Keycloak CVE-2026-18963 (CVSS 9.1): Unauthenticated Attackers Can Take Over Any Account

Red Hat and the Keycloak project have patched CVE-2026-18963, a CVSS 9.1 flaw in the reset-credentials flow that let an unauthenticated attacker reset any user's password and seize the account, administrators included. Fixed in Keycloak 26.7.2, 26.6.6, and 26.4.15.

Corey Quinn Says AWS's Leaked-Key Quarantine Leaves Attackers Too Much Room

AWS attaches a quarantine policy to keys it detects as leaked, but Corey Quinn argues in The Register that the deny-list still lets an attacker assume other roles, destroy audit logs, read secrets, and lock storage. Treat a leaked key as a full compromise.

Frontier AI Labs Have Few Public Plans to Contain a Rogue Model, Study Finds

An independent Guidelight assessment graded five frontier AI labs on six control practices and found few publicly documented plans for containing a rogue model. The scores measure public disclosure, not private preparedness, but only OpenAI cleared even a partial mark on containment.

Unprotected TSN Protocols Could Disrupt Physical OT Processes, Nozomi Research Shows

New Nozomi Networks research, unveiled at Black Hat, shows how unprotected TSN (Time-Sensitive Networking) protocols could let attackers disrupt or manipulate physical processes in OT networks. It is lab research, not an active campaign, and segmentation is the first defense.

TikTok and ByteDance to Pay $400 Million to Settle DOJ Child-Privacy Lawsuit

The U.S. Justice Department says TikTok and ByteDance will pay $400 million to resolve a 2024 child-privacy lawsuit alleging COPPA violations. The deal pays $300 million now and $100 million once a court vacates an earlier Musical.ly consent decree.

North Korean Hackers Tied to the Rust crates.io Supply-Chain Attack, Wiz Says

Wiz researchers linked the crates.io compromise of three Rust crates to recent North Korean supply-chain operations, pointing to command-and-control infrastructure shared with the Mastra and axios npm attacks. It is a strong lead built on overlap, not a confirmed verdict.

iAuthFlow V2 Phishing Kit Plants Attacker Passkeys to Survive Password Resets

Researchers at Abnormal documented iAuthFlow V2, a $10,000 phishing toolkit that registers an attacker-controlled passkey on a compromised account. Because a passkey is a credential, not a password token, it survives the reset and session revocation that normally evict a phisher.

TrendAI Finds 14 Trojanized npm Packages Dropping RedC2 4.0, an AI-Assisted Linux Backdoor

Trend Micro's TrendAI team disclosed 14 trojanized npm packages that pose as calendar and streak utilities while dropping RedC2 4.0, a cross-platform Linux backdoor with AI-assisted command-and-control. Here is what the disclosure confirms, what it does not, and what defenders should audit now.

Microsoft Defender's Signed BTR.sys Driver Can Be Weaponized in the Kernel, Check Point Finds

Check Point Research disclosed that BTR.sys, Microsoft Defender's own legitimately signed remediation driver, can be turned into a kernel operation primitive for arbitrary file and registry changes across Windows 7 through Windows 11 25H2, with no external driver imported.

Rust Pulls 3 Poisoned crates.io Packages After a Build-Time Malware Supply-Chain Attack

The Rust Project deleted malicious releases of arrayref, internment, and append-only-vec from crates.io after a compromised maintainer account added a typosquatted proc-macro1 dependency whose build script ran malware at compile time. Here is what security teams should check.

UAT-10147: Cisco Talos Ties Agentic AI to Post-Compromise Operations and the SPECTRE Implant

Cisco Talos published two reports on a Chinese-speaking cybercrime group, UAT-10147, that it says built agentic AI into its post-compromise operations, along with a companion cross-platform implant called SPECTRE. Here is what was disclosed, and what defenders should do about it.

Microsoft Entra ID RCE CVE-2026-69836 (CVSS 10.0) Was Exploited in the Wild

Microsoft says a maximum-severity remote code execution flaw in Entra ID, CVE-2026-69836, was exploited in the wild before it fixed the service on its own infrastructure. No patch to install does not mean there is nothing for security teams to check.