Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
English. 121–135 of 239
Firefox Patches 2 Zero-Days Exploited at Pwn2Own Berlin with $100K in Rewards
Mozilla patched 2 Firefox zero-days exploited at Pwn2Own Berlin, risking code execution via JavaScript flaws.
Why CTEM is the Winning Bet for CISOs in 2025
CTEM adoption in 2025 improves risk visibility and enables 3x breach reduction by 2026 via real-time validation.
The Persistence Problem: Why Exposed Credentials Remain Unfixed—and How to Change That
Most secrets exposed since 2022 remain valid in 2025, exposing cloud systems to long-term attacks.
Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures
Noodlophile malware spreads via fake AI editing tools promoted on social media, hitting 62K+ users.
SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models
SonicWall confirms wild exploitation of CVE-2023-44221 and CVE-2024-38475 in SMA100 devices, risking file access and session hijacking.
WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors
Cybercriminals are targeting WooCommerce users with fake patch emails that use IDN homograph spoofing to deliver backdoor malware.
Gladinet’s Triofox and CentreStack Under Active Exploitation via Critical RCE Vulnerability
Hardcoded key flaw in Triofox and CentreStack exploited as zero-day in March, affecting 7 firms.
Chinese Smishing Kit Powers Widespread Toll Fraud Campaign Targeting U.S. Users in 8 States
Smishing kits by Wang Duo Yu enabled toll fraud in 8 U.S. states since Oct 2024, stealing user data via fake E-ZPass pages.
Lovable AI Found Most Vulnerable to VibeScamming — Enabling Anyone to Build Live Scam Pages
Lovable AI scored 1.8 on VibeScamming tests, enabling full scam creation with minimal guardrails, risking mass phishing abuse.
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware
Ivanti patches CVE-2025-22457 exploited by UNC5221 in March 2025, risking remote code execution and credential theft.
SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack
Leaked SpotBugs PAT in November 2024 led to a GitHub supply chain attack, compromising Coinbase in March 2025.
RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features
RESURGE malware exploits Ivanti flaw CVE-2025-0282, adding stealth tools and web shells for persistence.
China-Linked APT Aquatic Panda: 10-Month Campaign, 7 Global Targets, 5 Malware Families
China-linked APT Aquatic Panda targeted 7 organizations in a 10-month espionage campaign using five malware families.
Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed
CVE-2025-30066 supply chain attack compromised tj-actions on March 14, 2025, exposing 218 repositories and leaking credentials.
Cybercriminals Exploit CSS to Evade Spam Filters and Track Email Users' Actions
Hackers exploit CSS in emails to bypass spam filters and track user actions, raising privacy concerns.