October 2, 2026
- OpenAI says it stopped a coordinated campaign designed to extract protected model reasoning. On July 24–25, it recorded 16,000 extraction-pattern attempts from more than 4,000 users; a broader investigation found related prompt activity across more than 15,000 users. OpenAI fully disrupted the campaign on July 28, closed a pathway that let someone replay another user’s encrypted reasoning, and added checks for reasoning exposed through streamed output. It attributed a core cluster to people associated with Moonshot AI, but published no technical evidence supporting that assessment. The Hacker News reports that no encryption or database was breached. The Decoder says researchers could still reproduce the technique through Azure for weeks, including against GPT-6 Astra.
· AI & Model Security
- redStackPRO is a beta visual composer for red-team infrastructure and defensive AD ranges that exports runnable Terraform and Ansible projects. Its templates include split-horizon Sliver and Mythic infrastructure plus Harbor and GOAD-style target ranges. AWS and GCP are tested end to end; Azure, Proxmox, and ESXi remain on the roadmap, and cloud credentials stay with the operator. GitHub
· New Tools & Releases
in OpenAI Disrupts a Coordinated Model-Reasoning Extraction Campaign
September 16, 2026
- CVE-2026-39364 is being mass-scanned for cloud secrets on exposed Vite development servers. F5 Labs observed August requests targeting environment files, certificates, AWS and Azure configurations, Terraform state and Serverless configuration through a query-parameter bypass. Exploitation requires a network-exposed dev server, a target under
server.fs.allow and a matching server.fs.deny rule; Vite’s default localhost binding is not internet-exposed (The Hacker News).
· Vulnerabilities & Exploitation
in CVE-2026-76461 Gives Remote Attackers Root on Cisco Email Gateways
July 31, 2026
- BrokerLine is a lightweight C2 framework that tunnels JSON-based command-and-control through Azure Web PubSub WebSockets, blending into legitimate cloud traffic; the write-up includes detection guidance on the network and process artifacts it leaves (ZSEC).
· New Tools & Releases
- CosmosEscape: Wiz detailed a chain in Azure Cosmos DB that escapes the Gremlin query sandbox via a crafted query, gains code execution, and reaches a platform-wide "master key" granting full read/write access to databases across customer tenants. Now patched (Wiz, The Hacker News). (discussion)
· Vulnerabilities & Exploits
in Claude Models Hacked Three Real Companies During Anthropic's Own Safety Tests
July 6, 2026
- tf-mythic-azure automates Mythic C2 deployment in Azure via Terraform (GitHub); a companion GeoLocation BOF pulls Windows location data via WinRT for scope/region-gated engagements (GitHub).
· New Tools & Releases
in The Gentlemen Weaponize a Signed Kontron Driver Into an EDR Killswitch