Adobe Commerce attack 🛒, SAP OVERPASS max flaw 💥, ClearFake WebDAV chain 🔗

Threat actors are actively exploiting CVE-2026-75650, a max-severity unauthenticated code execution vulnerability dubbed StyleSmuggler ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌  ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ 

Sign Up |Advertise|View Online TLDR Together With TLDR Information Security 2026-09-10 Dreamforce starts in 5 days. Stream it all live, for free (Sponsor) From accelerating vulnerability detection to creating observability headaches, AI is putting security teams to the test. That's why protecting data, governing AI agents, and building securely at scale are core focuses at Dreamforce. The Security Keynote lays out how to outpace evolving threats and accelerate AI with trust, visibility, and guardrails. Then, the AIforce Keynote will break down how business logic and governance can power intelligent experiences everywhere. Register for free to stream Dreamforce live on Salesforce+. 🔓 Attacks & Vulnerabilities ClearFake WebDAV Infection Chain Delivers Amatera Stealer, ZigCryptoStealer, and NetSupport Manager (17 minute read) Cisco Talos identified two WebDAV-based infection chains delivering the Amatera Stealer to facilitate untargeted credential and cryptocurrency theft. The initial chain executed a DLL named "verification.google" at a Ukrainian government organization. A parallel "pf.ch" chain used ClearFake JavaScript stored on the BNB Smart Chain, alongside a fake Google CAPTCHA ClickFix prompt, to task secondary payloads, including ZigCryptoStealer and NetSupport Manager. Adobe Commerce max-severity bug comes under active attack (3 minute read) Threat actors are actively exploiting CVE-2026-75650, a max-severity unauthenticated code execution vulnerability dubbed StyleSmuggler, to compromise online stores running Adobe Commerce and Magento Open Source. Exploitation began on September 4, with the deployment of a Rust backdoor and a separate PHP web shell. Adobe released emergency hotfix VULN-393411 to address the flaw, prompting Sansec to warn that patching alone is insufficient for stores that may already be compromised. SAP Warns of Maximum Severity OVERPASS Kernel Vulnerability (2 minute read) German software company SAP has released an update that patches 20 security vulnerabilities. Of particular note is a maximum-severity buffer overflow vulnerability in the External Passport Protocol (EPP) processing library, which could allow an unprivileged attacker to run arbitrary commands as an administrator. Another missing authentication vulnerability in the SAP NetWeaver Message Server could allow unauthenticated attackers to execute malicious payloads and arbitrary commands across the full SAP system cluster. 🧠 Strategies & Tactics GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI (22 minute read) Google's GTIG reports that threat actors have graduated from basic prompting to agentic AI workflows that autonomously manage scanning pipelines, resolve errors, and execute multi-stage attacks with minimal human oversight, compressing response windows from days to hours. For instance, groups like UNC6780 exploit the AI supply chain by stealing GitHub Actions tokens to sign malicious packages by tricking LLMs, state-sponsored groups use AI across the full attack lifecycle from reconnaissance to post-exploitation, and financially motivated actors built credential-harvesting agents that stole thousands of secrets in under six hours using only AI coding tools and markdown playbooks. CVE-2026-82533: DeepSeek Harness Vulnerability Lets AI Agents Escape Their Own Sandbox (6 minute read) CVE-2026-82533 affects DeepSeek Harness 0.1.1-rc.2 and earlier. Its local API trusted the client-controlled Host header instead of the peer address. Sandboxed sessions retained loopback access and could call that API to enable danger-full-access with approvals disabled. A single shell command escaped the sandbox on default settings. If port 3080 was forwarded or tunneled, unauthenticated remote attackers could control sessions and export stored conversations. DeepSeek fixed the issue in 0.1.2-alpha.1. Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure (14 minute read) Unit 42 traced two routine-looking adware infections to CL-CRI-1171, a pay-per-install operation that has run for two years behind a shared loader called OfferLoader, delivering payloads through 11 gaming-optimization YouTube channels and an SEO-poisoning funnel into corporate and government endpoints. The loader gates delivery on a Base64 click_id fingerprint of OS, browser, referrer, search keyword, and IP, so scanners and analysts get a decoy download page while real victims get the payload, which explains the near-zero public footprint despite 10,000+ loader samples and 200+ rotating domains. Defenders should stop triaging commodity loader alerts as low priority and pivot on loader C2 infrastructure instead, since a single OfferLoader run here spawned three unrelated campaigns including a cross-platform Insomnia RAT, a steganography-delivered WebSocket tunneler, and a Chrome Secure Preferences bypass. 🧑‍💻 Launches & Tools Your team is using AI. Help them secure it with Datadog's guide (Sponsor) Cybersecurity was already a mess before AI. Now it's harder than ever to keep up. This Datadog guide lays out how AI works, its entry points and business logic, and the underlying components that host and run LLM apps. It also provides tactical steps you can take to improve AI security today. Get the guide Kontext (GitHub Repo) Kontext puts local policy between AI agents and the tools they call. It observes supported actions, evaluates policy before consequential actions run, and records the decision and outcome in an authorization ledger. Cymphony (Product Launch) Cymphony maps employee and machine identities, their system access, and sensitive data exposure. It detects risky permissions, investigates incidents, prioritizes fixes, and automates access corrections. Privileged Identity and Access in Microsoft Entra (GitHub Repo) A collection of docs, resources, and samples for implementing secure, privileged IAM in Microsoft Azure and Entra. 🎁 Miscellaneous IonQ Compiles Shor's Attack on secp256k1 Down to 19,397 Ions and 26 Days per Attempt (21 minute read) IonQ published a blueprint estimating that 19,397 physical qubits and 1,457 logical qubits are required to break 256-bit elliptic-curve signatures and compromise dependent systems. The proposed attack uses the Walking Cat architecture to solve the secp256k1 discrete logarithm problem with about 39 million Toffoli gates over an estimated 25.7 days per attempt. IonQ describes this as the first fully compiled, fault-tolerant resource estimate for this attack and notes that the required machine does not currently exist and that the estimated scale aligns with its 2028 technology roadmap. Pre-Task RCE in Google Gemini CLI (CVE-2026-12537) (10 minute read) Novee researchers disclosed a CVSS 10.0 pre-task RCE in Gemini CLI where GEMINI_SANDBOX_PROXY_COMMAND in .gemini/.env reached a host shell via spawn(..., { shell: true }) before the sandbox even started, exposing all parent process secrets (GITHUB_TOKEN, GEMINI_API_KEY) and bypassing four defensive layers. The same pre-task execution pattern appeared in Claude Code (execution before the trust dialog) and Codex (MCP auto-launch before the model), revealing a shared architectural blind spot: workspace configuration influences process authority before model-time guardrails activate. The exploit required no prompt injection—three lines in a configuration file were sufficient for host-level code execution. LG accused of 'egregious invasion of privacy' over TV data collection (3 minute read) Gamers Nexus found LG TVs allegedly recording audio after voice features were enabled, including during standby. Tests reportedly uncovered plaintext transcripts, IP addresses, location data, nearby Wi‑Fi details, and local-device inventories. The team also alleged offline audio capture and a possible remote-code-execution flaw. LG denied ambient recording and said ACR advertising use requires opt-in consent. ⚡ Quick Links Hackers Return $263 Million Stolen From Liquid Network (2 minute read) White-hat hackers drained ~$320 million from Liquid Network's federation wallet over the weekend. First 'Take It Down Act' Sentencing Puts Man Behind Bars for 15 Years (1 minute read) Ohio man James Strahler received the first Take It Down Act conviction, with a 15-year sentence for distributing 3,000+ real and AI-generated child sexual abuse images and cyberstalking victims. Love TLDR? Tell your friends and get rewards! Share your referral link below with friends to get free TLDR swag! https://refer.tldr.tech/dc263000/8 Track your referrals here. Want to advertise in TLDR? 📰 If your company is interested in reaching an audience of cybersecurity professionals and decision makers, you may want to advertise with us. Want to work at TLDR? 💼 Apply here, create your own role or send a friend's resume to jobs@tldr.tech and get $1k if we hire them! TLDR is one of Inc.'s Best Bootstrapped businesses of 2025. If you have any comments or feedback, just respond to this email! Thanks for reading, Prasanna Gautam, Eric Fernandez & Sammy Tbeile Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR Information Security isn't for you, please unsubscribe.