Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 24, 2026.
Become a free member and compose your press board
301–315 of 1067
Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069
Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, impacting multiple OS.
Russia Hacked Routers to Steal Microsoft Office Tokens – Krebs on Security
Russia Hacked Routers to Steal Microsoft Office Tokens – Krebs on Security
Claude Mythos : un modèle frontier dédié à la cybersécurité
Anthropic lance Claude Mythos, un modèle d'IA capable de détecter des failles critiques dans les systèmes les plus sécurisés.
Cybercrime losses jumped 26% to $20.9 billion in 2025
The FBI’s annual report on digital crimes exposes a worsening environment. Yet, an unknown number of victims still suffer in the shadows never reporting the crimes they endure.
pcTattleTale stalkerware maker sentence includes fine, supervised release
Bryan Fleming won’t face prison time for a count to which he pled guilty in January, in a rare case of a successful U.S. stalkerware prosecution.
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
36 npm packages disguised as Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
Wyden warns Social Security chief: Trump’s voter database is ‘blatant voter suppression’
The Senate Democrat said that the SSA following Trump’s executive order would indicate “willing participation” in the administration’s midterm elections scheme.
EvilTokens abuses Microsoft device code flow for account takeovers
A new phishing-as-a-service (PhaaS) campaign is abusing Microsoft's device code authentication flow to gain unauthorized access to user accounts. Sekoia researchers first spotted the toolkit "EvilTokens" that lets attackers capture authentication tokens by tricking users into completing a…
SentinelOne autonomous detection blocks trojaned LiteLLM triggered by Claude Code
SentinelOne AI stopped a LiteLLM supply chain attack in seconds, blocking malicious code automatically without human intervention. SentinelOne’s AI-based security detected and blocked a supply chain attack involving a compromised LiteLLM package.
CVE-2026-21643 – Cette faille critique dans FortiClient EMS est exploitée !
D'après Defused, les cybercriminels exploitent activement une faille de sécurité critique située dans la solution FortiClient EMS de Fortinet : CVE-2026-21643.
Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign
Three China-linked clusters targeted a Southeast Asian government in 2025, deploying multiple malware families to secure persistent access.
Sort