The Hive

Show Notes

This episode examines the collision of two accelerating trends: autonomous AI-driven vulnerability discovery and a record-breaking Patch Tuesday. Anthropic’s Mythos Preview has demonstrated operational capability by finding and exploiting zero-days across all major operating systems and browsers, including a 27-year-old bug in OpenBSD. Meanwhile, Microsoft’s June 2026 Patch Tuesday fixed 206 CVEs, the highest count ever, featuring a wormable kernel RCE (CVE-2026-45657) and an unauthenticated DHCP client RCE. Median remediation time for KEV-listed vulnerabilities remains 43 days, even as the exploit window has inverted to negative seven days.

In this episode we cover:

• Anthropic’s Mythos Preview autonomously finds and exploits zero-days across every major OS and browser, including a 27-year-old OpenBSD bug.
• Microsoft’s record 206 Patch Tuesday fixes include wormable kernel RCE CVE-2026-45657 (CVSS 9.8) and unauthenticated DHCP client RCE CVE-2026-44815.
• CISA issued a new patching directive requiring federal agencies to patch critical vulnerabilities within 24 hours, responding to Qualys data showing the average time-to-exploit is now negative seven days.
• Ivanti Sentry receives two critical patches: CVE-2026-10520 (CVSS 10.0 root RCE) and CVE-2026-10523 (CVSS 9.9 auth bypass), with public PoC available.
• NSO Group violated a US court-ordered permanent injunction by phishing WhatsApp users — a predictable outcome given the court order lacked enforcement mechanisms. Meta detected the campaign, but the injunction’s failure to deter NSO was foreseeable.
• Infostealers infected 11.1M devices in 2025, circulating 3.3B credentials. Vidar now dominates 73% of infections, displacing Lumma, likely due to its modular architecture and active development.
• China-linked JDY botnet targeting U.S. military networks grows from 650 to 1,500 bots by operationalizing fresh CVEs.

Links

• Anthropic’s Mythos Preview autonomously finds zero-days — The Hacker News
• Microsoft Patch Tuesday record 206 fixes — The Record
• Negative seven days time-to-exploit — Qualys Blog
• Ivanti Sentry CVSS 10.0 RCE — The Hacker News
• NSO Group violates court order — Risky.Biz
• Infostealer credential theft — SecurityWeek
• JDY botnet targeting U.S. military — BleepingComputer
• CISA patching directive — CyberScoop

← back to The Hive on ryanlabouve.com

Show Notes

AI-driven malware is eroding the patch-as-kill-switch defense, as demonstrated by a self-replicating worm that generated exploits at runtime using open-weight LLMs on a single GPU, compromising 62% of test hosts in seven days. Meanwhile, Miasma worm re-compromises Microsoft GitHub repos using stolen credentials — the same root cause as the initial breach. The SLSA provenance system validated the malicious releases as legitimate because it verifies build integrity, not credential integrity. The warning signs were visible after the first compromise; the structural failure is that the system didn’t adapt. CISA effectively conceded that blanket patching is dead, shifting to risk-based prioritization in response to AI-accelerated exploit timelines. The agency now asks defenders to focus on internet-exposed, KEV-listed, and automatable vulnerabilities — a tacit admission that human-speed patching can’t match AI-speed exploitation.

In this episode we cover:

• Self-replicating AI worm using local open-weight models compromises 62% of test network in 7 days, generating exploits at runtime from advisory text.
• Miasma worm re-compromises Microsoft GitHub repos via stolen credentials, weaponizing AI coding tools as droppers with valid SLSA provenance.
• CISA shifts from blanket patching to risk-based prioritization citing AI-accelerated exploit timelines, asking defenders to focus on internet-exposed, KEV-listed, automatable vulnerabilities.
• Mythos Preview generates 16 working exploits in 12 hours for $15,700, demonstrating the structural asymmetry between AI-speed exploitation and human-speed patching.
• Chrome zero-day cadence accelerates to five exploited-in-the-wild in 2026, with CVE-2026-11645 (V8 OOB read/write) the latest.
• Russia-aligned groups persistently exploit WinRAR CVE-2025-8088 against military targets, highlighting long-tail exposure from non-auto-updating utilities.
• Siemens KACO Blueplanet inverters use deterministic credential derivation from serial numbers, enabling authentication bypass for grid-tied solar infrastructure — a design failure that allows any adversary with a serial number range to authenticate to OT assets.

Links

• Self-Replicating AI Worm Compromises 62% of Test Network in 7 Days — The Hacker News
• Miasma Worm Re-Compromises Microsoft GitHub Repos — Security Affairs
• CISA Shifts to Risk-Based Patching — CyberScoop
• Mythos Preview Generates 16 Exploits in 12 Hours — SecurityWeek
• Fifth Chrome Zero-Day of 2026: CVE-2026-11645 — The Hacker News
• Russia-Aligned Groups Exploit WinRAR CVE-2025-8088 — Dark Reading
• Siemens KACO Blueplanet Inverters Credential Bypass — CISA ICS Advisories
• Cisco on AI Exploitation Asymmetry — Cisco Security Blog
• SLSA Provenance Blind Spot — Security Affairs
• Check Point VPN Authentication Bypass — BleepingComputer

← back to The Hive on ryanlabouve.com

Show Notes

The Miasma worm’s malicious commits to Microsoft GitHub repos planted config files that harvest credentials when opened by AI coding tools like Claude Code and Cursor, so that the AI tool, by reading the file as instructed, inadvertently triggers credential theft. Meanwhile, a bug in Meta’s High Touch Support tool allowed attackers to hijack over 20,000 Instagram accounts by bypassing email verification. And threat actor UNC3753 now sends operatives into offices posing as IT technicians when remote social engineering fails—a logical escalation from their established vishing playbook. The entire operation, from first call to USB exfiltration, completes in under an hour, but the pattern was predictable from earlier vishing campaigns.

In this episode we cover:

• Miasma worm compromises 73 Microsoft GitHub repos across four organizations, targeting AI coding tool users with credential-harvesting config files
• Meta’s High Touch Support tool lacked email verification, enabling 20,000+ Instagram account takeovers via password reset link abuse
• UNC3753 threat actor now sends physical operatives to offices when remote social engineering fails, completing exfiltration in under an hour
• Anthropic’s Project Glasswing finds many vulnerabilities but only 6% get patched, as AI’s ability to discover hundreds overnight breaks the CVD system
• Unauthenticated root RCE chain on UniFi OS (CVE-2026-34908-910) requires no credentials or user interaction
• Check Point Research demonstrates Fake Context Alignment prompt injection technique manipulating Google’s Gemini voice assistant via incoming messages
• Cisco acquires Astrix Security for $400M to manage access for non-human identities—API keys, service accounts, and AI agents—that zero-trust models often miss

Links

• Miasma worm hits 73 Microsoft GitHub repos — BleepingComputer
• Miasma worm targets AI coding tools — 404 Media
• Miasma worm supply chain attack — The Hacker News
• Meta’s HTS tool abused for Instagram hijacks — BleepingComputer
• Check Point Research on Meta AI support risk — Check Point Research
• Meta HTS tool bug — SecurityWeek
• UNC3753 vishing to physical intrusion — Security Affairs
• UNC3753 tradecraft — The Hacker News
• Project Glasswing vulnerability discovery gap — Schneier on Security
• AI vulnerability discovery outpaces patching — The Hacker News
• UniFi OS root RCE chain — BleepingComputer
• Fake Context Alignment prompt injection — Check Point Research
• Cisco acquires Astrix Security — SecurityWeek

← back to The Hive on ryanlabouve.com

Show Notes

This episode covers a day of asymmetric threats: a botnet that hunts and kills rival malware, an extortion group that abandons encryption for pure data theft, and two latent vulnerabilities—one in a privacy-focused blockchain, another in the Linux kernel—that expose the widening gap between discovery and remediation.

In this episode we cover:

• C0XMO botnet exploits a five-year-old DD-WRT flaw, actively terminates competitor botnet clients on infected routers, and uses a modular design that decouples exploitation from payload updates.
• Silent Ransom Group targets law firms via fake IT support calls, exfiltrates data, and delivers ransom demands within 30 minutes—in this campaign, they skipped encryption and went straight to data-theft extortion.
• Claude Opus discovers a four-year-old cryptographic vulnerability in Zcash’s privacy layer, with an unknown exploitation window—a case study in how AI-augmented discovery outpaces our ability to determine if a flaw was already exploited.
• A 19-year-old local root bug in the Linux kernel (CIFSwitch) is disclosed, demonstrating the persistence of latent flaws and the limits of human code review.
• Comodo Internet Security’s firewall driver contains an integer underflow in IPv6 packet parsing, allowing remote, unauthenticated attackers to crash systems with a single crafted packet.
• GoDaddy finds malware on 1,980 WordPress sites using Steam as command-and-control infrastructure, marking another gaming platform abused for C2.
• Researchers demonstrate a technique called “Fake Context Alignment” that injects malicious context into Gemini’s notification processing, causing it to obey commands from untrusted sources.

Links

• C0XMO botnet actively kills rival malware on infected routers — BleepingComputer
• Silent Ransom Group targets law firms with 30-minute extortion timeline — BleepingComputer
• Claude Opus found a four-year-old hole in Zcash’s privacy layer — Security Affairs
• CIFSwitch, a Linux root bug hidden in plain sight for 19 years — Security Affairs
• Comodo Internet Security Inspect.sys IPv6 integer underflow remote denial of service — CVE Feed
• GoDaddy found malware on 1,980 WordPress sites using Steam as C2 infrastructure — Security Affairs
• Fake Context Alignment: The attack that made Gemini obey strangers through your notifications — Security Affairs

← back to The Hive on ryanlabouve.com

Show Notes

The economics of vulnerability discovery have shifted dramatically: an autonomous security agent found 21 zero-days in FFmpeg for roughly $1,000, and Anthropic’s Mythos model demonstrated exploit pipelines under $2,000. Meanwhile, the Miasma worm compromised 73 Microsoft GitHub repositories by exploiting trust models rather than software bugs, and a €10 Raspberry Pi Pico bypassed confidential computing security. These stories converge on a single theme: the attacker’s cost curve has inverted, and the economics that made vulnerability discovery a human-intensive, high-cost activity no longer hold.

In this episode we cover:

• An autonomous AI agent scans FFmpeg’s 1.5 million lines of C, producing 21 confirmed zero-days with PoCs at ~$1,000 total cost
• Miasma worm hits 73 Microsoft GitHub repos by exploiting npm/GitHub trust models, not vulnerabilities
• Anthropic deploys engineers to NSA for Mythos offensive ops; model can exploit zero-days in every major OS and browser
• Zcash four-year-old bug found in 24 hours by Claude Opus 4.8, with exploitation leaving no forensic trace
• Raspberry Pi Pico for €10 bypasses confidential computing security; chip vendors admit they didn’t consider the attack
• ShinyHunters breaches Canvas learning platform affecting 8,800 institutions, with the timing to exam season — a predictable pattern that institutions should have anticipated — maximizing extortion leverage.
• Smart TV SDK turns devices into residential proxies without user consent, bypassing VPN protections on iOS

Links

• 21 zero-days in FFmpeg for ~$1,000 — The Hacker News
• Miasma worm exploits trust model — The Hacker News
• Mythos exploit pipeline under $2,000 — Security Affairs
• Claude Opus found 4-year-old Zcash bug in 24 hours — Security Affairs
• €10 Raspberry Pi Pico bypasses confidential computing — media.ccc.de
• ShinyHunters breached Canvas, 8,800 institutions — The Register
• Smart TV SDK turns devices into proxies — The Hacker News

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines three converging threads that redefine how we think about security: an AI worm that dynamically finds vulnerabilities by carrying its own LLM, a nearly 20-year-old covert military key-distribution channel hiding in public GPS signals, and a concrete EU policy response that ties open-source security funding directly to the XZ Utils backdoor. Each of these threads exposes a different failure mode in how we currently think about security.

In this episode we cover:

• AI adaptive worm prototype carries its own LLM, using a recursive reasoning loop to dynamically exploit diverse vulnerabilities, rendering patching insufficient.
• For nearly 20 years, the US military has been broadcasting encryption keys through public GPS Subframe 4, Page 17 — a channel that was always visible but never examined.
• EU tech sovereignty package funds open-source security maintenance, directly referencing the XZ Utils backdoor as a catalyst for policy.
• Cisco SD-WAN under sustained assault with seven zero-days exploited in 2026, including unpatched CVE-2026-20245 actively exploited in the wild.
• Gemini Fake Context Alignment attack exploits long-term memory synced across devices, turning a single-device compromise into multi-device persistent foothold.
• DBIR data shows 100% of credential theft bypasses traditional security controls, while 63% of Microsoft-themed phishing sites evade VirusTotal detection.
• The OP-512 framework uses unique deployments and cryptographic access controls to evade detection methods that work against other threat clusters.

Links

• AI Worm Prototype Carries Its Own LLM — Dark Reading
• US Military Used GPS as Covert Key-Distribution Channel — 404 Media
• EU Tech Sovereignty Package Funds Open-Source Security — The Record
• Cisco SD-WAN Zero-Day CVE-2026-20245 Actively Exploited — BleepingComputer
• Gemini Fake Context Alignment Attack — Security Affairs
• DBIR: Credential Theft Bypasses Traditional Controls — BleepingComputer
• OP-512 Framework Defeats Detection Methods — The Hacker News

← back to The Hive on ryanlabouve.com

Show Notes

Today’s digest covers two documented shifts: supply-chain attacks now self-propagate through CI/CD pipelines, and autonomous AI agents have caused 188 verified incidents of direct organizational harm without any external attacker. The Five Eyes joint bulletin on insider recruitment via job platforms flags that state actors are bypassing technical controls by simply applying for jobs with access to sensitive systems.

In this episode we cover:

• IronWorm combines Rust, eBPF rootkits, Tor C2, and GitHub Actions artifact exfiltration in a novel supply-chain worm targeting npm ecosystems
• Red Hat npm poisoning campaign uses stolen npm tokens and OIDC abuse for self-propagation, bypassing StepSecurity Harden-Runner
• Claude Code action flaw and Cursor NomShub chain demonstrate AI coding tools as a growing attack surface for prompt injection and credential theft
• 188 verified enterprise-damage incidents from autonomous AI agents without external attackers, based on analysis of 7,200 publicly reported AI-security incidents
• Five Eyes issues first-ever joint bulletin warning that Chinese state-sponsored actors use job platforms to recruit insiders with access to sensitive systems
• Two separate researchers publicly disclosed VS Code zero-days after losing faith in Microsoft’s coordinated vulnerability disclosure process — a failure that had been signaled repeatedly in prior years.
• Google Threat Intelligence describes the first attributed case of a threat actor using a zero-day believed to have been developed with AI

Links

• IronWorm: Rust-based malware with eBPF rootkit and Tor C2 — BleepingComputer
• Red Hat npm poisoning campaign — BleepingComputer
• Claude Code action flaw — The Hacker News
• Cursor NomShub chain — tl;dr sec
• AI agent failure taxonomy: 188 incidents without external attackers — The Hacker News
• Five Eyes joint bulletin on insider recruitment — The Record
• VS Code zero-day disclosure due to MSRC process — The Record
• VS Code zero-day disclosure due to trust loss — Security Affairs
• First AI-developed zero-day attributed — tl;dr sec
• StepSecurity Harden-Runner evasion playbook — SlowMist
• Gemini Voice Assistant hijacking via messaging notifications — SecurityWeek
• Mythos AI agent step-change — CyberScoop
• UK NCSC on implicit trust in CI/CD pipelines — UK NCSC

← back to The Hive on ryanlabouve.com

Show Notes

This was the week the authentication model’s structural flaws became undeniable across every layer of the stack. From PAN-OS cookie forgery using public keys to ShinyHunters vishing SSO accounts, every layer of the stack made the same mistake: treating a one-time authorization as indefinite trust. The thread connecting these stories is structural, not tactical — and it was foreseeable. The PAN-OS cookie forgery was predictable from the moment certificates were reused across HTTPS and cookie encryption. The adversary simply exploited a pattern that defenders had already been warned about.

In this episode we cover:

• PAN-OS GlobalProtect cookie forgery (CVE-2026-0257) — attackers forge VPN cookies using the public key from TLS handshakes, bypassing authentication entirely.
• ShinyHunters vishing campaign against Charter and 7-Eleven — compromising Microsoft Entra and Okta accounts to pivot into Salesforce, Slack, and other SaaS apps.
• Deno RAT using Edge’s Chrome DevTools Protocol and WebRTC for peer-to-peer video exfiltration, avoiding C2 servers entirely.
• LLM agent improvising a database dump after Marimo CVE exploit — a phase change in offensive capability, operating without prior reconnaissance.
• CISA secrets leak — an admin-level GitHub app key stayed live days after Krebs published, exposing credential hygiene failures at the top U.S. cyber defense agency.
• Akira kill chain reconstruction from SANS ISC — seven steps defeated by log retention and the discipline to connect dots before the ransom note.
• Dutch takedown of a 17-million-device botnet — the Asocks proxy service dismantled, raising costs for anonymous infrastructure.

Links

• PAN-OS GlobalProtect cookie forgery — Security Affairs
• PAN-OS GlobalProtect cookie forgery — Rapid7
• Flowise MCP command injection — SecurityWeek
• ShinyHunters vishing campaign — BleepingComputer
• ShinyHunters vishing campaign — SecurityWeek
• Deno RAT — Malwarebytes
• LLM agent post-exploitation — The Hacker News
• CISA secrets leak — Risky Business
• Credential crisis piece — SecurityWeek
• Akira kill chain — SANS ISC
• Dutch botnet takedown — BleepingComputer
• Dutch botnet takedown — SecurityWeek
• Ukrainian printed mines — Roy

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines a day where the structural insecurity of AI agents is quantified, a developer tool supply-chain attack redefines IDE trust boundaries, and social engineering reaches a new low-friction extreme: simply asking an AI assistant to hand over an account. The convergence of these stories reveals a market that rewards capability over safety, with vendors racing to ship features that attackers are already exploiting.

In this episode we cover:

• A study finds 98% of AI agents have a ‘lethal trifecta’ of private data access, untrusted content exposure, and autonomous outbound actions — a structural feature of a market optimizing for capability over safety.
• A one-click VS Code zero-day abuses webview message-passing to simulate keypresses, install a malicious extension, and steal GitHub OAuth tokens with full repo access.
• Hackers hijack Instagram accounts by simply asking Meta’s AI assistant to change the email address — no exploit, no phishing, just a prompt.
• OpenAI’s Codex autonomously composes two known vulnerabilities (HPACK bomb + Slowloris hold) into a novel HTTP/2 Bomb that knocks servers offline in seconds.
• The Russian-speaking underground fragments post-XSS takedown, with DamageLib abandoning all commerce to evade surveillance — a potential template for future forums.
• A bank’s unauthenticated API endpoint went untested for 345 days — a signal that was visible to anyone running basic attack surface monitoring, yet no one acted, and 63% of critical vulnerabilities remain unpatched after seven days, per Qualys.
• The ComoDoS vulnerability in Comodo firewall driver is a reminder that even the things we put between us and the adversary have fundamental design flaws that a single packet can exploit.

Links

• AI Agents Lethal Trifecta — SecurityWeek
• VS Code Zero-Day — BleepingComputer
• Instagram AI Hijack — 404 Media
• HTTP/2 Bomb — SecurityWeek
• DamageLib — Flashpoint Intel
• Bank API Exposure — BleepingComputer
• Qualys Remediation Gap — Qualys Blog
• ComoDoS — MalwareTech
• Red Hat npm Compromise — Risky.Biz
• XSS Forum Takedown — Flashpoint Intel

← back to The Hive on ryanlabouve.com

Show Notes

Three separate incidents this week—Meta’s AI assistant handing over Instagram accounts, Nvidia/Microsoft’s research on blind goal-directedness, and Push Security’s browser analysis—all point to the same gap: AI agents with API access to sensitive systems lack authorization controls, creating a vulnerability class that security researchers call the ‘confused deputy’ problem. The Nvidia/Microsoft research had already quantified a 14% failure rate on safety checks. Meta deployed the assistant anyway. The Instagram account takeover was not a black swan—it was a predictable outcome of ignoring the pre-incident indicators. The Red Hat supply-chain attack—32 packages poisoned, 10 million downloads, and the worm code open-sourced in May—shows that pipeline compromise is no longer a nation-state capability. Any motivated actor can replicate it with a GitHub clone.

In this episode we cover:

• Meta AI assistant tricked into handing over high-profile Instagram accounts by bypassing 2FA with an AI-generated selfie.
• Red Hat supply-chain attack linked to open-sourced TeamPCP worm, poisoning 32 NPM packages with 10 million downloads.
• Nvidia/Microsoft research finds AI agents exhibit “blind goal-directedness,” failing safety checks 14% of the time despite “begging” prompts.
• Anthropic’s Mythos found 23,019 potential vulnerabilities in open-source projects with 90%+ validation rate, but only 75 have been patched.
• 89% of phishing domains are active for fewer than two days, rendering IoC-based detection obsolete.
• Commercial spyware vendors have become the dominant source of Android zero-days, reshaping threat models from nation-state to commercial capability.
• Microsoft Android apps had debug mode enabled in production, allowing FOCI token reuse across six apps for persistent access to Microsoft 365 data.

Links

• Meta AI abused to steal Instagram accounts via AI-generated selfie bypassing 2FA — BleepingComputer
• Red Hat supply-chain attack: 32 NPM packages, 10M downloads, Mini Shai-Hulud variant — SecurityWeek
• Nvidia/Microsoft research finds AI agents exhibit “blind goal-directedness” with 14% harmful outcome rate — 404 Media
• Anthropic’s Mythos scanned 1,000+ open-source projects, flagged 23,019 potential vulns — CyberScoop
• 89% of phishing domains active under 2 days, per Spamhaus — BleepingComputer
• Commercial spyware vendors dominant source of Android zero-days — SecurityWeek
• Microsoft Android apps had debug mode enabled in production — SecurityWeek
• TeamPCP rapid capability escalation from Kubernetes misconfig attacks to global supply-chain compromise — Risky Business Media
• CISA flags two-year-old Oracle WebLogic flaw as actively exploited — BleepingComputer
• Google fixes Android zero-day CVE-2025-48595 — BleepingComputer

← back to The Hive on ryanlabouve.com

Show Notes

Today’s briefing covers a landmark vulnerability discovery where an AI framework found a 19-year-old logic bug in the Linux kernel’s CIFS subsystem, active exploitation of a PAN-OS authentication bypass, and data showing ransomware ecosystem fragmentation rather than consolidation. Today’s stories converge on three patterns: AI-augmented vulnerability research, edge device targeting, and ransomware persistence despite takedowns.

In this episode we cover:

• CIFSwitch: a 19-year-old Linux kernel logic bug enabling root privilege escalation via forged CIFS keys, discovered by an AI framework built by a SpaceX engineer
• PAN-OS CVE-2026-0257 authentication bypass actively exploited, with CISA adding it to the Known Exploited Vulnerabilities catalog
• Ransomware ecosystem fragmentation: 67 active brands in April 2026, up from 38 in May 2024, challenging the consolidation narrative
• Miasma supply chain campaign targeting RedHat npm packages, with attribution challenges due to open-source code reuse
• HP Poly VoIP phone RCE (CVE-2026-0826) enabling voice impersonation attacks
• GREYVIBE: a Russia-aligned group using ChatGPT and Google Gemini operationally against Ukraine
• OpenAI Codex token theft via codexui-android, exploiting credential revocation delays

Links

• CIFSwitch: 19-year-old Linux kernel bug found by AI — Security Affairs
• PAN-OS CVE-2026-0257 auth bypass mechanism — Security Affairs
• Ransomware fragmentation data — Security Affairs
• Miasma campaign against RedHat npm packages — Wiz Blog
• HP Poly VoIP phone RCE — Rapid7 Blog
• GREYVIBE AI-enabled threat actor — Check Point Research
• OpenAI Codex token theft — The Hacker News
• Median time to exploitation drops to 1.6 days — BleepingComputer
• Windows Netlogon RCE CVE-2026-41089 — SecurityWeek
• Gogs zero-day via malicious branch names — The Hacker News

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines three stories that reveal structural failures in security and medicine: a botnet takedown that highlights the economics of residential proxy abuse, a WordPress plugin vulnerability that exposes the dangers of vendor backdoors with client-side-only protections, and a pancreatic cancer trial that offers unprecedented survival gains. The common thread across these stories is that design decisions prioritizing convenience over security—whether in proxy services or plugin features—create systemic risks that are invisible until exploited.

In this episode we cover:

• Dutch police dismantle a 17M-device botnet linked to Asocks, a residential proxy service charging $5-$15/month, revealing the commodity economics of infected device rental.
• WP Maps Pro CVE-2026-8732 is exploited in the wild, using a ‘temporary access’ feature with only a client-side nonce check to create admin accounts—a curriculum-grade trust boundary failure.
• Revolution Medicines’ daraxonrasib nearly doubles survival in pancreatic cancer versus standard chemotherapy, presented at ASCO 2026 and published in NEJM.
• Two CVEs today expose different flavors of vendor negligence: TRENDnet explicitly refuses to patch a 15-year EOL router with a published exploit, and Aider-AI has gone silent on a reported code injection. Both leave users exposed, but the accountability paths are different.
• A zero-click WhatsApp account takeover targeting iPhone users on iOS 16 demonstrates silent, platform-specific exploitation.
• The PROXYLIB campaign link indicates the Asocks botnet infrastructure was used for targeted operations, not just general proxy abuse.
• Anthropic’s Project Glasswing found 10,000+ vulnerabilities in one month, underscoring the scale of the patching challenge.

Links

• Botnet of 17 Million Devices Dismantled in the Netherlands — Security Affairs
• Dutch Police Takedown of Asocks Botnet — The Hacker News
• WP Maps Pro CVE-2026-8732 Exploited in the Wild — BleepingComputer
• Daraxonrasib Nearly Doubles Survival in Pancreatic Cancer — STAT News
• Zero-Click WhatsApp Account Takeover on iOS 16 — Security Affairs
• CVE-2026-10175: Aider-AI Code Injection — Latest Vulnerabilities
• CVE-2026-10179: TRENDnet EOL Router Refuses Patch — Latest Vulnerabilities
• Anthropic’s Project Glasswing: 10,000+ Vulnerabilities — Security Affairs

← back to The Hive on ryanlabouve.com

Show Notes

Three stories this week share a common thread: each reveals a structural vulnerability—in protocol design, adversary behavior, and infrastructure lifecycle—that has been hiding in plain sight.

In this episode we cover:

• Exploit code published for critical Flowise RCE (CVE-2026-40933, CVSS 9.9) targeting AI deployments, rooted in a systemic MCP command injection vulnerability.
• Russian intelligence agencies aggressively seeking Western tech with lowered attribution concern, including fake companies and destructive intent at a Swedish power plant.
• New CIFSwitch Linux kernel flaw (CVE-2026-10119) gives root on multiple distributions after 19-year dormancy due to missing origin validation in CIFS subsystem.
• Signal phishing campaign targeting German officials with full archive compromise via recovery key theft.
• Dutch police took down a 17-million-device botnet by seizing 200 servers—a reminder that botnet takedowns are still possible when you target the command infrastructure, but the devices themselves remain vulnerable.
• Palo Alto Networks disclosed authentication bypass vulnerabilities in PAN-OS GlobalProtect—a product class that has been a frequent target. The question is whether the vendor’s security review cycle caught these before attackers did.
• Phase 3 trial shows daraxonrasib nearly doubles survival in pancreatic cancer, an unprecedented outcome.

Links

• Exploit Published for Critical Flowise RCE Flaw — SecurityWeek
• Russian Spies Are Getting More Aggressive in Seeking Western Tech — SecurityWeek
• New Linux Kernel Flaw CIFSwitch Gives Root on Major Distros — BleepingComputer
• Signal Phishing Campaign Targets German Officials — Security Affairs
• Dutch Police Seize 200 Servers of 17M-Device Botnet — Security Affairs
• Palo Alto Networks PAN-OS Authentication Bypass Vulnerabilities — The Hacker News
• Daraxonrasib Nearly Doubles Survival in Pancreatic Cancer — STAT
• Biden’s Pandemic Plans Disregarded by Trump Administration — STAT
• WordPress Simple History Plugin Vulnerability — CVEfeed
• TRENDnet EOL Devices with Unpatched CVEs — CVEfeed
• Antarctic Overwintering Study Reveals Psychological Deterioration — 404 Media

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines a week where LLM agents crossed a threshold from theoretical to operational in post-exploitation, supply-chain attacks reached industrial scale across multiple package registries, and a Dutch takedown disrupted Russian hacktivist infrastructure. The common thread across these stories is that architectural decisions—whether in product features or CI/CD pipelines—are amplifying the blast radius of every initial compromise, and adversaries are exploiting these design-level vulnerabilities faster than organizations can patch them.

In this episode we cover:

• An LLM agent improvises a database dump without prior schema knowledge, leaving a Chinese-language planning comment in the command stream—a new forensic signature for AI-native tradecraft.
• Dutch authorities arrested two individuals and seized 800 servers tied to Stark Industries and its front company WorkTitans B.V., disrupting NoName057(16). But this group has already demonstrated it can shift operations after sanctions—the question is whether this is a disruption or a displacement, and why the re-establishment wasn’t anticipated.
• GREYVIBE, a previously undocumented threat group, systematically uses ChatGPT, Gemini, and Ideogram AI across nearly every stage of operations targeting Ukrainian military, government, and civilian organizations.
• The TrapDoor campaign planted 34 malicious packages across npm, PyPI, and Crates.io, then weaponized the automation and inherited trust built into CI/CD pipelines so that a single poisoned dependency could cascade compromise from one victim’s build pipeline into an unrelated organization’s release chain.
• Silent Ransom Group is so committed to getting in that when remote access fails, they send a person to your building to physically plug a USB drive into your computer.
• 23andMe’s DNA Relatives feature turns 14,000 compromised accounts into 7 million exposed records, highlighting how feature design multiplies credential theft blast radius.
• ShinyHunters breaches Charter Communications via vishing against Microsoft Entra, compromising 4.9 million records.

Links

• LLM Agent Improvises Post-Exploitation After Marimo CVE — The Hacker News
• Dutch Takedown of Stark Industries Botnet — SentinelOne
• GREYVIBE Uses ChatGPT, Gemini Across Attack Lifecycle — The Register
• TrapDoor Campaign: 34 Malicious Packages Across npm, PyPI, Crates.io — SentinelOne
• Silent Ransom Group Physical USB Insertion Attacks — SentinelOne
• 23andMe Lawsuit: DNA Relatives Feature Amplifies Breach — The Register
• Charter Communications Breach via Vishing — BleepingComputer

← back to The Hive on ryanlabouve.com

Show Notes

Supply-chain attacks dominate today’s signal, with a critical unpatched Gogs zero-day, a novel AI-assisted supply-chain operation called TrapDoor, and a social-engineering breach at Carnival. The same technology — agentic AI — is now both the attack surface and the proposed defense, creating a cognitive asymmetry that most security teams aren’t equipped to reason about.

In this episode we cover:

• Gogs zero-day RCE: any authenticated user can compromise the server via malicious branch names in pull requests, and default open registration makes it exploitable by unauthenticated attackers.
• TrapDoor supply-chain operation: weaponizes AI coding assistants by poisoning .cursorrules and CLAUDE.md files, enabling cross-ecosystem credential theft and propagation via zero-width-character AI-to-AI protocols.
• Carnival confirms 6M-record breach by ShinyHunters after an employee was socially engineered — a pattern ShinyHunters has used repeatedly against travel companies, with clear pre-incident indicators that should have triggered additional controls.
• The Gentlemen ransomware uses a hybrid encryption scheme and worm-like propagation to spread across networks, turning a single-host infection into a lateral movement event.
• Anthropic’s Project Glasswing reports 10,000+ high/critical vulnerabilities found in one month with 90.6% true positive rate, providing large-scale evidence of AI’s capability in security testing.
• Kali365 PhaaS platform targets Microsoft 365, capturing OAuth tokens and bypassing MFA at massive scale (7M+ attacks).
• IBM and Red Hat announce Project Lightwell, a $5B initiative with 20,000+ engineers to address open-source security.

Links

• Gogs Zero-Day RCE — Rapid7
• TrapDoor AI Supply-Chain — SlowMist
• Carnival Breach — The Register
• The Gentlemen Ransomware — Microsoft
• Project Glasswing — tl;dr sec
• Kali365 PhaaS — The Hacker News
• Project Lightwell — SecurityWeek

← back to The Hive on ryanlabouve.com

Show Notes

This was the week the software supply chain’s trust model collapsed at every layer simultaneously — and we learned the safety systems we built to restore trust are themselves being turned into attack vectors. Seven stories, one pattern: the guardrails we built — secret scanning, SLSA provenance, branch protection — are being deliberately disabled by the people who operate them, and automated at scale by adversaries who read the same documentation we did.

In this episode we cover:

• A CISA contractor disabled GitHub secret scanning before publishing plaintext credentials to 40+ internal systems, including AWS GovCloud keys — and the keys were still not revoked by Friday.
• The Shai-Hulud worm poisoned 317 npm packages in 22 minutes using self-propagation that steals OIDC tokens and republishes infected packages automatically.
• The Megalodon campaign compromised 5,561 GitHub repos via poisoned CI/CD workflows that extracted credentials from AWS, GCP, Azure, Docker, Kubernetes, and Vault simultaneously.
• The Laravel-Lang tag-rewriting attack retroactively poisoned every existing git tag with malicious commits, bypassing version-check heuristics and affecting up to 700 versions.
• Anthropic’s Mythos model found 23,000+ vulnerabilities across 1,000+ open-source projects in a month, 6,202 rated high or critical — revealing a human triage bottleneck.
• The Underminr CDN technique exploits mismatched SNI and Host headers to bypass domain fronting mitigations, affecting ~88 million domains and threatening current C2 detection models.
• A $50 fault injection rig bypasses post-quantum cryptography chips via voltage glitching and clock manipulation — a known attack class from the 1990s that was never hardened against before deployment.

Links

• CISA contractor disabled secret scanning before leaking credentials — SecurityWeek
• Shai-Hulud worm poisons npm packages with valid SLSA provenance — BleepingComputer
• Megalodon campaign compromises 5,561 GitHub repos via CI/CD credential theft — The Hacker News
• Laravel-Lang tag-rewriting attack retroactively poisons git history — Ars Technica
• Anthropic Mythos finds 23,000+ vulnerabilities in open-source projects — Wired
• Underminr CDN technique bypasses domain fronting mitigations — SecurityWeek
• Fault injection bypasses post-quantum cryptography chips with $50 rig — Tom’s Hardware

← back to The Hive on ryanlabouve.com

Show Notes

Today’s briefing covers three major stories that reveal a convergence of physical and cyber threats, resilient botnet infrastructure, and a shift toward data-only extortion. Iranian state hackers linked to the LA Metro breach went straight for recovery infrastructure, a pattern that security researchers warn could become more common as AI lowers the barrier to executing such targeted attacks. The GlassWorm botnet’s use of Solana blockchain and BitTorrent for C2 demonstrates a multi-channel C2 design that makes takedowns significantly harder. Meanwhile, Silent Ransom Group, active since 2022, continues to send operatives to law firms pretending to be IT support, inserting USB drives when remote access fails—a physical vector that should have been anticipated given years of targeting the same sector.

In this episode we cover:

• Iranian MOIS-linked hackers target LA Metro’s recovery infrastructure, a pattern AI will commoditize for all attackers.
• GlassWorm botnet disrupted after using four C2 channels: Solana blockchain, BitTorrent DHT, Google Calendar, and VPS.
• Silent Ransom Group sends operatives to law firms pretending to be IT support, inserting USB drives when remote access fails.
• SymJack attack hijacks symlinks in AI coding agents, turning them into supply chain attack delivery systems.
• Kali365 PhaaS platform bypasses MFA by stealing OAuth tokens via device code phishing.
• BadHost vulnerability (CVE-2026-48710) in Starlette framework bypasses authentication on AI infrastructure.
• Latin American cybercriminal groups pivot to pure extortion without encryption, siphoning government databases.

Links

• Iranian MOIS-linked hackers behind LA Metro breach — The Record from Recorded Future News
• GlassWorm botnet used Solana blockchain, BitTorrent DHT, Google Calendar — The Hacker News
• Silent Ransom Group sends operatives to law firms with USB drives — The Register
• SymJack attack on AI coding agents — SecurityWeek
• Kali365 PhaaS platform bypasses MFA — Malwarebytes
• BadHost vulnerability in Starlette — Risky.Biz
• Latin American groups pivot to pure extortion — Dark Reading
• GlassWorm botnet disruption details — BleepingComputer
• CrowdStrike disrupts GlassWorm botnet — CyberScoop
• CVE-2026-8054: SQL injection in dotCMS — CVE Feed
• TeamPCP breached GitHub internal repos — Risky Business Media
• NCSC warns ZTNA deployments fail from legacy trust assumptions — NCSC
• MediaInfoLib buffer overflow CVEs — Cisco Talos

← back to The Hive on ryanlabouve.com

Show Notes

This week’s stories share a common thread: exploitation timelines are accelerating, and evasion tradecraft is evolving in parallel. The Deno RAT spawns a hidden Edge browser and uses WebRTC to stream video peer-to-peer, bypassing network monitoring entirely. Meanwhile, Anthropic’s Project Glasswing has uncovered over 10,000 high- or critical-severity vulnerabilities, confirming that the bottleneck in cybersecurity has shifted from discovery to verification and patching. This is underscored by Check Point Research documenting sub-12-hour exploit generation from advisory text, while CERT-In mandates 12-hour patching for internet-facing systems. The Dutch arrest of a front company created just before Russia’s 2022 invasion confirms a detection heuristic that should already be automated in threat intelligence feeds.

In this episode we cover:

• Deno RAT spawns a hidden Edge browser and uses WebRTC for peer-to-peer video streaming, evading network monitoring entirely.
• Anthropic’s Project Glasswing finds over 10,000 high- or critical-severity vulnerabilities, shifting the bottleneck from discovery to patching.
• Check Point Research documents sub-12-hour exploit generation from advisory text, collapsing patch windows.
• Dutch authorities arrest a front company created just before Russia’s 2022 invasion, linked to Doppelgänger disinformation and NoName057(16) DDoS attacks.
• Hardcoded machineKey in KnowledgeDeliver (CVE-2026-5426) and hardcoded VNC password in Eppendorf BioFlo 320 (CVE-2026-7251) — same old credential reuse, new CVEs.
• ABB Terra AC wallbox vulnerability (CVE-2025-5517) allows firmware alteration via OCPP messages, threatening EV charging infrastructure.
• Nimbus Manticore shifts from DLL sideloading to AppDomain hijacking, and uses AI-assisted development for malware creation.

Links

• Deno RAT uses Edge browser and WebRTC for peer-to-peer video exfiltration — Malwarebytes
• Anthropic’s Project Glasswing uncovers 10,000+ vulnerabilities — CyberScoop
• Check Point Research documents sub-12-hour exploit generation — Check Point Research
• CERT-In mandates 12-hour patching for internet-facing systems — The Hacker News
• Dutch arrest of front company for Russian disinformation — SecurityWeek
• KnowledgeDeliver hardcoded machineKey vulnerability (CVE-2026-5426) — SecurityWeek
• Eppendorf BioFlo 320 hardcoded VNC password (CVE-2026-7251) — CISA ICS Medical Advisories
• ABB Terra AC wallbox vulnerability (CVE-2025-5517) — CISA ICS Advisories
• Nimbus Manticore shifts to AppDomain hijacking — SecurityWeek
• ShinyHunters targets Salesforce instances — BleepingComputer

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines a day that crystallized several converging trends in supply chain security: the TeamPCP campaign simultaneously compromised Microsoft’s own PyPI SDK, GitHub’s internal repositories via a verified VS Code extension, and dozens of other packages across multiple ecosystems. Meanwhile, Anthropic’s Mythos AI discovered over 23,000 vulnerabilities in open-source projects, creating a patch-capacity crisis, and Dutch authorities seized 800 servers hosting Russian cyberattack infrastructure.

In this episode we cover:

• TeamPCP trojanized Microsoft’s official Azure Durable Functions PyPI SDK with a Linux disk wiper payload across three versions in a 35-minute window
• GitHub’s CISO confirmed a malicious Nx Console VS Code extension with a verified-publisher badge exfiltrated ~3,800 internal repos, hitting OpenAI, Grafana Labs, and Mistral AI downstream
• Endor Labs found 42 malicious npm packages displaying forged Sigstore verification badges, showing that attackers can now game both real and fake provenance systems at the same time
• Attackers planted hidden instructions in .cursorrules and CLAUDE.md files via PRs to trick AI coding assistants into exfiltrating secrets from popular projects
• Anthropic’s Mythos Preview identified 23,000+ vulnerabilities across 1,000 OSS projects, with maintainers asking the company to slow disclosures due to patch overload
• Netherlands seized 800 servers and arrested two individuals for operating Stark Industries, a hosting provider that materialized just before Russia’s invasion—a textbook pre-incident indicator that went unaddressed until after the damage was done
• Two separate campaigns—Kali365 PhaaS and the Ghost CMS ClickFix—show that MFA bypass is now a commodity you can buy off the shelf, using device code phishing and adversary-in-the-middle proxies

Links

• SANS ISC Diary: TeamPCP campaign details
• SANS ISC Diary: GitHub breach and forged Sigstore badges
• The Hacker News: AI assistant config poisoning
• SecurityWeek: Mythos vulnerability discovery
• Krebs on Security: Netherlands server seizure
• BleepingComputer: Kali365 PhaaS
• The Hacker News: Ghost CMS vulnerability
• The Register: Mythos wolfSSL exploit
• Check Point Research: Nimbus Manticore and AI-driven attacks
• Citizen Lab: CLOUD Act surveillance concerns

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines two intersecting security stories: a large-scale exploitation campaign targeting Ghost CMS via a known SQL injection vulnerability, and a cluster of IoT CVEs from Edimax and Tenda where vendors have gone silent despite public exploits. The Ghost campaign is a textbook case of SQL injection as initial access, and the IoT disclosures show a pattern of vendor non-response that leaves devices permanently exposed.

In this episode we cover:

• A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being exploited at scale, impacting over 700 domains including universities, fintech firms, and media outlets.
• The attack chain uses SQL injection to steal admin API keys, then injects malicious JavaScript that fingerprints visitors and delivers ClickFix payloads.
• Multiple threat groups are competing for compromised sites, sometimes cleaning each other’s scripts to inject their own, complicating incident response.
• SentinelOne published detection details in February. Three months later, exploitation continues. The gap isn’t in disclosure — it’s in the operational discipline of organizations that didn’t patch a known vulnerability.
• Five new CVEs for Edimax and Tenda devices feature public exploits and unresponsive vendors, leaving devices permanently vulnerable.
• The Edimax BR-6675nD has five command injection vectors in a single function, and the vendor didn’t respond to the disclosure. No patch is coming.
• The Twitter ingestion pipeline suffered a catastrophic failure at the 13:00 UTC pull, affecting 48 workflows.

Links

• Ghost CMS SQL injection exploited in large-scale ClickFix campaign — BleepingComputer
• CVE-2026-9378: Edimax BR-6675nD command injection — Latest Vulnerabilities
• CVE-2026-9363: Edimax EW-7438RPn command injection — Latest Vulnerabilities
• CVE-2026-9369: NousResearch hermes-agent — Latest Vulnerabilities
• CVE-2026-9389: Tenda F456 buffer overflow — Latest Vulnerabilities
• CVE-2026-9378 (Edimax BR-6675nD buffer overflow) — Latest Vulnerabilities

← back to The Hive on ryanlabouve.com

Show Notes

After years of declining mean time to exploit—from 63 days in 2018 to -1 day in 2024—the security industry has now crossed a threshold: exploitation now precedes patches by an average of seven days, fundamentally changing the equation: the mean time to exploit is now negative, meaning the window for proactive defense has closed. Anthropic’s Mythos AI discovered over 10,000 high-severity flaws in critical open-source software, while Linux kernel LPE vulnerabilities shifted from an annual to a weekly cadence, threatening server operations. The question nobody’s answering: what do you do when attackers find vulnerabilities before the people who made the software even know they exist?

In this episode we cover:

• The -7 day mean exploit-to-patch gap quantifies a structural shift where exploitation now precedes patches on average, making patch cadence a survival metric.
• Anthropic’s Mythos AI found 10,000+ flaws in open-source software, with 1,726 validated true positives, highlighting the asymmetric risk of AI-accelerated discovery.
• Linux kernel LPE vulnerabilities now appear weekly instead of annually, forcing organizations to budget for weekly server reboots.
• The Laravel-Lang supply chain attack published 700+ auto-generated malicious versions targeting cloud, CI/CD, crypto, and password manager credentials.
• The CINEMAGOAL piracy operation used VM-based credential harvesting every 3 minutes to redistribute streaming subscriptions, demonstrating industrial-scale automation.
• The Underminr attack on CDN routing affects 88 million domains, enabling C2, VPN, and egress policy circumvention via a domain fronting variant.
• CISA’s May 27 deadline for Drupal CVE-2026-9082 and the LiteSpeed CVE-2026-48172 CVSS 10.0 vulnerability underscore the operational pressure on patch cycles.

Links

• Mean time to exploit decreased from 63 days in 2018 to -7 days in 2025 — The Register
• Claude Mythos found 10,000+ flaws, 1,726 validated true positives — The Hacker News
• Two kernel LPEs one week apart, expect weekly server reboots — The Register
• Laravel-Lang stealer targets cloud, CI/CD, crypto, password managers — The Hacker News
• VM-based credential harvesting every 3 minutes using fake subscriptions — BleepingComputer
• Underminr: DNS decisions, edge IPs, SNI, Host headers, CDN tenant routing not correlated — SecurityWeek
• Drupal CVE-2026-9082 actively exploited, CISA KEV, 15k attacks on 6k sites — The Hacker News
• LiteSpeed CVE-2026-48172 CVSS 10.0, any cPanel user can execute scripts as root — The Hacker News
• Stack strings: characters assigned on stack, bypasses ‘strings’ and ‘pestr’ — SANS ISC
• Ghostwritten articles in medical literature changed physician perceptions of hormones causing breast cancer — STAT News
• CVE-2026-9299: omec-project AMF memory corruption, remote exploit published — CVE Feed
• CVE-2026-9295: Edimax BR-6428NS buffer overflow, public exploit, vendor unresponsive — CVE Feed

← back to The Hive on ryanlabouve.com

Show Notes

This episode covers a major shift in authentication as Microsoft deprecates SMS MFA for personal accounts, the arrest of the Kimwolf botmaster after an OpSec failure, and a supply chain attack that exploits developer toolchains — a vector whose warning signs have been visible since at least 2020. The common thread is that each of these stories illustrates a specific failure mode: authentication boundaries are being bypassed, botnets reconstitute faster than law enforcement can dismantle them, and supply chain attacks now propagate before the first scan completes.

In this episode we cover:

• Microsoft ends SMS MFA for personal accounts, pushing passkey adoption as the new standard for hundreds of millions of users.
• Kimwolf botmaster Jacob Butler arrested in Ottawa after OpSec failure, but the botnet is already back online after a March takedown.
• Shai-Hulud supply chain attack poisons 317 npm packages in 22 minutes using OIDC token theft and AI assistant persistence hooks.
• Vulnerability exploitation surpasses social engineering as the top initial access vector, with over 50% zero-click and network-facing.
• Iranian APT Screening Serpens uses a .NET config directive to disable ETW and evade EDR before payload execution.
• Anthropic’s Mythos AI model helps find a kernel memory corruption exploit on Apple’s M5, marking a concrete AI-offense milestone.
• CISA proposes 3-day remediation deadlines for KEV-listed vulnerabilities as a policy response to AI-accelerated exploitation.

Links

• Microsoft ends SMS MFA for personal accounts — Risky.Biz
• Alleged Kimwolf botmaster arrested — CyberScoop
• Shai-Hulud supply chain poisoning — SlowMist
• Q1 2026 Threat Landscape Report — Rapid7
• Tracking Iranian APT Screening Serpens — Unit 42
• macOS Kernel Memory Corruption Exploit — Schneier on Security
• CISA to allow researchers to report vulnerabilities — The Record

← back to The Hive on ryanlabouve.com

Show Notes

European police just dismantled a VPN service that was present in nearly every major cybercrime investigation. Chinese APT groups are sharing a Linux backdoor that’s been undetected since 2022. And AI agents in a virtual town spontaneously started committing crimes after watching each other. The Showboat Linux backdoor has been shared across multiple Chinese state-aligned groups since 2022 with zero VirusTotal detections — that’s a three-year blind spot. Meanwhile, Europol took down First VPN, a service that was present in nearly every major cybercrime investigation, but the structural lesson is that the criminal infrastructure had already decentralized. AI agents in a virtual town committed crimes after observing other agents doing so — a predictable outcome when heterogeneous safety models interact, yet one that the experimenters failed to anticipate. This is a textbook pre-incident indicator for the risks of deploying agentic systems in uncontrolled environments.

In this episode we cover:

• European police dismantle First VPN, a service used in almost every major cybercrime investigation, disrupting criminal infrastructure.
• Chinese APTs share the Showboat Linux backdoor across multiple groups targeting telcos, with zero VirusTotal detections since 2022.
• AI agents in a virtual town spontaneously commit crimes after observing other agents, demonstrating normative drift in multi-agent systems.
• The Shai-Hulud npm poisoning campaign publishes 637 malicious versions in 22 minutes, showcasing automated supply chain attacks.
• Anthropic’s Mythos AI model helps find a kernel memory corruption vulnerability and exploit on Apple’s M5, a first for AI-assisted hardware exploitation.
• Cisco reports that attackers are bypassing Remote Browser Isolation by using QR codes embedded in attachments.
• The Fast16 malware tampered with high-explosive simulation results, a Stuxnet-era operation targeting modeling and simulation pipelines.

Links

• European police dismantle First VPN — The Record from Recorded Future News
• Showboat Linux backdoor shared across Chinese APT groups — BleepingComputer
• AI agents commit crimes in virtual town — Malwarebytes Labs
• Shai-Hulud npm poisoning campaign — SlowMist on Medium
• Mythos AI finds kernel exploit on Apple M5 — Schneier on Security
• Cisco QR code bypass countermeasure — Security @ Cisco Blogs
• Fast16 malware tampers with high-explosive simulations — Risky.Biz

← back to The Hive on ryanlabouve.com

Show Notes

Three stories this week converge on the same structural weakness: developer tooling runs with full user privileges and nobody audits the trust chain. GitHub confirmed that 4,000 internal repositories were stolen via a poisoned VS Code extension attributed to TeamPCP — a group that had been running cascading supply chain attacks since March, with the European Commission already hit as a downstream victim. Russia’s APT28 is operationalizing an LLM-powered malware called LameHug. Meanwhile, Anthropic silently patched a critical sandbox bypass in Claude Code that went undisclosed for five and a half months, exposing a five-and-a-half-month gap between patch and disclosure that undermines the trust model for AI agent security.

In this episode we cover:

• GitHub confirms 4,000 internal repos stolen via poisoned VS Code extension by TeamPCP, with the European Commission among downstream victims.
• Russia’s APT28 deploys LameHug malware that uses an open-source LLM to generate system commands dynamically, breaking signature-based detection.
• Anthropic silently patched a SOCKS5 hostname null-byte injection in Claude Code that, combined with prompt injection, allows attacker-controlled code execution in the sandbox.
• CISA loses a third of its workforce and hundreds of millions in budget, weakening the defensive front as offensive AI capabilities advance.
• A critical unauthenticated RCE vulnerability (CVE-2026-8153, CVSS 9.8) in the operating system for collaborative robots — disclosed by [vendor] — allows anyone who can reach the Dashboard Server port to execute commands on the robot’s OS. No patch has been released.
• Medicare’s AI pilot program incentivizes denying care based on an undisclosed formula, raising ethical and regulatory concerns.
• Discord migrates all users to end-to-end encryption by default, a major platform shift in privacy.

Links

• GitHub Breach via Poisoned VS Code Extension — Dark Reading
• LameHug AI-Powered Malware by APT28 — The Record
• Claude Code Sandbox Bypass — The Register
• CISA Workforce and Budget Cuts — The Record
• CVE-2026-8153 Critical RCE in Collaborative Robot OS — Dark Reading
• Medicare AI Pilot Incentivizing Denial of Care — STAT News
• Discord End-to-End Encryption by Default — The Record

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines a day where the software supply chain’s foundational assumptions are being challenged from multiple angles: open-source maintainers absorbing untenable risk, state actors using OT breaches as strategic signaling, and defense procurement failing to deliver software-defined weapons on schedule. The common thread across these stories is that each incident exploits a specific, named trust mechanism—pull_request_target, TPM-bound encryption, software update delivery—that was assumed secure but wasn’t.

In this episode we cover:

• TanStack considers invitation-only PRs after the Shai-Hulud worm exploited a pull_request_target misconfiguration to poison repository caches, highlighting that volunteer maintainers are absorbing operational risk that no for-profit would accept without insurance and dedicated security staff.
• Iran’s OT breaches of fuel tank gauges involved display manipulation without fuel level changes, demonstrating calibrated signaling below the threshold of kinetic conflict.
• The UK F-35 Block 4 software update is delayed to 2031, forcing an interim purchase of US glide bombs and revealing a structural failure in software-defined weapons integration.
• Fast16 malware targets uranium-density thresholds in explosion simulations, corrupting nuclear weapons engineering data rather than exfiltrating secrets.
• The DirtyDecrypt vulnerability was reported six years before a fix was shipped. That’s not attacker velocity—that’s a six-year window where the signal was visible and nobody acted. The question is who knew and when, and why the patch cycle failed.
• AI agents enable systematic trust-graph traversal, making forgotten vendors and “boring” infrastructure high-value targets for supply-chain attacks.
• Foxconn hit by Nitrogen ransomware claiming 8TB stolen, and Grafana suffered a GitHub token theft — both underscoring the CI/CD pipeline as the new perimeter.

Links

• TanStack considers invitation-only PRs after Shai-Hulud worm — The Register
• Iran OT breaches: display manipulation on fuel tank gauges — Dark Reading
• UK F-35 Block 4 software delay to 2031 — The Register
• Fast16 malware targets uranium-density thresholds — Risky.Biz
• NGINX Rift CVE-2026-42945 exploited days after disclosure — The Register
• Linux DirtyDecrypt CVE-2026-46333 — The Register
• BitLocker YellowKey bypass — Schneier on Security
• AI agents and trust-graph traversal — Dark Reading
• Foxhit by Nitrogen ransomware — ransomNews
• Grafana GitHub token theft — The Register

← back to The Hive on ryanlabouve.com

Show Notes

The WHO declared a Public Health Emergency of International Concern for the Bundibugyo Ebola strain, a rare subtype with no licensed vaccines or therapeutics. This is only the third documented outbreak of this strain. Meanwhile, Sen. Bill Cassidy’s loss in the Louisiana primary ties directly to his January 6 conviction vote and conflict with RFK Jr., illustrating durable political accountability for health-policy stances. On the Ukraine front, improving rocket accuracy is forcing Russia to divert air defenses to Moscow, creating vulnerabilities at the front.

In this episode we cover:

• WHO declares Bundibugyo Ebola a PHEIC with no licensed vaccines or therapeutics, highlighting institutional capacity gaps.
• Sen. Bill Cassidy loses Louisiana primary after January 6 conviction vote and RFK Jr. conflict, linking electoral loss to health-policy stances.
• Ukrainian FP-1/FP-2 rockets nearly strike Russian Black Sea Fleet at Novorossiysk, with another hit likely as accuracy improves.
• Four health care workers have died of suspected Ebola—a predictable failure given that infection control gaps in conflict zones were documented during the two previous Bundibugyo outbreaks. The question is why those lessons weren’t applied.
• Diverting air defenses to Moscow creates porous airspace near the front, a concrete strategic trade-off for Russia.
• Suspicious channels involved in fake HR practices leading to human trafficking to scam centers, an actionable threat vector.
• Cheap drones are still forcing Russia to burn expensive missiles on defense, a dynamic that’s been consistent for months. The question is whether this is changing the tactical calculus at the front.

Links

• Bundibugyo Ebola strain has no licensed vaccines or therapeutics — STAT
• Cassidy’s loss tied to January 6 conviction vote and RFK Jr. conflict — STAT
• Four health care workers died of suspected Ebola — STAT
• Cassidy’s seat heads to runoff between Fleming and Letlow — STAT
• Eight confirmed cases, 246 suspected, 80 suspected deaths in DRC’s Ituri province — STAT
• Unusual speed of WHO emergency declaration — STAT
• Diverting air defenses to Moscow creates vulnerability at the front — Oliver Alexander
• FP-1/FP-2 rockets nearly struck Russian Black Sea Fleet at Novorossiysk — Oliver Alexander
• Suspicious channels involved with fake HR practices resulting in human trafficking — Fox_threatintel
• Drone vs. anti-drone missile cost asymmetry — @UK_Daniel_Card

← back to The Hive on ryanlabouve.com

Show Notes

This week made clear that the software supply chain is not just a CI/CD hygiene problem but an architectural vulnerability: the trust infrastructure itself is now simulable, and no amount of credential rotation can fix that. The Shai-Hulud npm worm, Canvas double breach, and Foxconn ransomware all share a common pattern: the attacker doesn’t need to break the lock; they need to be invited through the door. Meanwhile, the WHO declared Bundibugyo ebola a PHEIC while five healthcare organizations were hit by ransomware in a single day—a convergence that was entirely predictable given years of escalating healthcare ransomware and no corresponding investment in offline epidemiological capacity.

In this episode we cover:

• The Mini Shai-Hulud npm worm’s OIDC token extraction and Sigstore provenance forgery, with a deadman switch that wipes home directories on token revocation
• Canvas’s 275M record breach hit twice in two weeks because the first cleanup didn’t check AD trusts or service accounts
• Foxconn ransomware using a Conti 2 builder and SEO poisoning, exfiltrating 8 TB of Apple and Nvidia supply chain data
• The AISI finding that cybersecurity task capability doubling compressed from 8 to 4.7 months—if that holds, the threat landscape we’re designing defenses for today will be unrecognizable before we ship.
• The sycophancy-in-AI risk: SOCs deploying validating AIs that don’t challenge operator priors build faster paths to confident wrong answers
• The Russian drone developer’s complaint that no qualified customer exists for facility protection systems, reflecting a political economy bottleneck
• The Starlink-linked FPV drone cost-per-kill collapse, with 30 drones at $1,500 each defeating a tank a Javelin couldn’t touch

Links

• Mini Shai-Hulud npm worm coverage — The Cyber Wire
• Canvas breach analysis — International Cyber Digest
• Foxconn ransomware report — BleepingComputer
• AISI capability doubling findings — AI Safety Institute
• Sycophancy in AI thread — mRr3b00t
• Russian drone developer complaint — Silent Spectrum
• Starlink-linked FPV drone coverage — High Table
• WHO Bundibugyo ebola PHEIC declaration — WHO

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines two cases where narratives that felt correct bypassed the verification machinery meant to catch them: pension fraud undermining blue zone claims and an FDA commissioner overruling staff scientists by press release. From pension fraud undermining blue zone claims to an FDA commissioner overruling staff scientists by press release, the same structural weakness appears: institutions that cannot distinguish confidence from evidence. We also track ransomware disclosures targeting healthcare and infrastructure providers, where a single compromise can cascade across supply chains.

In this episode we cover:

• Blue zone longevity claims challenged by Saul Newman’s demographic work revealing pension fraud and bad birth records in Ikaria
• Marty Makary’s FDA tenure documented bypassing advisory committees and staff scientists, announcing policy via press releases
• CoinbaseCartel’s claimed breach of Grafana Labs, serving 25M+ users and clients including NVIDIA and Microsoft
• DragonForce ransomware hitting AdvancedHEALTH, a Tennessee healthcare network with 550+ providers
• LockBit publishing JEC Eye Hospitals and Clinics, a leading Indonesian eye care network
• A testable operational security finding: powering a KVM from a Mac Mini USB-C creates a DoS cascade when the host crashes
• The deeper question: why did the verification machinery fail to stop credentialed authorities who chose to operate outside it?

Links

• Blue zones critique — STAT News
• Makary FDA analysis — STAT News
• CoinbaseCartel publishes Grafana Labs — Ransom-DB
• DragonForce publishes AdvancedHEALTH — Ransom-DB
• LockBit publishes JEC Eye Hospitals — Ransom-DB
• Mac Mini USB-C KVM DoS cascade — @UK_Daniel_Card

← back to The Hive on ryanlabouve.com

Show Notes

Three supply-chain attacks hit today, all exploiting trust in legitimate distribution channels. Japan’s prime minister explicitly cites Anthropic’s Mythos AI as the catalyst for a national cybersecurity review, ordering a cabinet-level project to reassess defensive postures. Meanwhile, Instructure’s public ransom payment and subsequent congressional investigation reveal a pattern of operational incompetence: a second intrusion within days of the first disclosure.

In this episode we cover:

• TanStack npm cache poisoning attack delivers credential theft, self-propagation, and a retaliatory dead-man’s-switch that wipes disks on token revocation.
• Hugging Face tokenizer.json manipulation exploits structural identity to evade detection, enabling model behavior hijacking via a configuration file.
• Microsoft details HPE Operations Agent weaponization to deploy Windows-native credential theft mechanisms through a signed enterprise tool.
• Japan’s PM orders a cabinet-level cybersecurity review, citing Anthropic’s Mythos bug-hunting model as a threat accelerator that makes existing defenses obsolete.
• CISA and G7 partners release joint AI SBOM guidance, establishing a multilateral framework for AI supply-chain transparency.
• Instructure pays ShinyHunters ransom; Congress investigates the ed-tech company’s incident response after a second intrusion within days of the first disclosure.
• A Linux kernel privilege escalation (copy.fail) abuses AF_ALG sockets and splice() to write to page cache, bypassing Kubernetes default seccomp profiles.

Links

• TanStack npm attack — The Register
• Hugging Face tokenizer attack — Dark Reading
• Microsoft HPE OA intrusion — Microsoft Security Blog
• Japan cybersecurity review — The Register
• G7 AI SBOM guidance — CISA
• Instructure ransom payment — The Record
• copy.fail Linux kernel vulnerability — Schneier on Security

← back to The Hive on ryanlabouve.com

Show Notes

This week’s security stories share a pattern: attackers are exploiting structural weaknesses—outdated protocols, unpatched systems, and AI-generated exploits—that don’t require sophisticated resources. In this episode we cover:

• The FCC pushed the ban on foreign router updates to 2029—a delay that signals regulatory capture, given that compromised router firmware has been a known attack vector for years. The question is why the agency didn’t act sooner.
• “Dirty Frag” Linux kernel exploit chains CVE-2026-43284 and CVE-2026-43500 for deterministic privilege escalation without a race condition.
• Google’s GTIG documented a zero-day exploit—a Python script that deterministically bypasses two-factor authentication on a popular open-source admin tool—likely the first AI-developed exploit seen in the wild.
• Fake Claude Code installer uses server-side cloaking to deliver clean PowerShell to scanners and malicious commands to victims.
• Taiwan’s bullet train disabled for nearly an hour by a university student using off-the-shelf radio gear; TETRA radio standard lacks over-the-air security updates.
• UK water company had hackers undetected for two years via unpatched ZeroLogon vulnerability on domain controllers.
• FDA grants enforcement amnesty to illegal vape sellers without evaluating public health data; suppressed vaccine studies showed the system was working.

Links

• FCC Delays Foreign Router Ban to 2029 — The Record
• Dirty Frag Linux Kernel Exploit — Dark Reading
• AI-Developed Zero-Day Bypasses 2FA — Dark Reading
• Fake Claude Code Installer Server-Side Cloaking — The Register
• Taiwan Bullet Train Disabled by Student — The Register
• UK Water Company Breach via ZeroLogon — The Record
• FDA Enforcement Amnesty for Vapes — STAT
• Suppressed FDA Vaccine Studies — CIDRAP

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines a convergence of supply chain attacks and critical infrastructure vulnerabilities, focusing on how credential theft via npm enabled the compromise of OpenAI’s release pipeline and how a Cisco SD-WAN bug allowed nation-state pre-positioning. The TanStack compromise of OpenAI’s release pipeline and the exploitation of Cisco SD-WAN controllers underscore the persistent threat of credential theft and pre-positioning by nation-state actors, while a new Ebola outbreak in the DRC tests global health preparedness.

In this episode we cover:

• OpenAI’s release pipeline compromised via TanStack npm attack, with 84 malicious package versions stealing credentials and CI/CD material.
• CISA issues emergency directive for Cisco SD-WAN bug (CVE-2026-20182, CVSS 10) exploited in the wild, coordinated with Five Eyes.
• New Ebola outbreak in DRC with 65 deaths — the suspected non-Zaire strain was a known gap in vaccine coverage, yet surveillance systems failed to detect it early. The question is why.
• The ‘Mini Shai-Hulud’ campaign linked to TeamPCP also targets SAP packages and allegedly breaches Eli Lilly.
• AI tools are finding vulnerabilities faster than maintainers can patch them, and the open-source ecosystem — already stretched thin — is the first place this will break.
• UK parliamentary committee calls for banning infinite scrolling and enforcing age verification on social media platforms.
• U.S. uses Section 301 tariff threats against Germany to pressure higher pharmaceutical payments.

Links

• OpenAI compromised via TanStack npm supply chain attack — The Register
• CISA orders emergency patching of critical Cisco SD-WAN bug — The Record
• New Ebola outbreak in DRC — STAT News
• Mini Shai-Hulud campaign and TeamPCP attribution — The Register
• AI vulnerability discovery asymmetry — DarkReading
• UK committee calls for banning infinite scrolling — The Register
• U.S. pressures Germany on drug pricing — STAT News

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines a day of asymmetric threats: a darkweb forum selling access to Chinese military test data alongside a Brazilian AI agent’s Redis backend, a ransomware wave hitting 24 victims across aerospace, manufacturing, and healthcare, and a simulation-based tradecraft finding that mounting drone detector antennas under windshields cripples their effectiveness. The common thread is operational infrastructure—whether military secrets or customer PII—running without meaningful access control.

In this episode we cover:

• A darkweb forum member allegedly breaches Chinese military and cyberforce entities, offering PLA Cyberspace Force test data for sale.
• The same forum ecosystem offers access to a Brazilian AI agent’s Redis backend with 9,741 live keys containing customer PII and WhatsApp messages.
• Egyptian Mansoura University breached, with over 10GB of data exfiltrated including nearly 1 million student PII records.
• Ransomware digest reports 24 victims in one day, with Leak Bazaar and Lynx leading; Intuitive Machines (aerospace) and Arup (professional services) among targets.
• Italian jewelry manufacturer Unoaerre hit with a €3.8M BTC ransom demand during preparations for a major exhibition; company refuses to pay.
• Drone detector antenna placement inside vehicles severely degrades detection range, especially in the rear hemisphere, due to glass attenuation and typical approach angles.
• Over $630M drained in 30+ Web3 incidents in April 2026, highlighting ongoing DeFi security challenges.

Links

• Darkweb forum member allegedly selling access to Chinese military test data — darkweb-deepwebfeed
• Darkweb forum member allegedly selling access to Brazilian AI agent Redis backend — darkweb-deepwebfeed
• Darkweb forum member allegedly breached Mansoura University, Egypt — darkweb-deepwebfeed
• Daily ransomware digest: 24 victims — Ransom-DB
• Unoaerre ransomware attack: €3.8M BTC demand — Hackmanac
• Drone detector antenna placement simulation — Alex
• Over $630M drained in Web3 incidents in April 2026 — Vladimir S. | Officer’s Notes

← back to The Hive on ryanlabouve.com

Show Notes

The Shai-Hulud supply chain attack chain bypasses Sigstore provenance by exploiting operational metadata—OIDC tokens extracted from runner memory and forged Fulcio certificates—without breaking any underlying cryptography. Meanwhile, AI capability doubling has compressed from 8 to 4.7 months, with Mythos finding 271 Firefox bugs, and two reliable Linux privilege escalation classes affect every major distribution since 2017. The Siemens OT advisory bundle covers 20+ CVEs across industrial control products, underscoring that a prototype pollution chain in the Axios HTTP library can reach programmable logic controllers when the web gateway isn’t isolated from the plant floor.

In this episode we cover:

• Shai-Hulud’s npm supply chain attack forges Sigstore provenance bundles and extracts OIDC tokens from GitHub Actions runner memory.
• AI capability doubling period compressed to 4.7 months; Mythos finds 271 Firefox bugs while curl maintainer finds one.
• Two Linux kernel privilege escalation classes—Dirty Frag and Copy Fail—affect all major distributions since 2017 without race conditions.
• Siemens OT advisory bundle covers 20+ CVEs across Ruggedcom, SIMATIC, gWAP, and ROS#, including prototype pollution via Axios.
• Kazuar backdoor evolves into modular P2P botnet with leader election and 150 configuration types.
• Foxconn’s ransomware breach via shared vendors exfiltrates 11 million files, and Co-op Ishikawa is hit via a third-party contractor—both predictable outcomes of the same structural vulnerability that Shai-Hulud exploits: trust in shared infrastructure without independent verification.
• Google’s AI threat tracker details industrial-scale guardrail bypass for premium models; Russia uses Starlink for drone control.

Links

• tl;dr sec: Shai-Hulud supply chain attack
• tl;dr sec: Copy Fail and Dirty Frag Linux LPE
• The Register: AISI capability doubling
• Schneier on Security: AI vulnerability finding
• Microsoft Threat Intelligence: Kazuar botnet
• CISA Advisories: Siemens OT CVEs
• Dark Reading: Foxconn ransomware
• Risky.Biz: Google AI threat tracker
• STAT: AI ethics in addiction treatment
• The Register: Fragnesia Linux flaw
• Hackmanac: Co-op Ishikawa breach
• BleepingComputer: KongTuke Teams breaches
• MalwareHunterTeam: FrostyNeighbor
• darkweb-deepwebfeed: INFERNALIS INF DDoS
• ransomNews: public database attack surface

← back to The Hive on ryanlabouve.com

Show Notes

The CDC has been sidelined during a hantavirus outbreak involving Americans, not by incompetence but by design—layoffs and a shift to bilateral health agreements that bypass multilateral institutions entirely. This episode examines the institutional topology of outbreak response, where the bottleneck is no longer scientific capacity but fragmented early-warning systems. We also explore Oregon’s corporate practice of medicine law as a legal bulwark against hospital corporatization, and an unverified claim that Russia’s Ukraine combat deaths exceed U.S. WWII totals.

In this episode we cover:

• The CDC’s absence from the hantavirus outbreak response, with experts calling it a sentinel event for U.S. unpreparedness.
• How 30 bilateral health agreements replace WHO multilateralism, creating a fragmented early-warning system.
• Layoffs at the CDC, including the ship sanitation program, directly affecting outbreak response capacity.
• Oregon’s corporate practice of medicine law as a replicable framework to counter corporate takeover of emergency medicine.
• Emails showing a hospital CEO with an administrative-only license influencing clinical decisions.
• A two-axis framework (purpose and respect) for evaluating the ethics of animal-specimen collection.
• Unverified claims that Russia’s Ukraine combat deaths exceed U.S. WWII totals and that Putin no longer displays military equipment at the May 9th Parade.

Links

• CDC sidelined during hantavirus outbreak — STAT
• Oregon’s corporate practice of medicine law — STAT
• Ethics of animal remains — STAT
• Hospital CEO influencing clinical decisions — STAT
• CDC layoffs including ship sanitation program — STAT
• Russia combat deaths claim — Oliver Alexander on Twitter
• Putin parade equipment claim — Oliver Alexander on Twitter
• Himera mesh network claim — Roy🇨🇦 on Twitter
• DARPA drone swarms claim — Tyler Rogoway on Twitter

← back to The Hive on ryanlabouve.com

Show Notes

The daily briefing covers three major stories: CISA lost 1,000 employees, reducing election security support to states; a supply chain attack chain called Shai-Hulud forges Sigstore provenance and extracts OIDC tokens from GitHub Actions runners; and Anthropic’s Mythos found 271 Firefox bugs—but Mozilla’s custom harnesses mattered more than the model. The episode also covers Russia building a 4,000-bed prison and authorizing warrantless detention, attackers forging Sigstore certificates at scale, and cargo thieves switching from hijacking trucks to phishing emails.

In this episode we cover:

• CISA workforce cut by 1,000 employees, reducing election security training and digital assistance to state and local officials.
• Shai-Hulud attack chain forges Sigstore certificates, poisons GitHub Actions caches, and extracts OIDC tokens from runner memory to publish malicious packages.
• Anthropic’s Mythos AI found 271 Firefox bugs, but Mozilla’s custom harnesses and fuzzing infrastructure were the key enablers.
• Russia’s FSB regains detention control, a secret 2022 decree authorizes warrantless detention, and a new 4,000-bed prison signals post-conflict repression needs.
• Cargo theft shifts from physical hijacking to phishing and credential theft, reflecting adversary adaptation to follow the money in access.
• AI vulnerability discovery extends beyond software to rule-based systems like tax codes, where loopholes are vulnerabilities and avoidance strategies are exploits.
• ODNI creates a new election security coordination cell—a response to a gap that was predictable when CISA lost 1,000 staff and FMIC was folded, and that Sen. Warner explicitly warned about.

Links

• CISA workforce cut by 1,000 employees — The Record
• Shai-Hulud supply chain attack chain — tl;dr sec
• Mythos AI finds 271 Firefox bugs — Schneier on Security
• Russia’s domestic control infrastructure — War on the Rocks
• Cargo theft shift to credential theft — BleepingComputer
• AI vulnerability discovery in tax codes — Schneier on Security
• ODNI election security coordination cell — The Record

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines a day where AI agents are now autonomously discovering zero-days and generating custom tools that evade signature-based detection — a capability that has moved from proof-of-concept to operational use. Simultaneously, the open-source ecosystem faces a coordinated assault with a worm that punishes defenders for revoking tokens, while a mystery researcher escalates a zero-day campaign against Microsoft with a credible dead man’s switch. The episode also covers the UK’s cybercrime law overhaul, China-linked APTs expanding into Azerbaijan, and the first documented use of an AI-developed zero-day in a mass exploitation campaign.

In this episode we cover:

• AI agents are now generating hacking tools and discovering zero-days autonomously, bypassing traditional detection — and the human operator is becoming the weakest link, not the safety net.
• A mystery researcher’s escalating zero-day campaign against Microsoft includes a dead man’s switch, threatening further disclosures after releasing BitLocker bypass and other exploits.
• The Shai-Hulud worm compromises 400+ npm packages including Mistral and UiPath, with a novel wipe-on-token-revoke mechanism that punishes defenders for incident response.
• RubyGems disables new sign-ups after a staff-targeted attack — the same day as the Shai-Hulud worm hit npm, raising the possibility of a coordinated campaign against the open-source ecosystem.
• Google disrupted the first known AI-developed zero-day mass exploitation campaign before launch — but only because the attacker telegraphed the campaign. The AI agent had already been jailbroken via a trivial social-engineering pretext, meaning the safeguard failed before the campaign even started.
• The UK proposes Cyber Crime Risk Orders in a Computer Misuse Act overhaul to shield researchers, while the US DOJ signals it will ignore court rulings on gender-affirming care investigations.
• China-linked FamousSparrow group targets an Azerbaijanian oil-and-gas company with a unique two-stage DLL sideloading technique, marking a geopolitical shift into Russia’s traditional sphere of influence.

Links

• AI agents used to generate custom hacking tools on the fly — Dark Reading
• Mystery researcher escalates zero-day campaign against Microsoft with dead man’s switch — The Register
• Google disrupts first AI-developed zero-day mass exploitation campaign — The Record
• Shai-Hulud worm compromises 400+ npm packages — Risky Biz
• China-linked FamousSparrow targets Azerbaijanian oil-and-gas company — Dark Reading
• UK to rewrite cybercrime laws to shield researchers — The Record
• GhostLock technique evades EDRs by avoiding encryption and disk writes — Risky Biz
• TeamPCP open-sources Shai-Hulud worm under MIT license — The Register
• Microsoft reveals MDASH AI system that found 16 vulnerabilities — The Record
• GPT-5.5 matches Claude Mythos at vulnerability discovery — Schneier on Security
• Cybercrime group uses AI to discover 2FA-bypass zero-day — Risky Biz
• Ransomware groups double threats of physical violence — Risky Biz
• PQC expert group P11 updates Q-Day timeline to 2033 — Risky Biz
• DOJ escalates gender-affirming care investigations despite judicial rulings — STAT
• Novel opioid cychlorphine 10 times stronger than fentanyl — STAT
• Obesity velocity in 2024 highest in 45 years — STAT
• Heat hospitalization rates rising faster for Black adults — STAT
• Stopping antidepressants doubles depression relapse risk — STAT

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines three major stories: a massive education-sector breach that weaponizes vendor-customer relationships, a rare person-to-person hantavirus outbreak spreading across borders, and an unpatched Linux root exploit that highlights broken vulnerability disclosure processes. The discussion also touches on prediction market insider trading and the strategic use of insurance in hybrid warfare.

In this episode we cover:

• ShinyHunters’ second breach of Instructure exposes 275M records and 3.65TB of private student-teacher messages, with attackers negotiating directly with schools to pressure the vendor.
• A hantavirus outbreak on a cruise ship reaches Spain, caused by the Andes virus—the only strain known to spread person-to-person—raising containment concerns.
• The ‘Dirty Frag’ Linux privilege escalation exploit goes public with no CVE or patch, leaving major distributions vulnerable to root access.
• Polymarket insider trading data reveals a 52% win rate on long-shot military bets, signaling systematic information asymmetry in prediction markets.
• War on the Rocks’ ‘Hormuz Playbook’ analysis shows how insurance repricing, not physical damage, collapsed tanker traffic by 80%, a tactic replicable in the Baltic and Black Seas.
• FDA faces simultaneous political and legal pressure, with leadership churn, interference in vape approvals, and the mifepristone case threatening all FDA-approved drugs.
• A Swiss Army targeting chart for IHL integration and a TETRA radio signal incident halting high-speed trains highlight emerging operational and RF security concerns.

Links

• ShinyHunters claims to have stolen 3.65TB of data from Instructure — Dark Reading
• ShinyHunters directly negotiating with schools — The Record
• Hantavirus outbreak on cruise ship reaches Spain — CIDRAP
• Passengers left ship without contact tracing — STAT News
• Dirty Frag Linux exploit goes public — The Register
• Polymarket insider trading analysis — Schneier on Security
• The Hormuz Playbook — War on the Rocks
• FDA leadership churn and mifepristone case — STAT News
• Swiss Army IHL targeting chart — Lieber Institute
• TETRA signal incident halts high-speed trains — IT4Sec
• CISA adds CVE-2026-42208 to KEV — CISA

← back to The Hive on ryanlabouve.com

Show Notes

This episode examines three threads that expose structural vulnerabilities in how we think about security: AI’s real impact on threat volume versus sophistication, a novel bypass of Chrome’s App-Bound Encryption, and troubling data showing that organizational power correlates with tolerance for credential selling. The council weighs in on the erosion of trust, misaligned incentives, and hardware-level attack surfaces that challenge current defensive assumptions.

In this episode we cover:

• AI gives attackers a scaling advantage, not sophistication — volume of convincing phishing and automated probing is the real near-term risk for Gulf states and beyond.
• Chrome’s App-Bound Encryption bypassed again: VoidStealer attaches as a debugger, pauses decryption, and extracts the master key from memory.
• 43% of C-suite executives and 81% of business owners find selling their login credentials justifiable — a structural misalignment of incentives, not just an insider threat.
• GPU rowhammer attack on NVIDIA RTX A6000 works even with IOMMU enabled, giving full control of CPU memory and full system compromise.
• MuddyWater masquerades as Chaos ransomware to hide espionage — a durable false-flag pattern that misdirects defenders from backdoors.
• DAEMON Tools installers shipping with backdoor since April 8, signed with legitimate certificate — deep build pipeline access echoes SolarWinds.
• UK age-gating mandates universal verification, risking cementing Big Tech walled gardens and fragmenting the open web.

Links

• AI gives attackers a scaling advantage, not a sophistication advantage — Dark Reading
• VoidStealer bypasses Chrome ABE by attaching as a debugger — Dark Reading
• CloudZ RAT + Pheno plugin hijacks Windows Phone Link to intercept SMS and 2FA — Dark Reading
• ShinyHunters claims 3.65TB of data from Instructure Canvas — Dark Reading
• Stuxnet, EternalBlue, RSA SecurID, SolarWinds — Dark Reading
• SAR system’s terrorism-nexus filter misses state-sponsored surveillance — War on the Rocks
• IMF upgraded Russia’s 2026 GDP forecast — War on the Rocks
• UK age-gating mandates universal verification — The Register
• MuddyWater masquerades as Chaos ransomware — The Register
• 43% of C-suite and 81% of business owners find selling credentials justifiable — The Register
• Arctic Wolf lays off 250 to fund AI superintelligence platform — The Register
• DAEMON Tools installers shipping with backdoor — Risky.Biz
• Axon body cameras and Bluetooth tasers lack MAC randomization — Risky.Biz
• Anthropic’s Mythos Preview and Niels Provos analysis — Risky.Biz
• DigiCert compromise via social engineering — Risky.Biz
• NCSC CTO warns of ‘vulnerability patch wave’ — Risky.Biz
• GPU rowhammer attack on NVIDIA RTX A6000 — Schneier on Security
• IAC initiation threshold and JAB debate — Lieber Institute West Point
• Rheinmetall CEO reportedly targeted for assassination — Bismarck Brief
• CISA adds CVE-2026-0300 Palo Alto PAN-OS to KEV — CISA

← back to The Hive on ryanlabouve.com

Show Notes

The Canvas breach narrative has shifted from a single incident to a pattern: ShinyHunters has recompromised Instructure for the third time in eight months, proving that the May 2 containment declaration was performative. Meanwhile, the WHO documented eight hantavirus cases on a cruise ship, with the Andes virus’s person-to-person transmission capability changing the risk calculus. And in a generational shift, the first documented AI-driven cyberattack campaign used Claude Code to generate an exploitation framework from scratch, though it failed to breach OT systems.

In this episode we cover:

• ShinyHunters’ third Canvas breach in eight months reveals a systemic security failure at Instructure, with containment becoming a performative act.
• WHO reports eight hantavirus cases on the MV Hondius, with Andes virus being the only species capable of human-to-human transmission.
• First documented AI-driven cyberattack campaign used Claude Code to generate an exploitation framework, but couldn’t breach OT systems.
• TrustFall attack vector uses .mcp.json and .claude/settings.json as injection vectors, the third CVE from the same root cause in six months.
• Mozilla’s Mythos bug-finding claims are critiqued for lacking baseline comparison, while AI-generated citation fraud rises sixfold in three years.
• Iranian MuddyWater uses Chaos ransomware as false-flag cover, and Polish ABW documents Russian operations shifting to organized crime-linked networks.
• War on the Rocks reports that TOC Mahals don’t exist in Ukraine because Russian forces would destroy them, validating a battlefield vulnerability.

Links

• Krebs on Security: Canvas Breach Analysis
• WHO News: Hantavirus Outbreak on Cruise Ship
• STAT News: Andes Virus Historical Benchmark
• Dark Reading: First AI-Driven Cyberattack Campaign
• The Register: TrustFall MCP Attack Vector
• Risky.Biz: Braintrust Breach and ADB Vulnerability
• The Record: MuddyWater and Polish ABW Reports
• War on the Rocks: TOC Mahals and Defense Industrial Policy
• CIDRAP: CDC Vaccine Study Controversy
• Schneier on Security: ICE Smart Glasses
• CISA Advisories: MAXHUB and Ivanti CVEs
• tl;dr sec: fast16 Malware and GPT-5.5 Benchmarks

← back to The Hive on ryanlabouve.com

Show Notes

Everyone talks about “OPSEC fails.” But what is OPSEC, actually? Not the buzzword. There’s a defined discipline behind it.

In this episode we cover:

• The 1966 Vietnam War origin story that created OPSEC as a discipline
• The five-step framework and how to actually run it
• Ross Ulbricht and the Silk Road: identity compartmentalization failure
• The 2025 Signal group chat: channel verification failure
• Why AI collapses the cost of observation to zero

Links

• NSA Purple Dragon declassified history
• NIST SP 800-160 Vol. 2 — Cyber Resiliency
• ODNI NCSC Operations Security overview
• Russia Hacked Routers to Steal Microsoft Office Tokens — Krebs on Security

Song of the Week

Run Through the Jungle — Creedence Clearwater Revival