Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 24, 2026.
421–435 of 1056
GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs
GlassWorm malware returns in VS Code extensions, hiding via Unicode and reviving itself through blockchain.
Microsoft Uncovers 'Whisper Leak' Attack That Identifies AI Chat Topics in Encrypted Traffic
Microsoft’s Whisper Leak shows encrypted AI chats can secretly reveal user topics through subtle traffic patterns.
Sqlmap open source sql injection database takeover tool
Sqlmap open source sql injection database takeover tool
Ai driven security tools video
Ai driven security tools video
North Korean companies, people sanctioned for money laundering from cybercrime, IT worker schemes
The Treasury Department on Tuesday sanctioned eight people and two companies it accused of laundering money obtained from cybercrime and IT worker schemes to fund North Korean government objectives. According to the department, over the last three years North Korea-linked cybercriminals have stolen over $3 billion,…
SesameOp: New backdoor exploits OpenAI API for covert C2
Microsoft found a new backdoor, SesameOp, using the OpenAI Assistants API for stealthy command-and-control in hacked systems. Microsoft uncovered a new backdoor, named SesameOp, that abuses the OpenAI Assistants API for command-and-control, allowing covert communication within compromised systems.
New backdoor ‘SesameOp’ abuses OpenAI Assistants API for stealthy C2 operations
In a newly uncovered campaign, threat actors embedded a previously undocumented backdoor, dubbed SesameOp, which exploits the OpenAI Assistants API for relaying commands and exfiltrating results. According to researchers at Microsoft, the campaign was active for months before detection, and relied on obfuscated…
La cyber bouscule le marché du SD-WAN
Le rôle du SD-WAN est en train de pivoter : assurer la protection des données de l’entreprise, jusqu’aux portes du datacenter.
New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South Korea
New HttpTroy backdoor by Kimsuky targets South Korea using VPN invoice lure, achieving full system control.
Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody – Krebs on Security
Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody – Krebs on Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 69
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques Uncovering Qilin attack methods exposed through…
BadCandy Webshell threatens unpatched Cisco IOS XE devices, warns Australian government
Australia warns of attacks on unpatched Cisco IOS XE devices exploiting CVE-2023-20198, allowing BadCandy webshell install. The Australian Signals Directorate (ASD) warns of ongoing attacks on unpatched Cisco IOS XE devices exploiting CVE-2023-20198, allowing BadCandy webshell infections and admin takeover.
183 millions d'identifiants volés, mais rassurez-vous, Google n'a pas été piraté !
Une fuite de données contenant les informations de 183 millions de comptes a été dévoilée, mais il ne s'agit pas de comptes Gmail et Google n'y est pour rien.
APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign
Transparent Tribe and allied APTs expand cross-platform malware attacks across South and East Asia in 2025.
North Korean Hackers Lure Defense Engineers With Fake Jobs to Steal Drone Secrets
North Korean Lazarus Group targets European defense firms with ScoringMathTea malware in new espionage wave.