We got Microsoft Authenticator to hand over account tokens to a fake Teams app.
The app needed zero Android permissions. It just claimed to be Teams, and Authenticator never checked who was actually asking.
The result: full delegated access to mailbox, files, and calendar through Microsoft Graph.
Full write-up by @ofekdavidlevin with code and PoC: enclave.ai/blog/authmask-…
The app needed zero Android permissions. It just claimed to be Teams, and Authenticator never checked who was actually asking.
The result: full delegated access to mailbox, files, and calendar through Microsoft Graph.
Full write-up by @ofekdavidlevin with code and PoC: enclave.ai/blog/authmask-…
5
5
29
36,110
Enclave retweeted
Suddenly I'm finding myself thinking about GDI+ all over again.
Node2Shell (CVE-2026-111497) is a memory bug in Brotli, the compression library bundled into Node.js, Python, system libs, Envoy and more.
Most teams don't know every place Brotli runs in their stack. It's usually a transitive dependency or an OS package, and pip-audit may not agents scan your code, cloud and servers and show you exactly where you're exposed.
Advisory + free check: app.enclave.ai/threat-feed/CV…
1
2
16
3,915
Enclave retweeted
Node2Shell (CVE-2026-111497) is a memory bug in Brotli, the compression library bundled into Node.js, Python, system libs, Envoy and more.
Most teams don't know every place Brotli runs in their stack. It's usually a transitive dependency or an OS package, and pip-audit may not agents scan your code, cloud and servers and show you exactly where you're exposed.
Advisory + free check: app.enclave.ai/threat-feed/CV…
0
1
9
608
Enclave retweeted
There's never been an easier way to take a vulnerability and see if you're actually exposed.
Node2Shell (CVE-2026-111497) is a memory bug in Brotli, the compression library bundled into Node.js, Python, system libs, Envoy and more.
Most teams don't know every place Brotli runs in their stack. It's usually a transitive dependency or an OS package, and pip-audit may not agents scan your code, cloud and servers and show you exactly where you're exposed.
Advisory + free check: app.enclave.ai/threat-feed/CV…
1
2
12
1,012
Enclave retweeted
This is the quickest way to check your exposure to recent zero days.
1. Connect all your integrations
2. Ask the agents to scan your entire attack surface
3. Get an answer
1. Connect all your integrations
2. Ask the agents to scan your entire attack surface
3. Get an answer
Node2Shell (CVE-2026-111497) is a memory bug in Brotli, the compression library bundled into Node.js, Python, system libs, Envoy and more.
Most teams don't know every place Brotli runs in their stack. It's usually a transitive dependency or an OS package, and pip-audit may not agents scan your code, cloud and servers and show you exactly where you're exposed.
Advisory + free check: app.enclave.ai/threat-feed/CV…
3
2
8
731
Node2Shell (CVE-2026-111497) is a memory bug in Brotli, the compression library bundled into Node.js, Python, system libs, Envoy and more.
Most teams don't know every place Brotli runs in their stack. It's usually a transitive dependency or an OS package, and pip-audit may not agents scan your code, cloud and servers and show you exactly where you're exposed.
Advisory + free check: app.enclave.ai/threat-feed/CV…
Most teams don't know every place Brotli runs in their stack. It's usually a transitive dependency or an OS package, and pip-audit may not agents scan your code, cloud and servers and show you exactly where you're exposed.
Advisory + free check: app.enclave.ai/threat-feed/CV…
During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy.
The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server.
This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE.
More details on the patch and mitigations below:
patchtheplanet.org/brotli
8
8
49
42,051
Enclave retweeted
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. warms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. warms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
22
22
192
491,535
Enclave retweeted
Big need. Makes sense. Will check out.
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. warms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
1
2
4
391
Enclave retweeted
Agent swarms for cyber defense is about to be one of the biggest categories in AI. We are going to have agents reviewing our code and infra, testing every permutation of risk, processing gobs of data, and more.
Security is one of the best use-cases for swarms because it’s an obvious area where more compute in equals more value out. There’s a wide range of testing that people can never get around to - or at least quickly enough - that agents have no problem going after.
Going to be a wild time in cyber.
Security is one of the best use-cases for swarms because it’s an obvious area where more compute in equals more value out. There’s a wide range of testing that people can never get around to - or at least quickly enough - that agents have no problem going after.
Going to be a wild time in cyber.
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. warms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
134
62
630
70,860
Enclave retweeted
Every startup needs to run this now!
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. warms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
2
2
18
1,468
Enclave retweeted
Introducing Threat Feed: a live feed of new vulnerabilities, checked against your code, cloud, and infrastructure.
Knowing whether a disclosure affects you should not require a security team.
@EnclaveAI is now open to everyone.
Knowing whether a disclosure affects you should not require a security team.
@EnclaveAI is now open to everyone.
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. warms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
2
3
17
581
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. warms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. warms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
22
22
192
491,535
Enclave for Open Source is live!
PHP2Shell showed how fast AI-driven research moves: flaws that sat in PHP for over a decade were turned into working exploits in about a week, according to the researchers who found them.
Most open source projects don't have a team that can ng them one.
Enclave contributes up to $10K in credits for security usage.
Apply: enclave.ai/open-source
PHP2Shell showed how fast AI-driven research moves: flaws that sat in PHP for over a decade were turned into working exploits in about a week, according to the researchers who found them.
Most open source projects don't have a team that can ng them one.
Enclave contributes up to $10K in credits for security usage.
Apply: enclave.ai/open-source
13
4
27
109,374
Enclave retweeted
What a day…
The future of cybersecurity is swarms. Swarms of agents attacking and swarms of agents defending.
Or rather, fleets vs. swarms: Governed agents on defense, vs cheap and relentless agents on offense.
Whoever coordinates faster wins.
The future of cybersecurity is swarms. Swarms of agents attacking and swarms of agents defending.
Or rather, fleets vs. swarms: Governed agents on defense, vs cheap and relentless agents on offense.
Whoever coordinates faster wins.
The China state-aligned threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Microsoft Threat Intelligence assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multitenant application. msft.it/6018aakEE
Our investigation found that Storm-0940's use of ARTEX accelerated the speed of compromised application abuse to authenticate to target environments through applications that had already been granted access, allowing the threat actor to operate without requiring an interactive user sign-in. AI-accelerated follow-on activity included reconnaissance, application credential changes, and attempts to modify privileges that could enable expanded or persistent access.
Read our blog for a detailed analysis and indicators of compromise (IOCs), along with Microsoft Defender detections, protection recommendations, and guidance on investigating service principal sign-ins and unexpected application credential or privilege changes.
16
135
1,436
132,368
Enclave retweeted
Cyber is going to be one of the most profound aspects of AI. We now have a tireless workforce that can hunt down, discover, patch, or attack any system and software ever created.
We will use agents to identify the long standing risks in existing systems and infrastructure. Attackers will use agents to accelerate the discovery of gaps in environments. We will equally use agents to defend attacks and discover anomalous patterns to better protect our data, and much more.
We’re entering a new cyber regime, and we’ll probably use 100X more tokens on this loop than we’re imagining right now, because we can scan every log, look at every line of code, look through traffic, and process data at a scale that wasn’t comprehensible before.
More than ever, enterprises are going to care deeply about how they manage their networks, systems, software, data, identity, devices, and more. Agents will largely become the solution to these challenges, but they will keep everyone up in the process.
We will use agents to identify the long standing risks in existing systems and infrastructure. Attackers will use agents to accelerate the discovery of gaps in environments. We will equally use agents to defend attacks and discover anomalous patterns to better protect our data, and much more.
We’re entering a new cyber regime, and we’ll probably use 100X more tokens on this loop than we’re imagining right now, because we can scan every log, look at every line of code, look through traffic, and process data at a scale that wasn’t comprehensible before.
More than ever, enterprises are going to care deeply about how they manage their networks, systems, software, data, identity, devices, and more. Agents will largely become the solution to these challenges, but they will keep everyone up in the process.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
80
61
525
64,809