Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
16–30 of 239
The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk
Akamai finds the top 5% of enterprise AI users interact at 12 times the rate of the bottom 50%, concentrating shadow AI risk.
- Source
- The Hacker News
ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud
ToxicPanda 2.0 adds 167 remote commands, targets 349 financial institutions, and uses Android accessibility to harvest PINs.
- Source
- The Hacker News
How MCP Servers Can Expose Enterprise Secrets
MCP servers can leak enterprise secrets through plaintext config files or prompt injection. Learn the main risks and how to secure them.
- Source
- The Hacker News
Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access
An unpatched Unisoc modem flaw lets code with a VoLTE foothold modify Android kernel memory on T606, T612, and T7250 chipsets.
- Source
- The Hacker News
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Evooo1Bot exploits known flaws to infect Linux edge devices, then adds SOCKS5 proxying, SSH brute force, credential theft, and DDoS.
- Source
- The Hacker News
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
CISA says attackers are exploiting TeamCity CVE-2026-63077, an unauthenticated RCE flaw that can expose credentials and compromise build pipelines.
- Source
- The Hacker News
Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
Three Hugging Face Diffusers flaws bypass trust_remote_code, letting crafted model repositories execute code during custom pipeline loading.
- Source
- The Hacker News
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
AgentForger could let a phishing link forge, publish, and schedule a rogue ChatGPT Workspace Agent with access to connected apps.
- Source
- The Hacker News
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Expel links CylindricalCanine to DigiCert's April 2026 breach, where stolen certificates were used to sign Zhong Stealer and 60 were revoked.
- Source
- The Hacker News
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
Three malicious RubyGems packages in the SleeperGem attack skip CI runners, target developer machines, and install persistent native malware.
- Source
- The Hacker News
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of July 11, 2026.
- Source
- The Hacker News
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
CISA adds exploited iCagenda and Balbooa Forms flaws to KEV after reported zero-day attacks enabled PHP uploads and remote code execution on sites.
- Source
- The Hacker News
SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing
Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude Code and OpenClaw.
- Source
- The Hacker News
Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content
Weedhack malware targets Minecraft players via YouTube and SEO poisoning since Jan 2026, enabling credential theft and remote access.
- Source
- The Hacker News
145 Mastra npm Packages Compromised via Hijacked Contributor Account
144 Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.
- Source
- The Hacker News