Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
136–150 of 987
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Expel links CylindricalCanine to DigiCert's April 2026 breach, where stolen certificates were used to sign Zhong Stealer and 60 were revoked.
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
Three malicious RubyGems packages in the SleeperGem attack skip CI runners, target developer machines, and install persistent native malware.
Product showcase zonealarm mobile security adds customizable content filtering to mobile security
Product showcase zonealarm mobile security adds customizable content filtering to mobile security
Mozilla open source ai adoption report
Mozilla open source ai adoption report
Sophos Fusion : un rebranding pour un tournant agentique
En parallèle d'évolutions architecturales censées favoriser l'orchestration agentique, Sophos rebrande sa console de gestion.
Microsoft Patches a Record 570 Security Flaws – Krebs on Security
Microsoft Patches a Record 570 Security Flaws – Krebs on Security
Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security
Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of July 11, 2026.
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
CISA adds exploited iCagenda and Balbooa Forms flaws to KEV after reported zero-day attacks enabled PHP uploads and remote code execution on sites.
Colocation for ai workloads report
Colocation for ai workloads report
GhostLock : cette faille Linux vieille de 15 ans offre un accès root sur la majorité des distributions
Découverte à l'aide d'une IA, GhostLock (CVE-2026-43499) est une faille du noyau Linux présente depuis 2011. Elle permet à un utilisateur local de devenir root.
FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security
FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security
Sysdig clocks first documented case of agentic ransomware
The AI agent didn’t accomplish every step in the late June 2026 attack, but it allowed the threat actor to significantly reduce complexity, speed up the tempo and gain operational advantages.
Identity: The operational control plane for agentic AI
Existing security controls weren't designed for AI agents. Static credentials and standing privileges aren't sufficient for an emerging model where organizations need to rapidly authorize, limit, and revoke permissions from autonomous agents, sometimes more than once within a single workflow.
SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing
Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude Code and OpenClaw.