Researchers show that encrypted chain‑of‑thought blocks returned by OpenAI, Anthropic and Google can be replayed into weaker sibling models, which then decode and print the original reasoning in plaintext. The attack extracts private data, including 182 leaked credentials and 367 PII items, from public logs and bypasses anti‑distillation safeguards. Mitigations are proposed.
Unit 42 uncovered Aeternum, a C++ loader that stores encrypted C2 commands in Polygon smart contracts and pulls them via public RPC endpoints. By moving the entire command channel on‑chain, the botnet sidesteps traditional domain‑based takedowns and forces defenders to monitor blockchain traffic. The finding forces security teams to add blockchain‑awareness to their detection playbooks.
Sandworm’s UAC‑0145 cluster pretends to recruit system admins, moving conversations to Telegram and Zoom before sending a tampered WireGuard client. The client decodes a hidden AES key, runs a PowerShell script that creates a scheduled task and pulls a second‑stage payload, turning a fake VPN test into a malware drop.
The article reveals that the espionage framework CAV3RN now uses a .NET NativeAOT DLL that can pick between direct HTTPS and a Google Apps Script relay based on DNS A‑record responses, allowing operators to rotate channels and hide traffic in legitimate Google services. This modular C2 design complicates detection and shows the group’s focus on Israeli targets.
ACRO Criminal Records Office suffered three separate intrusions between July 2021 and June 2023, each exploiting an unpatched Kentico CMS and ignored Trend Micro alerts. The attacks exposed personal data of thousands, including domestic‑violence victims, prompting the ICO to issue a formal reprimand for systemic security failures.
You’re caught up.
That was all 5 stories in the 12 August issue.