💥 BREACHES & INCIDENTS
- Hackers claim theft of thousands of sensitive FBI personnel records
Hackers claim they stole thousands of sensitive FBI personnel records.- Applies to FBI personnel whose records were targeted.
- Hackers claim to have stolen thousands of sensitive FBI personnel records.
- Details on the attack method and tooling were not provided in the available material.
🕵️ RESEARCH & DEEP DIVES
- Uncensored local LLM writes LSASS dumper that evades EDR detection
A penetration tester used an uncensored local Qwen 3.8 27B model to generate an LSASS dumper that bypassed two EDR products.- Applies to Windows enterprises running EDR; LSASS dumps expose plaintext passwords or hashes enabling lateral movement.
- Commercial models (Claude Opus 5, Opus 4.8, Sonnet 5) refused the request; DeepSeek v4 Flash produced a working dumper but it was detected by EDR.
- Uncensored Qwen 3.8 27B, run locally on 2x RTX 4090, made the dumper undetected on both lab EDR solutions with no extra instructions.
- The model's stealth changes: less suspicious process spawning, reduced access masks, random sleeps, changed output paths, and scrubbed embedded strings.
- The dumper takes a PID, creates a suspended clone via reflection, and writes an XOR-encrypted in-memory minidump validated with pypykatz.
🔓 CVEs & KEV
- CVE-2026-14780 — PaperCut NG/MF — CVSS 7.5 — PaperCut NG/MF: Remote Code Execution via Scripting SubsystemA vulnerability ...