Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
91–105 of 173
The Persistence Problem: Why Exposed Credentials Remain Unfixed—and How to Change That
Most secrets exposed since 2022 remain valid in 2025, exposing cloud systems to long-term attacks.
Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures
Noodlophile malware spreads via fake AI editing tools promoted on social media, hitting 62K+ users.
WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors
Cybercriminals are targeting WooCommerce users with fake patch emails that use IDN homograph spoofing to deliver backdoor malware.
Gladinet’s Triofox and CentreStack Under Active Exploitation via Critical RCE Vulnerability
Hardcoded key flaw in Triofox and CentreStack exploited as zero-day in March, affecting 7 firms.
Chinese Smishing Kit Powers Widespread Toll Fraud Campaign Targeting U.S. Users in 8 States
Smishing kits by Wang Duo Yu enabled toll fraud in 8 U.S. states since Oct 2024, stealing user data via fake E-ZPass pages.
Lovable AI Found Most Vulnerable to VibeScamming — Enabling Anyone to Build Live Scam Pages
Lovable AI scored 1.8 on VibeScamming tests, enabling full scam creation with minimal guardrails, risking mass phishing abuse.
SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack
Leaked SpotBugs PAT in November 2024 led to a GitHub supply chain attack, compromising Coinbase in March 2025.
SilentCryptoMiner Infects 2,000 Russian Users via Fake VPN and DPI Bypass Tools
SilentCryptoMiner infects 2,000 users by posing as a restriction bypass tool, leveraging YouTube and Telegram for distribution.
Vo1d Botnet's Peak Surpasses 1.59M Infected Android TVs, Spanning 226 Countries
Vo1d botnet infects 800K+ Android TVs daily, peaks at 1.59M devices, with India’s cases surging 18-fold. Experts warn of escalating cyber threats.
New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now
Two OpenSSH vulnerabilities (CVE-2025-26465, CVE-2025-26466) allow MitM and DoS attacks.
Android's New Feature Blocks Fraudsters from Sideloading Apps During Calls
Android 16 Beta 2 blocks sideloading and accessibility changes during calls to prevent scammers from tricking users into installing malware.
Lazarus Group Deploys Marstech1 JavaScript Implant in Targeted Developer Attacks
Lazarus Group’s Marstech1 malware targets developers, crypto wallets; 233+ confirmed victims globally.
Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection
Researchers discovered two malicious ML models on Hugging Face exploiting “broken” pickle files to evade detection, bypassing Picklescan safeguards.
Malvertising Scam Uses Fake Google Ads to Hijack Microsoft Advertising Accounts
Malvertising targets Microsoft advertisers via fake Google ads, stealing credentials with phishing pages mimicking ads.microsoft.com.
GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities
GamaCopy mimics Gamaredon, using military lures to deliver UltraVNC as "OneDrivers.exe" in Russian spear-phishing.