Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 24, 2026.
Become a free member and compose your press board
331–345 of 553
Misconfigured access management systems expose global enterprises to security risks
Global enterprises are facing a serious security crisis as misconfigured Access Management Systems (AMS) expose sensitive employee data and grant potential access to restricted facilities. The vulnerabilities found across healthcare, education, manufacturing, and government industries put organizations at…
The New Ransomware Groups Shaking Up 2025
Ransomware attacks rose 11% in 2024, with 5,414 incidents and 46 new groups emerging. RansomHub led with 531 attacks.
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 35
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. DragonForce Ransomware Group is Targeting Saudi Arabia Massive Botnet Targets M365 with Stealthy Password Spraying Attacks Notorious Malware, Spam Host “Prospero” Moves to Kaspersky…
New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now
Two OpenSSH vulnerabilities (CVE-2025-26465, CVE-2025-26466) allow MitM and DoS attacks.
New “whoAMI” Attack Exploits AWS AMI Name Confusion for Remote Code Execution
Researchers uncover the whoAMI attack, exploiting AWS AMI name confusion for remote code execution.
Android's New Feature Blocks Fraudsters from Sideloading Apps During Calls
Android 16 Beta 2 blocks sideloading and accessibility changes during calls to prevent scammers from tricking users into installing malware.
Lazarus Group Deploys Marstech1 JavaScript Implant in Targeted Developer Attacks
Lazarus Group’s Marstech1 malware targets developers, crypto wallets; 233+ confirmed victims globally.
Thai authorities detain four Europeans in ransomware crackdown
The multi-national law enforcement operation targeted the 8base ransomware gang.
Projecting the next decade of software supply chain security
A 2035 vision includes a shift that combines security and innovation.
Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection
Researchers discovered two malicious ML models on Hugging Face exploiting “broken” pickle files to evade detection, bypassing Picklescan safeguards.
DOJ disbands foreign influence task force, limits scope of FARA prosecutions
Both the task force and FARA were used by the bureau to investigate, charge and disrupt foreign and domestic actors accused of working to influence American policy on behalf of other nations.
Who’s Behind the Seized Forums ‘Cracked’ & ‘Nulled’? – Krebs on Security
Who’s Behind the Seized Forums ‘Cracked’ & ‘Nulled’? – Krebs on Security
Google fixed actively exploited kernel zero-day flaw
The February 2025 Android security updates addressed 48 vulnerabilities, including a kernel zero-day flaw exploited in the wild. The February 2025 Android security updates addressed 48 vulnerabilities, including a zero-day flaw, tracked as CVE-2024-53104, which is actively exploited in attacks in the wild.
Malvertising Scam Uses Fake Google Ads to Hijack Microsoft Advertising Accounts
Malvertising targets Microsoft advertisers via fake Google ads, stealing credentials with phishing pages mimicking ads.microsoft.com.
Backdoor in Chinese-made healthcare monitoring device leaks patient data
US federal agencies have warned that a popular Chinese-made patient monitor device used in medical settings across the US and Europe has a built-in backdoor that leaks patient data to an unauthorized remote server. The backdoor, present also in a rebranded version of the device, also allows the remote server, which…
Sort