TL;DR: What Changed This Week in Ransomware Tradecraft Weekly Threat Intel: Ransomware Crews Adopt Agent Tooling Weekly Threat Intel: Ransomware Crews Adopt Agent Tooling Weekly Threat Intel: Ransomware Crews Adopt…
Weekly Threat Intel: OAuth App Abuse, Autumn 2026 CVE Exploitation, and Malware Loader Trends TL;DR: This Week's Threats in One Look OAuth third-party app abuse is this week's dominant initial-access…
{ "@context": "https://schema.org", "@type": "TechArticle", "headline": "Abusing OIDC in CI/CD: A Step-by-Step Tutorial on GitHub Actions Token Trust Chains", "description": "Hands-on tutorial: configure GitHub Actions OIDC federation to cloud IAM,…
Build a safe, vulnerable minikube lab and practice real container escape techniques step by step: privileged pods, hostPath mounts, service account abuse, and node privilege escalation — with verified commands and blue-team detection tips.
Supply-chain compromise of a maintained npm package, active exploitation of autumn KEV CVEs, and infostealer delivery trends — the week’s threat picture and what defenders should do about each.
Edge CVEs under active exploitation, AI-agent abuse patterns, and infostealer cash-out trails — the week’s threat picture and what defenders should do about each.
Build a CTF-style lab that reproduces dependency confusion and namespace squatting — then lock them down with scoped registries, lockfile pinning and reproducible builds.
Sign and verify artifacts step-by-step with Sigstore Cosign: keyless signing, transparency log entries, and admission-time verification in a hands-on lab.
Hijack your own lab: find and exploit BOLA and broken-auth flaws in a vulnerable API using Burp Suite — then learn the authorization checks that actually fix them.
Break your own API with OWASP ZAP: active scanning, authenticated scan contexts and API definitions in a step-by-step DAST lab you can rebuild for any target.
Decode live aircraft ACARS and VDL2 datalink traffic with about $30 of SDR hardware, acarsdec, dumpvdls2 and Wireshark — a complete hands-on radio lab.
Agentic-AI abuse, the fall 2026 Edge CVE wave and infostealer tradecraft — this week’s defensive priorities in one briefing.