Nation-state operators now rent disposable relay meshes that cycle IPs faster than your threat feed updates. Indicator-based blocking was already brittle; against ORB networks it’s mostly theater. Here’s what actually moves the needle.
Bootc and rpm-ostree turn the root filesystem read-only and push state into a handful of writable paths. That quietly invalidates half your host integrity detections. Here is the new shape of the problem and what to instrument before the first ATO review notices.
Two separate disclosures against Anthropic’s Claude Code GitHub Action show how a single opened issue can walk out with OIDC tokens and an unscrubbed API key. Neither got a CVE, which is its own problem.
CVE-2025-29927 let attackers skip Next.js middleware entirely with a single request header, including the middleware doing your auth. The detection is trivial once you capture the field — and the architecture mistake underneath it is the part worth your attention.
Adversary-in-the-middle kits steal the session token after MFA succeeds, then replay it from somewhere else. Here is how the replay actually looks in your sign-in logs, why token protection only half-closes the gap, and where it maps to 800-53.
CVE-2026-49975 chains the 2016 HPACK Bomb with an HTTP/2 flow-control stall into a remote, unauthenticated memory-exhaustion DoS that takes down default nginx, Apache, IIS, Envoy, and Pingora configs from a single home connection. An OpenAI Codex agent found it by reading the code.
ClickFix turns the user into the execution primitive, which means your payload-side detections fire late or not at all. Here’s where the real telemetry lives, what the first week of tuning has to fix, and which environment assumptions decide whether the detection works at all.
A self-propagating npm worm poisoned 32 @redhat-cloud-services packages on June 1, 2026 — and because it published through Red Hat’s own OIDC pipeline, the malicious versions carried legitimate SLSA provenance. Here’s the scope, the mechanism, and the rotation list.
A CVSS 9.8 stack-based buffer overflow in Windows Netlogon gives an unauthenticated attacker code execution on a domain controller. Microsoft called exploitation ‘less likely.’ Belgium’s CCB says it’s happening now.
A defender’s view of indirect prompt injection in MCP-connected and tool-calling LLM agents — what the telemetry actually looks like, where detections originate noise, and how to map containment to 800-53.
