Threat briefs

The trivy-action GitHub Action was compromised through git tag repointing, injecting a multi-stage credential stealer into CI/CD pipelines that runs before the legitimate scanner.

CrowdStrike's Charlotte AI AgentWorks introduces a platform for building and orchestrating AI-powered security agents to enhance SOC capabilities and automate security operations.

CrowdStrike Falcon AIDR now supports NVIDIA NeMo Guardrails to secure AI agents against runtime attacks by blocking prompt injection attacks, redacting sensitive data, defanging malicious content, and moderating unwanted topics.

CrowdStrike Falcon Data Security provides organizations with the ability to discover, classify, and protect sensitive data across various environments, providing real-time visibility into data movement and enabling the detection and prevention of data theft.

CrowdStrike's Falcon Next-Gen SIEM now supports third-party EDR solutions, starting with Microsoft Defender, to extend AI-native SOC capabilities without replacing existing endpoint agents.

The Tycoon2FA phishing-as-a-service platform, which bypasses MFA and compromises email accounts, has rebounded after a takedown, returning to pre-disruption activity levels and continuing to employ established tactics.

A stack-based buffer overflow vulnerability (CVE-2026-5044) in Belkin F9K1122 version 1.00.33 allows remote attackers to execute arbitrary code by manipulating the 'webpage' argument in the formSetSystemSettings function, potentially leading to complete system compromise.

OpenClaw before 2026.3.12 embeds long-lived shared gateway credentials in pairing setup codes, allowing attackers with access to leaked codes to reuse credentials and gain unauthorized access.

OpenClaw before 2026.3.13 is vulnerable to a replay attack during device pairing verification, allowing attackers to repeatedly verify a bootstrap code and escalate privileges to operator.admin.

OpenClaw before 2026.3.11 is vulnerable to an approval integrity issue (CVE-2026-32979) allowing attackers to execute arbitrary code by modifying approved local scripts before they are executed.

OpenClaw before 2026.2.17 creates session transcript JSONL files with overly broad default permissions, allowing local users to read transcript contents and extract sensitive information.

OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability (CVE-2026-32973) due to improper normalization of patterns, allowing attackers to execute unintended commands via wildcard matching in POSIX paths.

OpenClaw before 2026.3.12 is vulnerable to an authentication bypass in Feishu webhook mode when only verificationToken is configured without encryptKey, allowing unauthenticated network attackers to inject forged Feishu events and trigger downstream tool execution.

OpenClaw before 2026.3.11 is vulnerable to privilege escalation in the device.token.rotate function, allowing attackers with limited operator.pairing scope to mint tokens with elevated operator.admin privileges, potentially leading to remote code execution.

OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the session_status tool, allowing sandboxed subagents to access and modify session data outside their intended scope.

OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners to access owner-only surfaces, enabling attackers with command authorization to read or modify privileged configuration settings.

OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability that allows low-privilege leaf subagents to access the subagents control surface and execute commands with broader tool policies due to insufficient authorization checks, potentially leading to privilege escalation and unauthorized control of sibling processes.

A stack-based buffer overflow vulnerability (CVE-2026-5042) exists in the Belkin F9K1122 router version 1.00.33, allowing remote attackers to execute arbitrary code by manipulating the webpage argument in the formCrossBandSwitch function.

CrowdStrike's Falcon Next-Gen SIEM expands its capabilities to support third-party EDR solutions, starting with Microsoft Defender, aiming to unify security operations and reduce data management overhead for organizations using diverse endpoint protection tools.

The Tycoon2FA phishing-as-a-service (PhaaS) platform, used to bypass MFA and compromise email accounts, saw a temporary decrease in activity after a law enforcement takedown, but cloud compromises have since returned to pre-disruption levels with unchanged TTPs, indicating continued threat actor activity.

A stack-based buffer overflow vulnerability (CVE-2026-5036) exists in the fromDhcpListClient function of the Tenda 4G06 router (version 04.06.01.29), potentially allowing remote attackers to execute arbitrary code by manipulating the 'page' argument in the /goform/DhcpListClient endpoint.

CrowdStrike enhances its CNAPP capabilities in Falcon Cloud Security, providing security teams with risk-based insights by unifying application-layer visibility, incorporating adversary intelligence for risk prioritization, and improving remediation workflows.

CrowdStrike enhances its CNAPP capabilities by incorporating adversary intelligence for risk prioritization, application-layer visibility, and runtime analysis, addressing critical gaps in cloud security and enabling faster remediation based on threat actor behavior like LABYRINTH CHOLLIMA and SCATTERED SPIDER.

CrowdStrike Falcon AIDR now supports NVIDIA NeMo Guardrails v0.20.0 to help organizations protect AI agents in production by blocking prompt injection attacks, redacting sensitive data, and controlling agent behavior.

The aquasecurity/trivy-action GitHub Action was compromised via git tag repointing, replacing the legitimate entry point with a multi-stage credential stealer, enabling access to secrets, credentials, and infrastructure in CI/CD pipelines.

CrowdStrike introduces Charlotte AI AgentWorks and Agentic SOAR to enable agentic security operations, leveraging AI and automation to enhance SOC capabilities by orchestrating context-aware agents that can reason across domains and take governed actions.

CrowdStrike's CNAPP enhancements prioritize cloud risk based on adversary behavior, correlating application insights with cloud infrastructure telemetry to identify and address critical exposures targeted by specific threat actors like LABYRINTH CHOLLIMA and SCATTERED SPIDER.

CrowdStrike introduces agentic MDR and SOC Transformation Services to provide a pragmatic path to operationalizing an agentic SOC, combining machine speed execution with expert human judgment to combat modern breaches.

CrowdStrike's Charlotte AI AgentWorks facilitates the creation and deployment of AI-driven security agents, orchestrated by Charlotte Agentic SOAR, to augment security analysts and accelerate threat response, offered with complimentary AI credits to encourage adoption.

CrowdStrike is expanding Falcon Next-Gen SIEM to support third-party EDR solutions like Microsoft Defender, enabling organizations to modernize their SOC operations by unifying detection, investigation, and response across heterogeneous environments.