Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 24, 2026.
Become a free member and compose your press board
136–150 of 544
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
Three malicious RubyGems packages in the SleeperGem attack skip CI runners, target developer machines, and install persistent native malware.
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of July 11, 2026.
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
CISA adds exploited iCagenda and Balbooa Forms flaws to KEV after reported zero-day attacks enabled PHP uploads and remote code execution on sites.
Sysdig clocks first documented case of agentic ransomware
The AI agent didn’t accomplish every step in the late June 2026 attack, but it allowed the threat actor to significantly reduce complexity, speed up the tempo and gain operational advantages.
Identity: The operational control plane for agentic AI
Existing security controls weren't designed for AI agents. Static credentials and standing privileges aren't sufficient for an emerging model where organizations need to rapidly authorize, limit, and revoke permissions from autonomous agents, sometimes more than once within a single workflow.
SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing
Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude Code and OpenClaw.
US lifting export control restrictions on Anthropic’s Mythos, Fable
The company and the Commerce Department say they have reached an agreement that will see the AI models released publicly with new guardrails and classifiers.
Detection engineering: A programmatic approach to identifying cyber threats
Detection engineering, which was once a niche practice among mostly large companies, appears to have evolved into a capability that organizations across industries now consider essential to their security operations. What is detection engineering?
Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content
Weedhack malware targets Minecraft players via YouTube and SEO poisoning since Jan 2026, enabling credential theft and remote access.
Patch the Planet : OpenAI met son IA au service de l'open source
OpenAI étend Daybreak : plugin Codex Security, version complète de GPT-5.5-Cyber et l'initiative open source Patch the Planet. Voici ce qu'il faut retenir.
Scattered Spider Hackers Plead Guilty on Day 1 of Trial – Krebs on Security
Scattered Spider Hackers Plead Guilty on Day 1 of Trial – Krebs on Security
145 Mastra npm Packages Compromised via Hijacked Contributor Account
144 Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
F5 fixes CVE-2026-42530 and CVE-2026-42055 in NGINX Open Source, addressing HTTP/3 and HTTP/2 flaws that could allow remote code execution.
Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw
Palo Alto says CVE-2026-0257 is being exploited to bypass PAN-OS GlobalProtect authentication and create unauthorized VPN sessions.
U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals
Anthropic suspended Fable 5 and Mythos 5 access for foreign nationals after a U.S. directive over national security and jailbreak concerns.
Sort