[persistence]

August 16, 2026 weekly

• Bring Your Own EDR — Akamai's method for flipping a trusted commercial EDR into a delivery/persistence implant (Akamai). · Tools & PoCs Worth Grabbing
• CVE-2026-59310 — VMware vCenter Syslog directory-traversal RCE, reverse-SSH persistence across 47 countries (CERT.dk). · Under Active Exploitation

in The Week AI Started Finding the Zero-Days — and Attackers Started Weaponizing Everything Else

August 9, 2026 weekly

• N-able N-central (CVE-2026-18556/18577): New and fully live: two failed/partial patches, confirmed reach into customer networks, ransomware deployment, and Cloudflare Tunnel persistence surviving patching. Huntress · Developing Stories
• N-able ships a third N-central hotfix or an advisory revision for CVE-2026-18556/18577 within 3 weeks, as the Cloudflare Tunnel persistence angle forces scope expansion beyond the auth bypass itself. · Wild Speculation

in Four Labs In, and the First Model Too Dangerous to Ship