DEF CON 34: AI customer service agents tricked into leaking secrets

🕵️ RESEARCH & DEEP DIVES

• ASUS Armoury Crate driver flaw (CVE-2026-16005) lets local users free arbitrary memory via IOCTL
  ASUS published CVE-2026-16005, a medium-severity invalid pointer release flaw in the Armoury Crate driver.

  • Affects systems running the ASUS Armoury Crate driver; no specific affected versions listed.
  • CWE-763: a local user with low privileges can free arbitrary memory by sending a crafted IOCTL request that bypasses the driver's verification.
  • Can corrupt kernel data structures and cause a system crash (BSOD), a denial-of-service impact; no known in-the-wild exploitation.
  • CVSS 4.0 base score 5.8 (AV:L/AC:H/PR:L); ASUS assigned, published 2026-09-08, fix details in the ASUS 'Security Update for Armoury Crate App' advisory.
  Sources 📄 Source: cve.threatint.com · 📎 Coverage: radar.offseq.com · 👁 via CVE ThreatInt

• ASUS Armoury Crate driver flaw CVE-2026-16006 leaks kernel virtual addresses via crafted IOCTL
  ASUS has disclosed a medium-severity vulnerability in the Armoury Crate driver that exposes kernel virtual addresses to local users.

  • Affects ASUS Armoury Crate driver on systems running the Armoury Crate app; ASUS assigned CVE-2026-16006 with a CVSS 4.0 score of 5.7 (medium), published 2026-09-08.
  • CWE-497 information exposure: a local user can obtain kernel virtual addresses, revealing details of the kernel memory layout useful for further attacks.
  • Attack works by sending a crafted IOCTL request that bypasses the driver's verification; requires local access, low privileges, high attack complexity, and no user interaction.
  • No exploits are reported; details and updates are in the 'Security Update for Armoury Crate App' section of ASUS's security advisory.
  Sources 📄 Source: cve.threatint.com · 📎 Coverage: radar.offseq.com · 👁 via CVE ThreatInt

• DEF CON 34 talk shows AI customer service agents can be tricked into leaking secrets and acting for attackers
  Inti De Ceukelaire's DEF CON 34 Bug Bounty Village talk demonstrated attacks on AI customer service agents that yielded over $50,000 in bounties.

  • Applies to organizations using AI customer service agents and chatbots, presented at Bug Bounty Village, DEF CON 34.
  • Attacks include tricking agents into spilling secrets and forcing them to carry out unauthorized actions on behalf of victims.
  • Techniques shown include weaponizing chatbots via email, sending phishing emails from the support@ address, invoking tool calls, multiple From header abuse, and signed emails impersonating the agent's identity.
  • The researcher earned $50,000+ in bounties in a few weekends without using Burp Suite or automated scanners.
  Sources 📎 Coverage: intigriti.com · 👁 via r/netsec

• 🕵️ RESEARCH & DEEP DIVES • vgmstream txtp txtp_parser.c add_entry resource consumptionA security vulnera... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • vgmstream txth-txtp txth.c sscanf stack-based overflowA weakness has been ide... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePo... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperat... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • Missing authentication for a critical function in ASUS Control Center Express... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury C... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Cr... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate al... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString ... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • Improper Restriction of Software Interfaces to Hardware Features in ASUS Armo... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds writeA v... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflowA flaw has... (5) — CVE ThreatInt

• 🕵️ RESEARCH & DEEP DIVES • New InjectEave Attack Allows Hackers to Recover Audio Playing on Headphones from 30 Meters (5) — Cyber Security News

• 🕵️ RESEARCH & DEEP DIVES • D-Link DIR-822A Critical Out-of-Bounds Write (CVE-2026-86510) (5) — thehackerwire.com (discovered)

• 🕵️ RESEARCH & DEEP DIVES • How to Create an AI Acceptable Use Policy Employees Will Follow (5) — securityboulevard.com (discovered)