Risk – Page 2 – Trackr.Live

§ Tag

YellowKey and GreenPlasma: A USB Stick, a Transaction Log, and Why BitLocker on a Stolen Laptop Is Now a Breach Notification

Chaotic Eclipse dropped two unpatched Windows zero-days on May 13, 2026. YellowKey turns an NTFS transaction log on a USB stick into a BitLocker bypass through WinRE — physical access, no recovery key, no PIN required on TPM-only boxes. GreenPlasma is the companion privilege escalation through CTFMON. No CVEs, no patches, and a researcher who has promised more for June’s Patch Tuesday.

Token theft after AitM phishing in Entra ID: what the SignInLogs actually show in 2026

A defender-oriented walkthrough of investigating adversary-in-the-middle token theft against Entra ID now that token protection, CAE, and device-bound sessions are widely on — what the logs actually contain, what the first detection misses, and where the artifacts live outside Entra.

Tool-Call Divergence: Detecting Indirect Prompt Injection in Agentic Systems

A defender-oriented analysis of indirect prompt injection in tool-calling agents: where the signal actually lives in the trace pipeline, what the first week of tuning has to fix, and which 800-53 controls the implementation maps to.

Artificial Intelligence

Bleeding Llama: CVE-2026-7482 and what Ollama’s GGUF loader hands an attacker

CVE-2026-7482 turns Ollama’s /api/create into a heap-read primitive that exfiltrates prompts, system messages, and process environment variables through a crafted GGUF tensor shape. Patch to 0.17.1; everything else is a stopgap.

Device Code Phishing and Persistent OAuth Consent: 2026 APT Tradecraft in Entra ID

A defender-focused analysis of how APT29-aligned and Storm-2372-style intrusion sets are abusing device authorization grants and long-lived OAuth consent in Entra ID through 2026 — what to detect, what to revoke, and where it maps to 800-53.

Cyber Tools

Edge Device Persistence in 2026: Defending Network Appliances from Nation-State Implants

A defender-oriented analysis of firmware- and bootloader-resident implants on perimeter network appliances, what they look like in practice, how to detect them, and how to map the response to NIST 800-53.

Cyber Tools

Dirty Frag (CVE-2026-43284, CVE-2026-43500): The Page-Cache Write Class Skips algif_aead and Lands Back at Root

Hyunwoo Kim’s Dirty Frag chain extends the Dirty Pipe / Copy Fail class to skb paged fragments. The xfrm ESP receive path provides a deterministic 4-byte page-cache store (CVE-2026-43284); the rxrpc receive path provides a namespace-free trigger (CVE-2026-43500). One PoC, no race, root on Ubuntu, RHEL, CentOS Stream, AlmaLinux, Fedora, and openSUSE — including hosts that already blocklisted algif_aead for Copy Fail.

Cyber Tools

Apache HTTP/2 Double-Free in mod_http2 (CVE-2026-23918): Defender’s Read

A double-free in Apache httpd 2.4.66’s mod_http2 lets unauthenticated clients crash workers reliably and, on certain builds, opens a path to remote code execution. Here’s the defender-oriented breakdown: mechanism, detection, remediation, and 800-53 mapping.

The Confused Deputy Returns: Trust Boundaries in MCP Agent Systems

Model Context Protocol gives agents a clean way to call tools, but it also gives every piece of retrieved content a direct line to those tools. The classic confused deputy problem is back, and most deployments are not handling it.

Artificial Intelligence

Tool Poisoning in MCP-Connected Agents: A 2026 Threat Model

Model Context Protocol turned every internal API into an LLM-reachable tool. The threat model didn’t catch up. Here’s what tool poisoning looks like in production and how to harden against it.