A CVSS 9.8 SQLi in GeoServer's jsonArrayContains was exploited within hours of disclosure: watchTowr logged hundreds of probing attempts. On PostGIS deployments with admin SQL accounts it reaches RCE, and CVE-2023-25158-era mitigations don't help. Patched in GeoServer 3.0.1, 2.28.5, and 2.27.6.
A Fastly caching flaw in RubyGems.org stored gzip responses to authenticated API key requests, so anyone sharing a CDN edge could fetch a freshly minted legacy key for up to an hour without authentication. Leaked keys could yank gems, add owners, and manage webhooks. Fixed, but rotate tokens.
A new PyArmor-hardened Python implant, TWINLOOT, runs its entire C2 inside Microsoft 365: SharePoint dead-drops for tasking, Teams TURN relays for interactive access, all ferried through the victim's headless Edge browser. Delivered via a fake IT-support Teams call, it steals credentials, pivots over SOCKS5, and looks like normal cloud traffic.
Mozilla revoked and rotated the GPG subkey that signs Firefox and Thunderbird Linux tarballs, RPM packages, and checksum files after an unencrypted copy was committed to a private GitHub repo. Audit records show no unauthorized access. Most users need no action, but manual verifiers and some RPM users must import the new key (fingerprint 827E 6586..., expires 2028-08-05).
New free tool DecryptAds scrapes and cross-references ads.txt, app-ads.txt and sellers.json files to map every ad vendor and data broker on a site or app. It surfaces supply-chain red flags like unauthorized sellers and ad networks tied to adversarial nations, opening adtech's walled data to security researchers.
An Anthropic-EPFL preprint demonstrates self-propagating payloads that survive context wipes by writing into persistent prompt files (SOUL.md/MEMORY.md), infecting the next agent up to 55% of the time. A one-paragraph system-prompt warning cut spread to near zero, framing the risk as real but currently limited.
A rule can be enabled, error-free, and useless if the data it queries is gone. deadair is a read-only CLI that checks Elastic and OpenSearch rule inventories against live telemetry, flagging rules with no matching source, stale or empty data, missing fields, and ingest-lag blind windows. Outputs terminal, JSON, HTML, and Prometheus metrics.
Trail of Bits' agentcov brings gcov-style coverage to AI coding agents: it hooks Codex, Claude Code, and Pi sessions to record every line an agent actually reads, then renders per-line read counts as LCOV, gcov, JSON, and HTML heatmaps. Unread files show up as zero coverage, and unparsed read events get audited instead of silently dropped, so security teams can finally see what agents touched during a task.
You’re caught up.
That was all 8 stories in the 18 August issue.