Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
English. 136–150 of 239
SideWinder APT Targets Maritime, Nuclear, and IT Sectors Across Asia, Middle East, and Africa
SideWinder APT expands attacks on maritime, nuclear, and IT sectors, rapidly modifying malware to evade detection.
SilentCryptoMiner Infects 2,000 Russian Users via Fake VPN and DPI Bypass Tools
SilentCryptoMiner infects 2,000 users by posing as a restriction bypass tool, leveraging YouTube and Telegram for distribution.
Vo1d Botnet's Peak Surpasses 1.59M Infected Android TVs, Spanning 226 Countries
Vo1d botnet infects 800K+ Android TVs daily, peaks at 1.59M devices, with India’s cases surging 18-fold. Experts warn of escalating cyber threats.
The New Ransomware Groups Shaking Up 2025
Ransomware attacks rose 11% in 2024, with 5,414 incidents and 46 new groups emerging. RansomHub led with 531 attacks.
New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now
Two OpenSSH vulnerabilities (CVE-2025-26465, CVE-2025-26466) allow MitM and DoS attacks.
New “whoAMI” Attack Exploits AWS AMI Name Confusion for Remote Code Execution
Researchers uncover the whoAMI attack, exploiting AWS AMI name confusion for remote code execution.
Android's New Feature Blocks Fraudsters from Sideloading Apps During Calls
Android 16 Beta 2 blocks sideloading and accessibility changes during calls to prevent scammers from tricking users into installing malware.
Lazarus Group Deploys Marstech1 JavaScript Implant in Targeted Developer Attacks
Lazarus Group’s Marstech1 malware targets developers, crypto wallets; 233+ confirmed victims globally.
Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection
Researchers discovered two malicious ML models on Hugging Face exploiting “broken” pickle files to evade detection, bypassing Picklescan safeguards.
Malvertising Scam Uses Fake Google Ads to Hijack Microsoft Advertising Accounts
Malvertising targets Microsoft advertisers via fake Google ads, stealing credentials with phishing pages mimicking ads.microsoft.com.
GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities
GamaCopy mimics Gamaredon, using military lures to deliver UltraVNC as "OneDrivers.exe" in Russian spear-phishing.
Product Walkthrough: How Satori Secures Sensitive Data From Production to AI
Satori secures all data types, automates discovery, enforces access controls, and integrates workflows, mitigating risks from production to AI models.
Hackers Deploy Malicious npm Packages to Steal Solana Wallet Keys via Gmail SMTP
Malicious npm and PyPI packages exfiltrate Solana keys, steal Discord tokens, and wipe project files.
WordPress Skimmers Evade Detection by Injecting Themselves into Database Tables
Malicious JavaScript in WordPress checkout pages steals payment data, hides in wp_options, and exfiltrates encrypted details.
DoJ Indicts Three Russians for Operating Crypto Mixers Used in Cybercrime Laundering
Three Russians indicted for laundering $25M via Blender.io, Sinbad.io, tied to Lazarus and ransomware.