Cyber Tools – Trackr.Live

§ Category

A Fork PR Poisoned the pnpm Cache Your Release Workflow Trusted, and GitHub’s Audit Log Never Logged the Write

The TanStack compromise published 84 poisoned npm versions across 42 packages by writing a cache entry into the default-branch scope from an untrusted fork PR. GitHub has since made that write path read-only for low-trust triggers — but cache creation still never touches the audit log, so post-hoc detection has to live on the runner and in cache-inventory differencing instead.

io_uring Reads Your Files and Opens Sockets Without Calling the Syscalls Your auditd Rules Watch

A process on a Linux host where io_uring is enabled can read files, connect out, and write to disk without issuing any of the file and network syscalls your auditd rules and EDR hooks watch. Here is the creation-time syscall that still fires, what to alert on, and why the real fix is a sysctl (already the default on RHEL 9).

A Phished OTP Can Buy the Attacker a Passkey in Your Tenant, and the Registration Audit Trail Is Your Most Direct Signal

O-UNC-066 appears built to walk a victim through a fake passkey enrollment while the operator registers an attacker-controlled passkey in the real Entra tenant. It survives the password reset, and the most direct durable evidence is the authentication-method registration audit trail — written from a session your controls let through because the registration action was protected only by relayable MFA.

Cyber Tools

EDR-Freeze Puts Your Sensor in a Coma With a Signed Windows Dumper. The Detection Is a Gap in Your Own Telemetry

EDR-Freeze abuses WerFaultSecure.exe — a Microsoft-signed WinTCB/PPL crash dumper — to suspend Defender and third-party EDR for as long as the operator holds it, with no kernel driver and almost no forensic residue. Here is what the detection actually looks like in Sysmon, why the filename-based Sigma rule everyone shipped first is a canary rather than a control, and which process-access relationship the real rule matches.

ClickFix Delivery Is an On-Demand API Now, and It Guts Every Content-Based Detection You Have

A researcher pulled roughly 3,000 live ClickFix payloads and found the delivery running like a metered API — request 100, get 100 different builds. That breaks detection built on the pasted command, the encoded blob, or a string IOC. Here’s the content-blind detection that survives, and why the registry rule was never the durable part.

The BadSuccessor Patch Killed the One-Sided Link. Mutual Pairing Still Leaks the Target’s Kerberos Keys

Microsoft’s August 2025 fix for BadSuccessor (CVE-2025-53779) works — but an attacker who controls a dMSA and can write a target’s migration-link attributes can forge the mutual pairing the KDC now demands and pull that account’s Kerberos key material out of the dMSA key package. The detection has to move from watching one attribute to watching the pairing on the target object.

Artificial Intelligence

Invisible Unicode Tags Smuggle Instructions Past Your LLM Filter. The Detection Is a Byte Pattern on the Raw Stream

A block of Unicode characters that renders as nothing can carry a full paragraph of instructions into your LLM, and your content filter can miss it because it inspects a sanitized or transformed representation while the model receives the original code points. Here is where the detection actually has to live, and what you spend the first week of tuning on.

Cyber Tools

GRIDTIDE’s C2 Is a Google Sheet You Don’t Own. Your Workspace Audit Log Is Blind to It

UNC2814’s GRIDTIDE backdoor runs command-and-control through an attacker-controlled Google Sheet — reached via the attacker’s own service account and Cloud project, not the victim’s Workspace tenant — so the victim’s Workspace audit logs never see it. The detection has to come from egress and the host, and the real fix is default-deny outbound from your server tiers.

Static Tundra Pulls Your Startup-Config Over Smart Install. The Switch That Leaks It Breaks Its Own Audit Trail

FSB Center 16’s Static Tundra crew is still working a 2018 Cisco Smart Install bug to steal startup-configs from end-of-life gear, then modifying TACACS+ so the box stops narrating the theft. The detection has to live off the device.

Cyber Tools

Your Edge Router Is Someone Else’s Exit Node. UAT-7810 Conscripts It With an n-Day, and the IOCs Have a 31-Day Shelf Life

A China-nexus actor is compromising unpatched Ruckus edge gear (and, via associated infrastructure, ASUS AiCloud) to build relay meshes for other APTs — and the published network IOCs can rot in as little as a month. The durable defense is edge-device hygiene and relay-behavior detection over blocklists.