Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 24, 2026.
English. 256–270 of 888
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
36 npm packages disguised as Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
Rh isac enterprise security spending report
Rh isac enterprise security spending report
Wyden warns Social Security chief: Trump’s voter database is ‘blatant voter suppression’
The Senate Democrat said that the SSA following Trump’s executive order would indicate “willing participation” in the administration’s midterm elections scheme.
EvilTokens abuses Microsoft device code flow for account takeovers
A new phishing-as-a-service (PhaaS) campaign is abusing Microsoft's device code authentication flow to gain unauthorized access to user accounts. Sekoia researchers first spotted the toolkit "EvilTokens" that lets attackers capture authentication tokens by tricking users into completing a…
SentinelOne autonomous detection blocks trojaned LiteLLM triggered by Claude Code
SentinelOne AI stopped a LiteLLM supply chain attack in seconds, blocking malicious code automatically without human intervention. SentinelOne’s AI-based security detected and blocked a supply chain attack involving a compromised LiteLLM package.
Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign
Three China-linked clusters targeted a Southeast Asian government in 2025, deploying multiple malware families to secure persistent access.
Smart home cybersecurity recovery guidance gap
Smart home cybersecurity recovery guidance gap
‘CanisterWorm’ Springs Wiper Attack Targeting Iran – Krebs on Security
‘CanisterWorm’ Springs Wiper Attack Targeting Iran – Krebs on Security
Russian hackers signal phishing campaign
Russian hackers signal phishing campaign
Gidi cohen bonfy ai agent security
Gidi cohen bonfy ai agent security
Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems
CVE-2025-32975 exploited since March 2026 on unpatched KACE SMA systems, enabling admin takeover and payload delivery.
FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks
Russian-linked phishing hits thousands of messaging accounts via fake support tactics, enabling impersonation and data access.
Feds Disrupt IoT Botnets Behind Huge DDoS Attacks – Krebs on Security
Feds Disrupt IoT Botnets Behind Huge DDoS Attacks – Krebs on Security
Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse
Android 17 blocks non-accessibility apps from the Accessibility API in Advanced Protection Mode, reducing malware abuse and the attack surface.
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
Modified AuraInspector scans misconfigured Salesforce Experience Cloud sites, extracting CRM data and enabling targeted vishing campaigns.