Hackers abused Claude to extract secrets from 1.8M Android apps

🕵️ RESEARCH & DEEP DIVES

• Suspected TLS downgrade attack on Edmonton airport's free WiFi
  A traveler reports a suspected TLS downgrade attack on Edmonton International Airport's free WiFi.

  • Applies to travelers connecting to the free 'YEG_WIFI' network at Edmonton International Airport (YEG).
  • Safari flagged connections to GitHub, YouTube, and other sites as insecure, with negotiations downgraded to TLS 1.0 or TLS 1.1.
  • The poster suspects attackers on the airport network steering users to malicious servers via downgraded TLS.
  • The behavior persisted across repeated reconnects and only stopped after the network was forgotten and reconnected.
  Sources 📎 Coverage: reddit.com · 👁 via r/cybersecurity

• Friday Squid Blogging: Rotting Squid on a Beached California Boat — Schneier on Security

• Hackers abused Claude to extract secrets from 1.8M Android apps — BleepingComputer

• Threat Actor Generates 1M Personalized Fraud Emails in 3 Days — Dark Reading

• Cyberattack causes a flight delay? Airlines won’t owe you a hotel or meal — CyberScoop

• Stored DOM-XSS in public shared-folder image gallery (one-click, unauthentica... — CVE ThreatInt

• OpenRemote read-only asset users can write predicted datapointsOpenRemote is ... — CVE ThreatInt

• Mousehole: Unauthenticated HTTP/WebSocket boundary exposes and mutates MAM co... — CVE ThreatInt

• NL Portal: IDOR allows any authenticated user to complete and tamper with ano... — CVE ThreatInt

• Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery (CSR... — CVE ThreatInt

• Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format fiel... — CVE ThreatInt

• Concrete CMS below 9.5.3 is vulnerable to Stored XSS in the Document Library ... — CVE ThreatInt

• Concrete CMS 9.2.0 to 9.5.2 is vulnerable to Missing authorization in the Con... — CVE ThreatInt

• Incorrect Authorization in the Concrete CMS Express Entries Dashboard below v... — CVE ThreatInt

• nl.nl-portal:app has GraphiQL UI and GraphQL schema introspection enabled by ... — CVE ThreatInt

• drm/amd/display: Skip Update HDCP Config In Transition StateIn the Linux kern... — CVE ThreatInt

• btrfs: write-protect folios during data writebackIn the Linux kernel, the fol... — CVE ThreatInt

• ring-buffer: Fix subbuf resize race with ring buffer readersIn the Linux kern... — CVE ThreatInt

• iomap: don't free integrity payload that doesn't existIn the Linux kernel, th... — CVE ThreatInt

• clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error pathIn t... — CVE ThreatInt

• fs: fix user path of nested backing filesIn the Linux kernel, the following v... — CVE ThreatInt

• ovl: fix double end_creating() on the casefold-mismatch pathIn the Linux kern... — CVE ThreatInt

• pidfd: hold exec_update_lock around namespace ioctlIn the Linux kernel, the f... — CVE ThreatInt

• timers/itimer: Zero-init old itimerval before copy to userspaceIn the Linux k... — CVE ThreatInt

• rust: devres: fix race between concurrent revokersIn the Linux kernel, the fo... — CVE ThreatInt

• KEV: CVE-2026-85706 — GitLab Community Edition and Enterprise Edition — GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability — CISA KEV

• An event bus that never drops the critical stuff: QoS and backpressure in pwnproxy — r/netsec

• Report Surfaces Attacks Are Aimed at Narrow Range of Edge Computing Devices — securityboulevard.com (discovered)

• Agentic AI Doesn’t Eliminate Humans. It Moves Them to the Only Place That Matters — securityboulevard.com (discovered)

• AI-Powered Security — securityboulevard.com (discovered)

• Surface SaaS and AI Threats — securityboulevard.com (discovered)

• The Cost of Silence: Why Fear Kills Phishing Reporting — securityboulevard.com (discovered)

• We moved from VS Code to Cursor and realized nobody checks which version of your extensions actually gets installed — r/cybersecurity

• Can I find a job with Security+ and CySA+, along with 1 year of intensive experience working as a SOC Analyst? Can anyone help or recommend any websites or companies where I could apply? Thanks in advance! — r/cybersecurity

• Aspiring SOC Analyst in 2026. I’m looking for a study buddy to learn cybersecurity together, stay accountable, share resources, and work through hands on labs.If you’re also preparing for a SOC Analyst role and interested in learning together, feel free to DM me. — r/cybersecurity

• help — r/cybersecurity

• Hacking macOS and offensive security with Olivia Gallucci (Datadog) — r/cybersecurity

• Would a vendors other customers change your security assessment? — r/cybersecurity

• How to get good at blackbox Pentesting — r/cybersecurity

• Any Comeback Groups There ? — r/cybersecurity

• SpaceX New Grad Software Security Engineer interview- any advice? — r/cybersecurity