer asked Claude to review or edit it. Chained weaknesses bypassed sandbox protections and stole AWS, GitHub, API, SSH, and Claude OAuth credentials. Anthropic patched the issue after Noma found a bypass of the first fix. Developers should update and remove long-lived credentials from workstations.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fdaniel.haxx.se%2Fblog%2F2026%2F10%2F14%2Fa-uaf-turned-rce%2F%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/KydXgCyl08M8hCIqvOfFJkQFBTakfVpsZRrCxJ5vQDM=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;A UAF turned RCE (6 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    curl 8.23.0 patched CVE-2026-92392, a HIGH-severity HTTP/2 upload use-after-free that allowed a malicious server to achieve remote code execution when a reset on a paused stream left libcurl holding a dangling pointer to a freed easy handle. During multi-handle cleanup, server data overwrote that freed memory, including a function pointer, while a leaked request exposed local addresses to defeat ASLR. Anthropic's OSS Scanner found the bug, which maintainers rated below CRITICAL because exploitation requires a ~135KB upload and depends on allocation patterns that vary across distros and libc versions.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
&lt;div class="text-block"&gt;
&lt;div style="text-align: center;"&gt;&lt;span style="font-size: 36px;"&gt;⚡&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding-top: 0px; padding-bottom: 0px;"&gt;
&lt;div class="text-block"&gt;
&lt;div style="text-align: center;"&gt;

&lt;h1&gt;&lt;strong&gt;Quick Links&lt;/strong&gt;&lt;/h1&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table bgcolor="" style="table-layout: fixed; width: 100%;" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style="padding:0;border-collapse:collapse;border-spacing:0;margin:0;" valign="top"&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F10%2F14%2Fcisco-make-me-root-email-bug-exploited-as-a-0-day-by-unknown-crims%2F5303168%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/yyzV8Hs4I_ZG0LIJJ8KWO24OHs3-FgRJlQv0QnRHTiA=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Cisco make-me-root email bug exploited as a 0-day by unknown crims (1 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Cisco's Secure Email Gateway has an actively exploited zero-day, CVE-2026-76519, rated CVSS 9.8.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fthehackernews.com%2F2026%2F10%2Fdrupal-patches-critical-core-rce-flaw.html%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/Tmq8DrG0gsb7dbl3abPLc7jts2yTneiBDwqEGCAZThI=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules (2 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Drupal has fixed CVE-2026-108097, a critical Field UI flaw rated 19/25 that can lead to remote code execution through contributed modules with no authentication.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block"&gt;
&lt;span&gt;
                                &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ffidoalliance.org%2Fpasskey-index-2026%2F%3Futm_source=tldrinfosec/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/OqoQLmdCxgcbtk7WrfK-mx9O837nzzc7mb3G8HxheqA=452"&gt;
                                    &lt;span&gt;
                                        &lt;strong&gt;Passkey Index 2026 (1 minute read)&lt;/strong&gt;
                                    &lt;/span&gt;
&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;span style="font-family: &quot;Helvetica Neue&quot;, Helvetica, Arial, Verdana, sans-serif;"&gt;
                                    Passkeys now account for 36% of successful sign-ins (up from 26% in 2025), outperform traditional MFA (93% vs 78%), and save users an average of 27 seconds per login.
                                &lt;/span&gt;
&lt;/span&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;



&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;"&gt;

&lt;p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;"&gt;
Love TLDR? Tell your friends and get rewards!
&lt;/p&gt;
&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class="container" style="padding: 0px 10px 15px;"&gt;
&lt;div class="text-block"&gt;
Share your referral link below with friends to get free TLDR swag!
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td align="left" style="padding: 10px;"&gt;
&lt;div class="text-block"&gt;
&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Frefer.tldr.tech%2F78de0e20%2F8/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/Qngyu1s9fRvBnSJGppl8ApU9XJwwnnpvM3hrGz15sIo=452" style="color: #464ba4; text-decoration: underline;"&gt;https://refer.tldr.tech/78de0e20/8&lt;/a&gt;
&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td align="left" style="padding:5px 10px;"&gt;
&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fhub.sparklp.co%2Fsub_d62447d5a74a%2F8/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/BwlNs9K1ibd_HQlhZzku7Aq9Ti1ZHtVuxnXOpuMfBVQ=452" style="font-size: 16px; line-height: 1.6;  padding: 10px 0; display: inline-block;  text-decoration: underline;"&gt;&lt;span style="mso-text-raise:13pt; text-decoration: underline;"&gt;Track your referrals here.&lt;/span&gt;&lt;/a&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;




&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td align="left" style="word-break: break-word; vertical-align: top; padding: 5px 10px;"&gt;

&lt;p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;"&gt;
Want to advertise in TLDR? 📰
&lt;/p&gt;
&lt;div class="text-block" style="margin-top: 10px;"&gt;
If your company is interested in reaching an audience of cybersecurity professionals and decision makers, you may want to &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fadvertise.tldr.tech%2F%3Futm_source=tldrinfosec%26utm_medium=newsletter%26utm_campaign=advertisecta/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/lFkKR6oi9upXo7LTOq9NejKQN_aumvJkUlKR3Yqog2M=452"&gt;&lt;strong&gt;&lt;span&gt;advertise with us&lt;/span&gt;&lt;/strong&gt;&lt;/a&gt;.
&lt;/div&gt;
&lt;br&gt;

&lt;!-- New "Want to work at TLDR?" section --&gt;

&lt;p style="padding: 0; margin: 0; font-size: 22px; color: #000000; line-height: 1.6; font-weight: bold;"&gt;
Want to work at TLDR? 💼
&lt;/p&gt;
&lt;div class="text-block" style="margin-top: 10px;"&gt;
&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/NL7JZ-lfOFU4sAgqXsIajC0EoKKU5R2yUq2WwjsELc4=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"&gt;&lt;strong&gt;Apply here&lt;/strong&gt;&lt;/a&gt;,
&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fjobs.ashbyhq.com%2Ftldr.tech%2Fc227b917-a6a4-40ce-8950-d3e165357871/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/koqjfMdAaY5vBh_WH9CR-tZZErvTqgLUSaiInohhbqQ=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"&gt;&lt;strong&gt;create your own role&lt;/strong&gt;&lt;/a&gt; or send a friend's resume to &lt;a href="mailto:jobs@tldr.tech" style="color: #0000EE; text-decoration: underline;"&gt;jobs@tldr.tech&lt;/a&gt; and get $1k if we hire them! TLDR is one of &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Ffeed%2Fupdate%2Furn:li:activity:7401699691039830016%2F/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/AALlHMR72_SvUoKbfVkBitA8xeO2Ml-M49WKGn1jpj0=452" rel="noopener noreferrer" style="color: #0000EE; text-decoration: underline;" target="_blank"&gt;&lt;strong&gt;Inc.'s Best Bootstrapped businesses&lt;/strong&gt;&lt;/a&gt; of 2025.
&lt;/div&gt;
&lt;br&gt;

&lt;div class="text-block"&gt;
If you have any comments or feedback, just respond to this email!
&lt;br&gt;
&lt;br&gt; Thanks for reading,
&lt;br&gt;
&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fprasannagautam%2F/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/-WRDtBG9OVFWojgFrBeinCYXMS_hascnd9p4JhKkHds=452"&gt;&lt;span&gt;Prasanna Gautam&lt;/span&gt;&lt;/a&gt;, &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fericfernandezdelcampo%2F/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/iXNRpPPycAc4RH6YRwZaF-XctoSG2cNg0PyFa4TUc-w=452"&gt;&lt;span&gt;Eric Fernandez&lt;/span&gt;&lt;/a&gt; &amp; &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fwww.linkedin.com%2Fin%2Fsammy-tbeile%2F/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/kpYx8faAN1KFPk2u6nVsb_AJD4B7KWMxTk_Jts4FTls=452"&gt;&lt;span&gt;Sammy Tbeile&lt;/span&gt;&lt;/a&gt;
&lt;br&gt;
&lt;br&gt;
&lt;/div&gt;
&lt;br&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;table align="center" bgcolor="" border="0" cellpadding="0" cellspacing="0" width="100%"&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td class="container" style="padding: 15px 15px;"&gt;
&lt;div class="text-block" id="testing-id"&gt;
&lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Ftldr.tech%2Finfosec%2Fmanage%3Femail=silk.theater.56%2540fwdnl.com/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/fViKcBZw1_w4S1cgxyukjn9WM_vhre-tPAt1Rs_EK24=452"&gt;Manage your subscriptions&lt;/a&gt; to our other newsletters on tech, startups, and programming. Or if TLDR Information Security isn't for you, please &lt;a href="https://tracking.tldrnewsletter.com/CL0/https:%2F%2Fa.tldrnewsletter.com%2Funsubscribe%3Fep=1%26l=8d9cea11-3e94-11ed-9a32-0241b9615763%26lc=156924ca-84b7-11f0-8d58-47c5c04ad337%26p=2de3208e-c956-11f1-b9d4-1f9f347697d2%26pt=campaign%26pv=5%26spa=1792155688%26t=1792156165%26s=b3ce853f6c971e896771143078ceb05fe17a29be1699aea4b80c6d9abaf3f97f/1/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/SW54cQHG7Q5X6VOMDUDVoEPkfOIibC88H_VzVrt5yHw=452"&gt;unsubscribe&lt;/a&gt;.
&lt;br&gt;

&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;

&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;



&lt;img alt="" src="http://tracking.tldrnewsletter.com/CI0/010001a144d4e763-dab733f6-06a0-4cdc-89e6-8544368ac21a-000000/ZaCIlVFzKgHreYUy1LhTr5RnbZk6qe-yIlRrd20zdlQ=452" style="display: none; width: 1px; height: 1px;"&gt;
&lt;/body&gt;&lt;/html&gt;
Email Content
