1.
2.
DAEMON Tools trojanized in supply-chain attack to deploy backdoor
(bleepingcomputer.com)
3.
Popular WordPress redirect plugin hid dormant backdoor for years
(bleepingcomputer.com)
4.
5.
Someone bought 30 WordPress plugins and planted a backdoor in all of them
(news.ycombinator.com)
6.
Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them
(news.ycombinator.com)
7.
Smart Slider updates hijacked to push malicious WordPress, Joomla versions
(bleepingcomputer.com)
8.
PyPI package telnyx has been compromised in yet another supply chain attack
(news.ycombinator.com)
9.
China-Nexus Hackers Skulk in Southeast Asian Military Orgs for Years
(darkreading.com)
10.
Multiple brands of Android tablets shipped with built-in malware
(androidauthority.com)
11.
China-Backed 'PeckBirdy' Takes Flight for Cross-Platform Attacks
(darkreading.com)
12.
Chinese Mustang Panda hackers deploy infostealers via CoolClient backdoor
(bleepingcomputer.com)
13.
DPRK's Konni Targets Blockchain Developers With AI-Generated Backdoor
(darkreading.com)
14.
Konni hackers target blockchain engineers with AI-built malware
(bleepingcomputer.com)
15.
New PDFSider Windows malware deployed on Fortune 100 firm's network
(bleepingcomputer.com)
16.
17.
Chinese state hackers use rootkit to hide ToneShell malware activity
(bleepingcomputer.com)
18.
GhostPoster attacks hide malicious JavaScript in Firefox addon logos
(bleepingcomputer.com)
19.
Running the "Reflections on Trusting Trust" Compiler
(news.ycombinator.com)
20.
APT 'Bronze Butler' Exploits Zero-Day to Root Japan Orgs
(darkreading.com)
21.
Microsoft: SesameOp malware abuses OpenAI Assistants API in attacks
(bleepingcomputer.com)
22.
23.
US spy chief says UK has dropped its Apple backdoor demand
(techcrunch.com)
24.
Docker Hub still hosts dozens of Linux images with the XZ backdoor
(bleepingcomputer.com)
25.
Today's top topics:
apple
google
openai
remarkable
amazon
android authority
anthropic
claude
nvidia
uber