Daily Security Feed - 2026-07-14

Security Feed Digest (2026-07-14)

Hacker News: Best

• Bonsai 27B: A 27B-Class model that runs on a phone — Tue, 14 Jul 2026 17:50:48 +0000
• The Tower Keeps Rising — Tue, 14 Jul 2026 16:57:54 +0000
• S&P Global has lowered Oracle’s creditworthiness from BBB to BBB- — Tue, 14 Jul 2026 16:56:48 +0000
• Measuring Input Latency on Linux: X11 vs. Wayland, VRR, and DXVK — Tue, 14 Jul 2026 16:36:06 +0000
• Are we offloading too much of our thinking to AI? — Tue, 14 Jul 2026 15:18:13 +0000
• Germany set to restrict its Freedom of Information Act — Tue, 14 Jul 2026 11:49:48 +0000
• How to stop Claude from saying load-bearing — Tue, 14 Jul 2026 11:46:02 +0000
• Codex starts encrypting sub-agent prompts — Tue, 14 Jul 2026 11:21:32 +0000
• European “age verification” “app” forcing everyone to use Android or iOS — Tue, 14 Jul 2026 08:34:57 +0000
• Australian energy retailers must offer three hours of free daytime electricity — Tue, 14 Jul 2026 04:31:48 +0000
• Japan develops a method to recover up to 90% of lithium from used EV batteries — Tue, 14 Jul 2026 02:27:20 +0000
• The git history command — Tue, 14 Jul 2026 00:57:11 +0000
• Samsung Health app threatens data deletion if users opt out AI training — Mon, 13 Jul 2026 20:01:43 +0000
• Former NOAA employees built Climate.us to preserve climate data and resources — Mon, 13 Jul 2026 19:57:55 +0000
• Telegram’s t.me domain has been suspended — Mon, 13 Jul 2026 19:52:25 +0000
• Building and shipping Mac and iOS apps without opening Xcode — Mon, 13 Jul 2026 18:22:16 +0000

Krebs on Security

• Microsoft Patches a Record 570 Security Flaws — Tue, 14 Jul 2026 19:22:42 +0000

BleepingComputer

• SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now — Tue, 14 Jul 2026 17:23:24 -0400
• Spanish Police take down €140 million cyber fraud ring, arrest four — Tue, 14 Jul 2026 16:23:09 -0400
• Nearly 300 GitHub repos pose as legit software to push malware — Tue, 14 Jul 2026 15:15:17 -0400
• Microsoft releases Windows 10 KB5099539 extended security update — Tue, 14 Jul 2026 14:49:28 -0400
• Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days — Tue, 14 Jul 2026 14:01:36 -0400
• Windows 11 KB5101650 & KB5099414 cumulative updates released — Tue, 14 Jul 2026 13:41:16 -0400
• Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown — Tue, 14 Jul 2026 12:08:47 -0400
• LastPass, Bitwarden users targeted with fake security alerts — Tue, 14 Jul 2026 11:31:52 -0400
• You Don’t Have to Run an Exploit to Know If You’re Vulnerable — Tue, 14 Jul 2026 10:00:10 -0400
• Microsoft Entra ID gets passkeys default authentication starting September — Tue, 14 Jul 2026 08:49:56 -0400
• New phishing kits target Microsoft 365 accounts, evade MFA — Tue, 14 Jul 2026 08:49:00 -0400
• SAP warns of critical flaws in NetWeaver and Commerce Cloud — Tue, 14 Jul 2026 07:42:21 -0400
• Microsoft starts testing cleaner Windows Search without ads — Tue, 14 Jul 2026 06:47:23 -0400
• US sanctions VPN, malware providers for enabling ransomware attacks — Tue, 14 Jul 2026 05:40:13 -0400

Darkreading

• Records Are Made to Be Broken: Patch Tuesday Raises Triage Stakes — Tue, 14 Jul 2026 21:50:56 GMT
• 6 GHz Wi-Fi Flaws Could Disrupt Critical Systems — Tue, 14 Jul 2026 19:58:31 GMT
• Manage Vendor Risk in a Few Practical Steps — Tue, 14 Jul 2026 17:44:55 GMT
• Frontier AI: The Genie’s Out of the Bottle, but Where’s the Rulebook? — Tue, 14 Jul 2026 16:02:39 GMT
• ClickFix’s Mushrooming Ecosystem Demands New Defense Tactics — Tue, 14 Jul 2026 15:53:54 GMT
• Cursor IDE Auto-Executes Malicious Code in Poisoned Repos — Tue, 14 Jul 2026 13:00:00 GMT

The Hacker News

• Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack — Wed, 15 Jul 2026 01:55:47 +0530
• SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data — Tue, 14 Jul 2026 23:47:57 +0530
• Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads — Tue, 14 Jul 2026 22:57:23 +0530
• LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts — Tue, 14 Jul 2026 22:22:37 +0530
• RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata — Tue, 14 Jul 2026 19:18:07 +0530
• 11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot — Tue, 14 Jul 2026 18:16:18 +0530
• Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks — Tue, 14 Jul 2026 17:25:00 +0530
• How Pentera Turns AI Security Workflows into Validation Engines — Tue, 14 Jul 2026 17:00:00 +0530
• OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials — Tue, 14 Jul 2026 16:51:35 +0530
• Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read — Tue, 14 Jul 2026 14:32:48 +0530
• U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support — Tue, 14 Jul 2026 13:32:33 +0530
• 148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet — Tue, 14 Jul 2026 12:38:36 +0530
• Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity — Tue, 14 Jul 2026 11:49:24 +0530

데일리시큐 - 최근인기기사

• 디지털 폭력 피해자 34% “현실 생활에도 심각한 영향” — 2026-07-14 12:37:34
• 해킹조직 샤이니헌터스, 세일즈포스 ‘신뢰 연결’ 악용해 기업 정보 탈취 — 2026-07-14 17:18:08
• 정부, ‘K-팔란티어’ 만든다…AI·사이버보안 기업에 최대 10조 투자 — 2026-07-14 15:30:26
• 행안부, 고위험 취약점 긴급 패치 장애 발생해도 공무원 책임 면제 — 2026-07-14 15:12:21
• 구글, 국내 기업 AI 전환 돕는 ‘구글 AI 포 비즈니스 2026’ 개최 — 2026-07-14 14:50:03
• 유클릭스, 오라클 AI 데이터베이스@AWS 기반 멀티클라우드 시장 진출 — 2026-07-14 14:25:01
• 소프트플로우, 유럽 사이버복원력법 대응 공급망 보안 세미나 개최 — 2026-07-14 14:05:25
• 프로젝트 캐노피, 전자정부 표준프레임워크 보안 분석 결과 발표 — 2026-07-14 14:18:19
• 구직정보와 대학 성적도 전송 가능해진다…마이데이터 실증 본격화 — 2026-07-14 15:04:30
• 이노그리드, 초전도 양자컴퓨터 통합 모니터링 시스템 개발 착수 — 2026-07-14 13:15:39