Netcrook
06 September 2026
The Hidden Characters That Help Phish Slip Past the Gatekeepers
A Unicode-obfuscation technique associated with AI prompt-injection research is being reused in a high-volume phishing campaign to hide keywords and evade email filters.
Direwolf’s Claim Around myLaurel Leaves More Questions Than Proof
A named target, a victim website, and a long hash can signal extortion activity - but they do not by themselves prove a breach.
Chaos Victim Post Puts Evergen in the Ransomware Spotlight
A public victim listing can signal extortion pressure, but it does not by itself confirm theft, encryption, or the full scope of any incident.
VMware’s Guest-to-Host Crack: Two Flaws Turn Desktop Hypervisors Into Escape Routes
Broadcom has patched two VMware Workstation and Fusion vulnerabilities that could let a privileged guest user reach host-side code execution, showing how virtualization convenience features can become part of the attack surface.
When the Sandbox Cracks: VMware Flaws Put Analyst Hosts in the Blast Radius
Two desktop-hypervisor vulnerabilities, one critical and one high, show how a guest-to-host break can turn a malware lab into a host compromise problem.
Direwolf Lists myLaurel as a New Victim
A ransomware listing names myLaurel and links it to elderly care services, but the technical scope and any real-world impact remain unconfirmed.
Why an Old Editor Still Won the Keyboard War
WordStar’s long life is a sharp reminder that software often survives not because it is fashionable, but because human hands remember it.
The Malware That Leaves After It Leaves: REVSTEALER’s Hidden Second Act
A Windows stealer that deletes itself may sound like a cleanup success, but the real risk is what remains behind: follow-on code that can suppress defenses and push an infected host into mining duty.
When AI Becomes the Signal: Hype, Speed, and the New Cyber Risk Curve
A weekly roundup put two claims in the same frame: an AI model discovering zero-days and autonomous agents moving against an enterprise network in under 10 hours. The technical lesson is less about spectacle than about how fast machine-assisted security work can reshape defense.
Magento’s Unpatched Window: StyleSmuggler Turns a Storefront into a Live Target
A zero-day tied to Magento Open Source and Adobe Commerce is being actively exploited, and the uncomfortable part is that merchants were left waiting for an official fix while third-party mitigations became the only immediate shield.
When a Model Draws the Board, the Real Test Starts at the Bench
OpenAI’s GPT-6 Astra is being presented as capable of turning a schematic into a KiCad PCB, but the harder question is whether a rules-heavy hardware workflow will accept the result.
The Quiet Trick That Lets Apple II Code Wake Up on a Commodore 64
A retro-computing experiment turns a platform mismatch into a compatibility puzzle, with the word "silent" hinting at an unusual path to running old software.