Critical isolated-vm flaw enables sandbox escape and potential host

🚨 ACTIVE EXPLOITATION

• Malicious Rust Crate arrayref Runs a Build-Time Payload
  submitted by /u/BattleRemote3157 [link] [comments]
  📎 Coverage: reddit.com · 👁 via r/cybersecurity

🕵️ RESEARCH & DEEP DIVES

• Critical isolated-vm flaw enables sandbox escape and potential host RCE
  A critical isolated-vm flaw enables sandbox escape and host control-flow hijacking.

  • The flaw affects isolated-vm deployments, including AI-related projects such as n8n, Activepieces, and Mastra AI.
  • GHSA-864f-rcv7-6rh4 affects isolated-vm versions before 7.0.1 and the 6.x branch before 6.2.0.
  • A type confusion in ExternalCopy handling of the transferList option corrupts host-process memory.
  • Attackers can escalate from a controlled crash to host control-flow hijacking using an ivm.Reference.
    📄 Source: endorlabs.com · 📎 Coverage: thehackernews.com · 👁 via The Hacker News, r/cybersecurity

• Transparent Tribe Targets Afghan Telecom With PATCHCORD Backdoor
  Transparent Tribe is targeting Afghan telecom and South Asian critical infrastructure with new backdoors.

  • Afghan telecom providers, government agencies, defense and energy organizations are targeted.
  • PATCHCORD, SHEETCORD and HACKERAI C2 Agent provide remote access, host fingerprinting and command execution.
  • PATCHCORD arrives through fake Afghan Telecom installers and hijacks browser shortcuts for persistence.
  • SHEETCORD uses Google Sheets API C2; HACKERAI C2 Agent uses GitHub Gists.
  • Observed infrastructure includes C2 IP 46.30.188[.]13 and the impersonating domain nic-support[.]site.
    📄 Source: bitdefender.com · 📎 Coverage: darkreading.com · 👁 via Dark Reading

• Encrypted web-page prompts can exfiltrate Grok users’ chat data
  Researchers demonstrated an encrypted prompt injection that exfiltrates Grok user data.

  • Grok.com users who ask the chatbot to summarize web pages are affected.
  • The attack exposes users’ names, approximate locations, subscription tiers, and conversation prompts.
  • A malicious page embeds encrypted instructions, a decryption key, and directions to process the ciphertext.
  • Grok’s code runtime decrypts PBKDF2 and AES-256-GCM payloads, then sends the data to an attacker-controlled URL.
    📄 Source: adversa.ai · 📎 Coverage: arstechnica.com · 👁 via The Hacker News

• Phishing toolkit covertly enrolls hidden passkeys on compromised Google accounts
  Abnormal Security identified a phishing toolkit that secretly enrolls attacker-controlled passkeys.

  • The toolkit targets Google accounts using passkey authentication.
  • iAuthFlow v2 captures credentials through a phishing site.
  • It automatically registers a hidden attacker-controlled passkey after compromise.
  • The toolkit was reportedly offered for about $10,000.
    📄 Source: cifas.org.uk · 📎 Coverage: abnormal.ai · 👁 via @campuscodi@mastodon.social

🔓 CVEs & KEV

• CVE-2026-49825 — CVSS 8.2 — lxml: javascript: URL bypass in Cleaner via xlink:hreflxml is a library for p...

• CVE-2026-61898 — CVSS 7.8 — accountsservice: shell injection via attacker-controlled ~/.pam_environment i...

• CVE-2026-61897 — CVSS 7.8 — accountsservice: incomplete privilege drop when running Ubuntu-specific langu...

• CVE-2026-63490 — CVSS 7.5 — Handlebars.java: Arbitrary file read in SpringTemplateLoader via URL-fragme...

• CVE-2026-44725 — CVSS 6.6 — EMQX: Stale plugins allow grants amplify a compromised admin/API key to remot...

📋 ADVISORIES

• 📄 Source for NASA AIT-GUI Flaws Let Unauthenticated Attackers Issue Spacecraft Commands — cycode.com

• 📄 Source for Eight vulnerabilities affect IBM AIX and PowerVM VIOS — ibm.com