Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold.
It was only two months ago that Microsoft patched a then-record 570 vulnerabilities. Then, last month, Microsoft patched some 620 of them. Google and other companies have also published record numbers of vulnerabilities in recent months. Two weeks ago, OpenAI, Anthropic, Amazon Web Services, Google, Microsoft, and 100 companies and organizations published an open letter warning of a narrowing window for patching vulnerabilities ahead of an expected tsunami of AI-enabled attacks that actively exploit them first. The industry is taking the threat seriously by pumping out unprecedented numbers of patches in their software.
Welcome to the new normal
Dustin Childs, a researcher at the Zero Day Initiative, calls the spikes the “new normal” and also cautions that despite them, the damage that’s likely to result from AI-assisted attacks could eventually be substantial.
Dr. Kelly Paulson of Providence Swedish Cancer Institute examines an immunofluorescent image showing T-cells surrounding a lobular breast cancer tumor sample, confirming a finding flagged by Ai2’s AutoDiscovery system. (Ai2 Photo)
An AI system built by Seattle’s Allen Institute for AI (Ai2) has found evidence that a common form of breast cancer, long thought to be a poor candidate for immunotherapy, might actually respond to it.
The finding, produced by Ai2’s AutoDiscovery system, has led to an expanded partnership with the Paul G. Allen Research Center at Providence Swedish Cancer Institute, which is now deploying the AI system on its own patient data to look for similar scenarios across other types of disease.
The announcement Thursday illustrates the broader potential for AI to uncover findings that human researchers, overwhelmed by the massive scale of modern datasets, might otherwise miss.
“Cancer researchers have access to extraordinary datasets, but the challenge is no longer collecting data; it’s understanding everything those datasets have to tell us,” said Dr. Kelly Paulson, who leads the Center for Immuno-Oncology at the Paul G. Allen Research Center, in a statement.
A video released by Ai2 in conjunction with the announcement.
AutoDiscovery, announced by Ai2 in February, works differently from most AI research tools: instead of waiting for a scientist to pose a question, it starts with a dataset and generates its own hypotheses, ranking them by how much they challenge existing assumptions.
In a research paper posted to the preprint server MedRxiv, the Ai2 and Providence Swedish researchers explain that they applied AutoDiscovery to The Cancer Genome Atlas, a federal dataset spanning more than 30 types of cancer.
The system flagged signs that invasive lobular carcinoma, which accounts for about 15% of U.S. breast cancer diagnoses, may be more responsive to immunotherapy than researchers thought. It has largely been left out of immunotherapy trials.
The Providence Swedish team confirmed the finding in a second patient dataset and validated it in tumor tissue in the lab. They cautioned that the findings don’t prove immunotherapy would work in these patients but suggest the question warrants further study.
The collaboration connects two organizations that trace their origins to the late Microsoft co-founder Paul Allen, who founded Ai2 in 2014 and whose $20 million donation helped establish the research center at Swedish in 2024.
A blurry TikTok clip of a fish coming out of a borewell led scientists straight to a brand new species living underground beneath the India-Nepal border. Meet Gangaichthys indonepalicus.
When you just land on a new machine, you often have to sit down and go through every running service just to figure out what’s actually installed and which of those apps might be worth a closer look for credentials in a config somewhere. You can’t skip this part, as it usually gives you something you’ll need later in the engagement, but it eats time. A lot of it.
There are older tools that try to do something similar, but the two we’re covering today are more current. LOLCreds and CredsHound come from the same developer and they cover a huge amount of software.
So let’s see how they work.
LOLCreds
LOLCreds is a website that has 678 different credentials. Some software generates a password when you install it or prompts you to enter it. There are also static credentials that are baked into the product. The D-Link backdoor credentials are a good example of the second kind.
LOLCreds also tracks AI API keys and shows you exactly where to find them on a system. Here’s what it has on Cursor.
MySQL is a more basic example. Its password is often hidden in a config file or sitting as a variable in the env file.
CredsHound
All of that is great when you already know what software you’re hunting through and you’re picking it one at a time. But machines might have dozens of applications running. Software can be removed, but configs stay and password reuse is common. You can use CredsHound for this hunt.
CredsHound is a scanner written in Go. Under the hood it pulls templates from LOLCreds so it can run product aware checks. It has been fully optimized for modern environments, so it will scan everything from DBeaver encrypted databases to OpenCode, GitHub Copilot CLI, Hugging Face, OpenAI and more.
Setting Up
Before you start using the scanner, you need to have Go installed.
There are different ways you can run it, but you always start with updating the template library. The scanner can be used with different privileges, but we’ll use root.
Our system is fresh, so there’s not much on it yet. A box that’s been sitting in prod for a while will have more interesting results, like the one below.
CredsHound can also work with BloodHound to show you the relationships between credentials as a graph. Here’s how to set it up:
Then you import the JSON file into BloodHound and see what comes up.
When you’ve collected many of these JSON files from different machines, you’ll start seeing the architecture of what you’re testing.
A few more commands you’ll find useful:
# Scan the current directory
bash$ > credshound .
# Scan multiple roots
bash$ > credshound ~/project /etc
# Scan only env variables
bash$ > credshound -sources env
# Scan current and process environment variables on Linux
bash$ > credshound -sources env,proc
Summary
Credential hunting is a tedious thing when you do it manually, but you can’t really skip this part. It’s essential to move further. The tools covered can make the whole process easier and the output rich. LOLCreds has a reference library for different products and CredsHound can scan your hosts for secrets with results that you may import into BloodHound.
If you like red teaming, we have our Red Team Operator training, where we cover more tools and techniques to help you emulate real APT work, so you can give a company a realistic stress test and help make it secure.
Take a second and think about how many devices are actually working around you right now. Cameras on street corners, routers sitting inside nearby homes, Bluetooth earbuds in someone’s pocket, cell towers just outside of view. All of that is happening constantly, yet almost none of it is visible to the average person walking by. If you actually wanted to check what devices were nearby today, you would probably end up jumping from one app to another, waiting for each one to load, and still walking away without the full picture. It is slow, it is frustrating, and honestly, it takes all the fun out of exploring what is really going on around you.
A lot of these devices are not just sitting there minding their own business. Many of them are built specifically to track you. A recent video on X showed this. It captured a flock camera taking several pictures of a moving vehicle, running those pictures through some kind of analysis, and then filing everything away in an indexed format.
In the screenshot above, you can see the guy picking up the signal coming straight off the camera, while the camera itself keeps emitting a steady beam of infrared. Here is the full video.
Privacy is not a crime, and you have every right to know what might be watching you. The real challenge has always been figuring out where all of these surveillance devices are hiding. That’s where WireTapper can help us. It pulls data from Wigle, Shodan, and OpenCelliD one at a time. That way, you can see every one of these devices in your area.
WireTapper
WireTapper is a wireless OSINT tool designed to discover, map, and analyze radio based devices using passive signal intelligence. WireTapper detects and correlates signals coming from all the common wireless technologies you would expect to run into. This helps you understand what devices actually exist nearby and where they are likely located all without ever having to actively intrude on anything.
WireTapper can identify leaked Wi-Fi network credentials, and it does this through a privacy-protecting k-Anonymity query scheme, meaning it can check for exposed passwords without ever exposing your own search to the outside world.
Setting Up
Let’s quickly walk through the installation process. It’s a lot simpler than it looks.
kali > git clone https://github.com/h9zdev/WireTapper.git
kali > cd WireTapper
kali > python3 -m venv venv; source venv/bin/activate
kali > pip3 install -r WireTapper.txt
Once that finishes, you will need to grab API keys from each of the services mentioned above. Do not worry too much about Shodan, since its API is paid and WireTapper will still run fine without it. There are two ways to plug these keys into the app. You can either open app.py and enter them directly, or you can use app-env.py instead, which pulls the keys in through environment variables.
After you have picked your method, we recommend also installing python-dotenv, since it makes handling those environment variables a lot smoother.
kali > pip3 install python-dotenv
Working with WireTapper
Once everything is installed, you are ready to start the app and open the web interface.
kali > python3 app.py
The web interface will be waiting for you right here: http://localhost:8080/map-w
This is the dashboard you will land on the moment you open the page. It takes a little while to load everything, so give it a few minutes before you start clicking around. Once it settles in, you can zoom into whatever area you are curious about and start picking apart what is actually hiding there.
Just keep in mind that you need valid API keys for the app to work the way it is meant to. Without them, WireTapper will simply generate dummy data so you can still see how everything normally looks inside it. On Wigle specifically, your email needs to be verified before the connection will work properly.
At the top of the dashboard, you will notice a switch that lets you jump between Wi-Fi uplink and Bluetooth scanners. That is how you filter what you are looking at.
Flip the switch back the other way, and you get the same kind of view but for Wi-Fi devices instead. This side usually includes things like cameras, routers, and other similar devices.
Exporting Results
All of these results can be exported complete with their names and coordinates, in case you decide to use them somewhere else later on.
The example above is just a taste of how those exported results are going to look. You can use this JSON file with other tools.
Summary
There is far more happening around us than most people realize. WireTapper makes it easier to visualize that activity by bringing together information about nearby wireless infrastructure in one interface. If you’re into OSINT, privacy, or wireless security, it’s a handy tool.
OSINT is a valuable skill in many areas, especially when it comes to privacy, cybersecurity, and cyber warfare. The more you understand what information is publicly exposed, the better you can protect yourself and your digital assets. Our Ultimate OSINT Beginner training covers OPSEC, tracking, investigations, and much more across 23 lessons and 7.5 hours of video content.
We’re also hosting a live Remaining Anonymous training on August 11-13 at 3:00 PM UTC for all Subscriber and Subscriber Pro students.
A new Warner Bros. Discovery lawsuit against Amazon, accusing the tech giant of poaching a top HBO Max marketing executive 16 months before her contract expired, comes with an unusual request: a court order barring Amazon from hiring any employee of the media conglomerate as long as they’re under contract.
The suit, filed July 21 in Los Angeles County Superior Court, centers on Pia Barlow, the longtime HBO Max executive who was announced last week as Amazon MGM Studios’ new head of series marketing. Her Warner Bros. Discovery contract ran through October 2027.
She resigned in June and was due to start at Amazon on Aug. 3.
Warner Bros. Discovery accuses Amazon of “hurriedly seeking to pirate away a number of contracted employees,” calling the company a “digital bull in a china shop” that chose to build its entertainment workforce by raiding Hollywood rather than hiring from scratch.
The suit says Amazon tried weeks earlier to recruit another WBD executive under contract through December 2027 and failed, and was pursuing at least one more when the suit was filed.
The complaint says Barlow’s departure “conveyed a troublesome message throughout Plaintiffs’ executive ranks” — that contractual commitments could be disregarded “whenever a larger paycheck appears.”
Amazon declined to comment in response to GeekWire’s inquiry.
It’s led by Mike Hopkins, head of Prime Video and Amazon MGM Studios.
Warner Bros. Discovery itself is in the middle of being sold. Paramount Skydance agreed in February to buy the company for about $81 billion, outbidding Netflix, but 12 state attorneys general sued this month to block the deal, and Paramount has pushed its closing deadline to as late as June 2027.
The complaint goes further, alleging Amazon didn’t just recruit Barlow but also picked her lawyer. Warner Bros. Discovery says the firm now representing her is based less than a mile from Amazon’s Seattle headquarters and “has a well-publicized, long-standing relationship with Amazon as outside litigation counsel,” and that Amazon is paying its fees. The firm isn’t named in the complaint.
Barlow, who lives and works in Los Angeles, is not a defendant.
Warner Bros. Discovery says its lawyers exchanged letters with Amazon and with that attorney before filing suit, demanding Barlow not leave. It makes the fee allegation on “information and belief,” a legal phrase indicating a claim based on inference rather than direct evidence.
Record-Breaking Fixes Tackle Two Exploited Zero-Days On July 14, 2026, Microsoft dropped a record-shattering Patch Tuesday update that delivered 622 security fixes in a single day. This unprecedented volume, which...
Login
