Credential Harvesting Gets Creative, Edge Exploits Proliferate, and Defenders Push Back with Open-Source Tools

Tools

Nuclei Templates Release Updates Detection for Latest Edge and Cloud Vulnerabilities

The open-source scanner Nuclei just dropped templates for newly disclosed flaws in edge devices and cloud services. This means defenders can now automate detection for the exact misconfigurations attackers are actively probing.

GATO: GitHub Actions Enumeration Tool Helps Audit CI/CD Pipeline Security

Praetorian released GATO, an open-source tool to audit GitHub Actions workflows for supply chain risks. With CI/CD pipelines becoming prime targets, this gives builders a way to find hardcoded secrets and overprivileged tokens before attackers do.

Analysis

Chrome DevTools Smuggling via Malicious Extensions Evades Detection

Cadosecurity researchers show how attackers abuse legitimate DevTools protocols through hijacked browser extensions to bypass endpoint security. It's a clever pivot that makes phishing payloads invisible to traditional network monitoring.

News

Multiple Ivanti VPN Flaws Under Active Exploitation in the Wild

CISA confirms threat actors are chaining Ivanti VPN vulnerabilities to breach enterprise networks. If your org runs Ivanti, patch or segment immediately—these are being used in ransomware staging.