Security Feed Digest (2026-06-23)
BleepingComputer
- WhatsApp phishing attack uses fake business docs to hack PCs — Mon, 22 Jun 2026 18:42:21 -0400
- JaredFromSubway MEV bot hacked in $15 million crypto theft — Mon, 22 Jun 2026 17:52:18 -0400
- FFmpeg fixes PixelSmash flaw in widely used video decoder — Mon, 22 Jun 2026 17:05:01 -0400
- FortiBleed campaign used custom FortiGate sniffer to steal credentials — Mon, 22 Jun 2026 16:01:02 -0400
- Microsoft says Windows 11 26H2 is coming soon, details upgrade process — Mon, 22 Jun 2026 13:41:31 -0400
- Microsoft fixes AutoGen Studio flaw that enabled code execution — Mon, 22 Jun 2026 13:28:57 -0400
- A Glimpse into the “Search Your Target” Market for Stolen Credentials — Mon, 22 Jun 2026 10:05:15 -0400
Darkreading
- Crypto Heist Fueled by Elaborate Fake Reputation-Boosting Campaign — Mon, 22 Jun 2026 16:10:10 GMT
- Novo Nordisk Breach Highlights Software Development Pipeline Risk — Thu, 18 Jun 2026 20:05:47 GMT
The Hacker News
- ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack — Mon, 22 Jun 2026 23:30:48 +0530
- Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants — Mon, 22 Jun 2026 21:43:28 +0530
- 29-Year-Old Squid Proxy Bug ‘Squidbleed’ Can Leak Cleartext HTTP Requests — Mon, 22 Jun 2026 19:59:46 +0530
- New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer — Mon, 22 Jun 2026 18:50:12 +0530
- Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries — Mon, 22 Jun 2026 18:15:08 +0530
- Stop Your Legacy Infrastructure from Hijacking Your AI Agents — Mon, 22 Jun 2026 17:28:00 +0530
- ⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More — Mon, 22 Jun 2026 16:25:10 +0530
- Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices — Mon, 22 Jun 2026 14:41:37 +0530
- AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network — Mon, 22 Jun 2026 12:27:44 +0530
- INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific — Mon, 22 Jun 2026 11:36:53 +0530
데일리시큐 - 최근인기기사
- [보안칼럼-협력형 사이버레인지] AI 시대, 왜 우리의 사이버보안은 여전히 위기에 취약한가 — 2026-06-22 14:36:17
- 한국 노린 공유기 봇넷 ‘아리스팅어’ 확산…해킹 공격 중계지로 악용 — 2026-06-22 22:46:05
- [보안칼럼] AI 에이전트 시대, 우리는 이미 같은 실패를 겪었다 — 2026-06-22 11:21:11
- [이혁중 CISO의 현장 보안 인사이트-4] 숫자 뒤에 숨겨진 보안의 본질: 정보보호 공시제도 — 2026-06-22 11:16:22
- 인터폴 “아태지역 랜섬웨어 공격 13만5000건”…딥페이크 사기도 산업화 — 2026-06-22 23:06:01
- 잇핀, DLT 데이터 저장구조 ITU-T 국제표준화 착수 — 2026-06-22 09:33:59
- 240억 건 계정 정보 인터넷에 노출…인포스틸러가 만든 ‘계정 탈취 저장소’ — 2026-06-22 23:44:37
- 스텔스모어, 6월 30일부터 ‘제21회 OSINT 전문가 교육’ 개최 — 2026-06-22 17:47:29
- 텍사스주 면허 시스템 해킹…308만명 개인정보 노출 — 2026-06-22 22:35:24
- [박나룡 보안칼럼] 좋은 심사원이 되기 위한 노력(Ⅱ)- 부적합보다 중요한 심사의 본질 — 2026-06-22 14:09:19
보안뉴스 > SECURITY
- [PIS FAIR 2026] ‘개인정보 처리방침’ 평가해보니… “생성형 AI 기업 가장 미흡” — Mon, 22 Jun 2026 17:39:00 +0900
- [PIS FAIR 2026] 사전 예방 불가능한 AI 시대… “사후 입증 중심 방어 거버넌스 확립해야” — Mon, 22 Jun 2026 16:25:00 +0900
- [PIS FAIR 2026] “강력한 브레이크가 F1 질주 이끈다” 김홍선 고문이 말하는 AI 시대 개인정보보호 — Mon, 22 Jun 2026 15:08:00 +0900
- 스텔스모어, 제 21회 공개 위협정보(OSINT) 전문가 교육 과정 개최 — Mon, 22 Jun 2026 15:02:00 +0900
- 파이오링크, 잠수함용 국산 스위치로 해군 함정 신기술 전시회 참가 — Mon, 22 Jun 2026 14:42:00 +0900
- 생성형 AI 시대 개인정보 어떻게 지킬까… 서울시 개인정보보호 포럼 개최 — Mon, 22 Jun 2026 14:37:00 +0900
- [PIS FAIR 2026] 개인정보 보호, 사후 제재 중심에서 사전예방 중심으로 전환 — Mon, 22 Jun 2026 14:02:00 +0900
- [PIS FAIR 2026] “로그는 ‘회복’ 출발점, 상세히 남겨달라… AI 통제권 필수” — Mon, 22 Jun 2026 14:01:00 +0900
- 국내 최대 개인정보보호 축제 ‘제15회 개인정보보호페어’ 22일 성황리 개막 — Mon, 22 Jun 2026 13:57:00 +0900
- 고개 숙인 한성숙… “‘모두의 창업’ 정보 유출에 책임 통감, 사과” — Mon, 22 Jun 2026 11:32:00 +0900
Security Feed Digest (2026-06-23)
Hacker News: Best
- Jerry’s Map — Tue, 23 Jun 2026 18:40:22 +0000
- F3 — Tue, 23 Jun 2026 16:53:32 +0000
- AI’s Affordability Crisis — Tue, 23 Jun 2026 15:11:17 +0000
- Show HN: TikZ Editor – WYSIWYG editor for figures in LaTeX — Tue, 23 Jun 2026 14:24:21 +0000
- What we call “age verification” is actually mass surveillance — Tue, 23 Jun 2026 14:04:43 +0000
- Mistral OCR 4 — Tue, 23 Jun 2026 14:03:19 +0000
- Madison Square Garden compiled a list of activists against facial recognition — Tue, 23 Jun 2026 13:36:10 +0000
- Unlimited OCR: One-shot long-horizon parsing — Tue, 23 Jun 2026 11:35:05 +0000
- The Coming Loop — Tue, 23 Jun 2026 11:06:41 +0000
- Israel targeted Gaza children resulting in genocide, UN inquiry says — Tue, 23 Jun 2026 10:16:48 +0000
- Crypto in 2026: Oh, This Is the Bad Place — Tue, 23 Jun 2026 10:04:04 +0000
- Will It Mythos? — Tue, 23 Jun 2026 04:15:04 +0000
- VibeThinker: 3B param model that beats Opus 4.5 on reasoning with novel SFT+GRPO — Tue, 23 Jun 2026 02:01:25 +0000
- 1,700 free online courses from top universities — Tue, 23 Jun 2026 01:54:38 +0000
- In praise of memcached — Tue, 23 Jun 2026 01:15:05 +0000
- GLM-5.2 – How to Run Locally — Mon, 22 Jun 2026 21:21:01 +0000
- Nearly half of LG smart TV apps contain residential proxy SDKs — Mon, 22 Jun 2026 20:48:30 +0000
- Jobs and Software Is Fucked — Mon, 22 Jun 2026 19:47:52 +0000
- Flock-Powered Police Chiefs Stalking Women Shows Why Warrants Are Needed — Mon, 22 Jun 2026 19:13:46 +0000
- Canada plans ‘nuclear renaissance’ with up to 10 reactors built by 2040 — Mon, 22 Jun 2026 19:06:48 +0000
- Steam Machine launches today — Mon, 22 Jun 2026 17:09:51 +0000
- The text in Claude Code’s “Extended Thinking” output — Mon, 22 Jun 2026 14:22:46 +0000
- Moebius: 0.2B image inpainting model with 10B-level performance — Mon, 22 Jun 2026 13:53:02 +0000
- Never Give Them Your Face — Mon, 22 Jun 2026 13:45:48 +0000
- Pledging another $400k to the Zig software foundation — Mon, 22 Jun 2026 13:43:01 +0000
- Show HN: Got sick of ads, so I made my own logic puzzle site — Mon, 22 Jun 2026 12:23:46 +0000
- Codex logging bug may write TBs to local SSDs — Mon, 22 Jun 2026 07:30:17 +0000
- GLM 5.2 vs. Opus — Mon, 22 Jun 2026 07:22:03 +0000
- Deno Desktop — Mon, 22 Jun 2026 05:38:40 +0000
- Danish privacy activist Lars Andersen raided by police — Mon, 22 Jun 2026 04:50:26 +0000
Krebs on Security
- Scattered Spider Hackers Plead Guilty on Day 1 of Trial — Tue, 23 Jun 2026 16:12:49 +0000
BleepingComputer
- Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks — Tue, 23 Jun 2026 17:48:32 -0400
- Tata Electronics confirms cyberattack as hackers leak data — Tue, 23 Jun 2026 17:06:32 -0400
- Windows 11 KB5095093 update rolls out new Point-in-Time restore feature — Tue, 23 Jun 2026 16:22:21 -0400
- Healthtech firm Xolis suffers data breach impacting 1.4 million people — Tue, 23 Jun 2026 15:59:12 -0400
- New macOS ClickFix attack silently mounts DMGs to push infostealer — Tue, 23 Jun 2026 14:30:16 -0400
- Scattered Spider members plead guilty to hacking Transport for London — Tue, 23 Jun 2026 11:31:59 -0400
- The Exploit Doesn’t Exist. You Can Still Prove It Works Against You — Tue, 23 Jun 2026 10:01:11 -0400
- LastPass confirms data breach in Klue supply chain attack — Tue, 23 Jun 2026 09:58:25 -0400
- Webinar: Why email security teams are drowning in alerts — Tue, 23 Jun 2026 08:12:20 -0400
Darkreading
- Scope of Salesforce Attacks Expands as Icarus Leaks Data — Tue, 23 Jun 2026 20:44:09 GMT
- ‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows — Tue, 23 Jun 2026 19:16:42 GMT
- SocGholish Takedown Highlights Malicious TDS Threats — Tue, 23 Jun 2026 13:51:33 GMT
- FortiBleed Attackers Turn Firewalls Into Credential Stealers as Heists Persist — Tue, 23 Jun 2026 12:34:54 GMT
- DifyTap Bugs Let Attackers ‘Wiretap’ AI Chat Histories — Mon, 22 Jun 2026 21:14:11 GMT
- He Thought He Was Secure; His Phone Number Got Stolen Anyway — Mon, 22 Jun 2026 14:12:11 GMT
The Hacker News
- FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation — Tue, 23 Jun 2026 23:50:49 +0530
- Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents — Tue, 23 Jun 2026 20:46:43 +0530
- Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration — Tue, 23 Jun 2026 20:46:40 +0530
- GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns — Tue, 23 Jun 2026 19:52:03 +0530
- Agentic AI: The Weapon That No Longer Needs a Warrior — Tue, 23 Jun 2026 17:00:00 +0530
- Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT — Tue, 23 Jun 2026 14:24:32 +0530
- WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool — Tue, 23 Jun 2026 11:08:40 +0530
- OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws — Tue, 23 Jun 2026 09:26:58 +0530
데일리시큐 - 최근인기기사
- 세무조사 통지서 열었더니 원격제어 악성코드…실버폭스, 기업 대상 APT 공격 확대 — 2026-06-23 08:42:18
- 오픈AI, 사이버 방어 ‘데이브레이크’ 확대…취약점 탐지부터 패치까지 자동화 — 2026-06-23 08:27:08
- 하이크비전, AIoT 제품 개발 전 과정에 보안 적용…2026년 사이버보안 백서 발간 — 2026-06-23 08:46:58
- [데일리시큐 CISO 조찬] 김성현 퓨쳐시스템 상무 “금융AI 보안, 기존 통제의 연장…4개 계층으로 나눠 관리” — 2026-06-23 17:58:13
- 앤앤에스피, ‘앤넷CDS V2.0’ 보안기능확인서 획득 — 2026-06-23 11:25:39
- 한국인 평생 중 29년을 온라인에서 소비…개인정보 노출 위험은 상존 — 2026-06-23 14:55:49
- [데일리시큐 CISO 조찬] “AI는 키 탈취 가속, 양자는 공개키 위협”…키페어, 금융권 PQC 전환 전략 제시 — 2026-06-23 17:40:15
- 스패로우, 인공지능 생성 코드 보안 돕는 ‘스패로우 MCP’ 출시 — 2026-06-23 14:18:12
- 삼성SDS, ‘2026 공공 AI 박람회’서 인공지능 기반 행정 혁신 기술 공개 — 2026-06-23 14:32:28
- [데일리시큐 CISO 조찬] 윤필상 율촌 변호사 “금융회사 AI 도입, 내부통제 체계부터 정비해야” — 2026-06-23 17:29:46
보안뉴스 > SECURITY
- [속담으로 배우는 100가지 보안 습관 47] 낮말은 새가 듣고 밤말은 쥐가 듣는다(7)-우편물 쌓아두면 생기는 위험 — Wed, 24 Jun 2026 08:39:00 +0900
- 2026 IT21 글로벌 컨퍼런스, 7월 2~3일 피스앤파크 컨벤션에서 개최 — Wed, 24 Jun 2026 08:21:00 +0900
- 선박 설계부터 해상 치안까지… 싸이터, AI 기반 ‘해양 사이버보안’ 포트폴리오 제시 — Tue, 23 Jun 2026 16:46:00 +0900
- [PIS FAIR 2026] 해킹으로 알아낸 비리 신고한다는 해커… 레질리언스, 단지 인프라 문제일까? — Tue, 23 Jun 2026 16:35:00 +0900
- “코드 작성 즉시 취약점 검증한다” 스패로우, ‘스패로우 MCP’ 출시 — Tue, 23 Jun 2026 16:13:00 +0900
- “정부에 치명적 사이버 공격 가할 수 있는 AI, 몇 개월 안 등장”… 서방 보안 수장들 경고 — Tue, 23 Jun 2026 15:54:00 +0900
- 트럼프 “실제 활용 가능한 양자컴퓨터 2028년, 양자 위협 대비 2031년까지” 행정명령 — Tue, 23 Jun 2026 15:36:00 +0900
- [PIS FAIR 2026] 서울시 개인정보보호포럼 개최… AI 시대 개인정보보호와 과제 논의 — Tue, 23 Jun 2026 15:24:00 +0900
- [PIS FAIR 2026] 복구 급해 로그 지웠다간 ‘업무상 배임’… CPO가 알아야 할 초동 조치 주의 사항 — Tue, 23 Jun 2026 15:01:00 +0900
- [PIS FAIR 2026] 개인정보위, 개인정보 국외이전 위한 표준계약 마련한다 — Tue, 23 Jun 2026 14:23:00 +0900