Jeff Davies - f4n6 (Page 59)

notes

Vulnerability in telnetd

1. Executive summary CVE-2026-24061 is an authentication-bypass flaw in telnetd (GNU InetUtils versions 1.9.3 through 2.7) that allows an unauthenticated

13 Sep 2026 · 5 min read read →

notes

Ransomware: Vexy Ransomware named Strad Solutions (GB)

1. Executive summary On 2026-09-12, the ransomware operation calling itself "Vexy Ransomware" listed Strad Solutions (GB, stradsolutions.com) on its leak site.

13 Sep 2026 · 7 min read read →

notes

Ransomware: AuditTeam named Paid Victim FDC699DE3A112669 (DE)

1. Executive summary On 2026-09-13, the ransomware leak-site aggregator Ransomware.live indexed a new victim post attributed to a group calling itself "

13 Sep 2026 · 5 min read read →

malware

Salad on the Side: Unpacking LunarCrypt and the SalatStealer RAT

A Go crypter, a RAT with SQLite in its WebAssembly belly, and an encrypted C2 configuration that eventually introduced itself through an error message. The salad

12 Sep 2026 · 10 min read read →

notes

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

1. Executive summary A report by researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx (first reported by The Wall Street Journal) attributes the May 2026

12 Sep 2026 · 7 min read read →

notes

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

1. Executive summary Proofpoint has documented a previously undocumented exploit kit, "BlueMoon," that chains two Google Chrome V8 zero-days (CVE-2026-85046, CVE-

12 Sep 2026 · 8 min read read →

notes

CVE-2026-42018 — JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability

1. Executive summary CVE-2026-42018 is a HIGH-severity (CVSS 7.5, CWE-287 Improper Authentication) vulnerability in JFrog Artifactory in which an unauthenticated caller

11 Sep 2026 · 7 min read read →

notes

CVE-2026-85706 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

1. Executive summary CVE-2026-85706 is a path traversal vulnerability in the GitLab Community Edition and Enterprise Edition repository commits API that allows an unauthenticated

11 Sep 2026 · 6 min read read →

notes

Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

1. Executive summary A Dark Reading report published 11 September 2026 describes threat actors using AI to generate approximately one million personalised fraud emails within a

11 Sep 2026 · 3 min read read →

notes

Florida says motor vehicle data breach tied to credentials stolen from officer’s personal device

1. Executive summary ShinyHunters (MITRE G1057) has claimed, and the Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has now publicly confirmed, a breach of

11 Sep 2026 · 6 min read read →

notes

CVE-2026-42016 — JFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerability

1. Executive summary CVE-2026-42016 is a high-severity (CVSS 8.1, CWE-863 Incorrect Authorization) privilege-escalation vulnerability in JFrog Artifactory, in active exploitation

11 Sep 2026 · 9 min read read →

notes

Metasploit Wrap Up: This One Goes to Sixteen!

1. Executive summary Rapid7's Metasploit wrap-up of 2026-09-11 adds sixteen modules, ten of them weaponised exploits, five targeting CVEs on the

11 Sep 2026 · 12 min read read →