Daily Security Feed - 2026-07-20

Security Feed Digest (2026-07-20)

Hacker News: Best

• Kimi Work — Mon, 20 Jul 2026 17:13:23 +0000
• Jelly UI: Soft-body physics for native HTML form controls — Mon, 20 Jul 2026 17:07:39 +0000
• Kimi K3, Qwen 3.8, and Anthropic’s (Potential) Unravelling — Mon, 20 Jul 2026 15:13:42 +0000
• China’s open-weights AI strategy is winning — Mon, 20 Jul 2026 14:21:47 +0000
• Firefox 153 available with support for Vulkan video decoding, JPEG-XL — Mon, 20 Jul 2026 13:47:13 +0000
• Hacker wipes Romania’s land registry database — Mon, 20 Jul 2026 13:28:33 +0000
• Annoying and alarming things about OpenCode — Mon, 20 Jul 2026 12:45:55 +0000
• The EU is about to sell our most sensitive data to the US for visa-free travel — Mon, 20 Jul 2026 12:14:08 +0000
• Airport Simulator — Mon, 20 Jul 2026 10:30:40 +0000
• Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25 — Mon, 20 Jul 2026 08:13:36 +0000
• Xiaomi-Robotics-1 — Mon, 20 Jul 2026 04:45:15 +0000
• Claude Fable produced a counterexample to the Jacobian Conjecture — Mon, 20 Jul 2026 02:51:16 +0000
• Moonshine: Lets you stream games from your PC to any device running Moonlight — Mon, 20 Jul 2026 00:16:50 +0000
• We want Texans to know their rights — Sun, 19 Jul 2026 22:03:11 +0000
• AI advice made people less accurate but more confident – sudy — Sun, 19 Jul 2026 21:18:10 +0000
• Orion Browser by Kagi — Sun, 19 Jul 2026 19:13:29 +0000
• The Last MPEG-4 Visual Patent Has Expired — Sun, 19 Jul 2026 16:45:17 +0000
• I joined the IndieWeb, here’s what I learned — Sun, 19 Jul 2026 11:14:38 +0000

BleepingComputer

• Estée Lauder discloses data breach via Oracle E-Business flaw — Mon, 20 Jul 2026 18:39:30 -0400
• SonicWall SMA1000 flaws exploited as zero-days to push custom malware — Mon, 20 Jul 2026 18:23:23 -0400
• Hackers steal $23.7 million in crypto from Ostium in off-chain attack — Mon, 20 Jul 2026 18:22:56 -0400
• Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes — Mon, 20 Jul 2026 17:14:42 -0400
• JadePuffer agentic attacks now target AI model data with ransomware — Mon, 20 Jul 2026 17:08:02 -0400
• New HollowGraph malware uses Microsoft Graph for stealthy C2 comms — Mon, 20 Jul 2026 13:43:01 -0400
• An AI SOC Evaluation Guide for Security Leaders — Mon, 20 Jul 2026 10:01:11 -0400
• Hugging Face warns an autonomous AI agent hacked its network — Mon, 20 Jul 2026 07:56:28 -0400
• Microsoft confirms Windows Server Update Services sync delays — Mon, 20 Jul 2026 06:47:28 -0400
• Windows KB5121767 OOB update fixes shutdowns on some Dell PCs — Mon, 20 Jul 2026 06:06:17 -0400
• Critical ServiceNow code execution flaw now exploited in attacks — Mon, 20 Jul 2026 05:29:20 -0400

Darkreading

• ‘WP2Shell’ Opens Millions of WordPress Sites to Remote Takeover — Mon, 20 Jul 2026 21:38:18 GMT
• Remediating Vulnerabilities With LLMs: Inside Ivanti’s Automation Push — Mon, 20 Jul 2026 20:26:56 GMT
• CISOs Feel the Heat Over AI Risk — Mon, 20 Jul 2026 19:07:01 GMT
• Attackers Combo Up Evasion Tactics for BEC Phishing — Mon, 20 Jul 2026 18:30:22 GMT
• Cybersecurity Keeps Events ‘Uneventful’ — Mon, 20 Jul 2026 14:00:00 GMT
• Gold Eagle Clearinghouse Targets Security Gap, But How Is Unclear — Fri, 17 Jul 2026 13:00:00 GMT

The Hacker News

• FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware — Mon, 20 Jul 2026 23:53:03 +0530
• Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign — Mon, 20 Jul 2026 22:59:50 +0530
• HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 — Mon, 20 Jul 2026 20:03:43 +0530
• ⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More — Mon, 20 Jul 2026 19:02:26 +0530
• Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine — Mon, 20 Jul 2026 17:43:39 +0530
• Mythos Didn’t Break Your Security Program. Your Exposure Window Could. — Mon, 20 Jul 2026 17:00:00 +0530
• New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction — Mon, 20 Jul 2026 14:40:56 +0530
• Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs — Mon, 20 Jul 2026 14:37:11 +0530
• World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent — Mon, 20 Jul 2026 10:57:26 +0530
• SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines — Mon, 20 Jul 2026 10:45:39 +0530

데일리시큐 - 최근인기기사

• [이혁중 CISO의 현장 보안 인사이트-8]  보안인증제도 도대체 무엇이 문제일까? — 2026-07-20 08:36:22
• 정보탈취형 원격제어 악성코드 ‘CrystalX RAT’ 발견돼 — 2026-07-20 11:35:24
• AI가 AI를 해킹했다…허깅페이스, 자율 AI 에이전트 공격 받아 — 2026-07-20 17:50:04
• [정보보안 연재소설-로그아웃되지 않는 밤] 제8화 ‘명절 당직’ — 2026-07-20 08:47:48
• [인사] 한국인터넷진흥원 — 2026-07-20 11:23:02
• 쿼드마이너, 정보보호공시 자율 이행…IT 투자액의 11.9% 정보보호에 투입 — 2026-07-20 13:33:37
• 금융보안원, 대학생 대상 금융보안 AI 아카데미 캠프 개최 — 2026-07-20 15:28:07
• 지슨, AI 보안 위협 대응하는 무선 백도어 탐지 시스템 제시 — 2026-07-20 13:09:46
• 나온웍스, 프로토콜 연계 넓힌 일방향 보안 솔루션 CEREBRO-DD V4.0 출시 — 2026-07-20 13:47:20
• 한일 학계-산업계, 도쿄대서 Web3 보안과 실물연계자산 공동연구 논의 — 2026-07-20 13:41:04

보안뉴스 > SECURITY

• [속담으로 배우는 100가지 보안 습관 69] 아는 길도 물어가라(9)-이체 한도 줄여야 하는 이유 — Tue, 21 Jul 2026 08:47:00 +0900
• [ISEC 2026 미리보기] 투씨에스지, 단일 에이전트 통합 보안 ‘BSone’ 출격 — Tue, 21 Jul 2026 08:44:00 +0900
• [ISEC 2026 미리보기] 엑스트라홉, 에이전트 자율적 작동위한 심층 컨텍스트로 에이전틱 SOC 구동 — Tue, 21 Jul 2026 08:42:00 +0900
• 오리엔텀, 이탈리아 링크스재단과 금융 분야 양자 컴퓨팅 맞손 — Mon, 20 Jul 2026 22:32:00 +0900
• 외교부 국립외교원, 온라인 교육 시스템 해킹… 9개월 간 몰라 — Mon, 20 Jul 2026 18:22:00 +0900
• [AI 시대의 인지전-1] 가짜뉴스만 찾다가는 인지전을 놓친다 — Mon, 20 Jul 2026 16:29:00 +0900
• 엔키화이트햇, 국가 공급망 안정화 ‘선도 사업자’ 선정 — Mon, 20 Jul 2026 15:39:00 +0900
• 영국, 틱톡 연령 확인 부실 조사? “아동 온라인 보호 위반 의혹” — Mon, 20 Jul 2026 15:37:00 +0900
• [ISEC 2026 미리보기] 클라우드 보안 본질… 테이텀시큐리티 ‘Tatum CNAPP’ 전시 — Mon, 20 Jul 2026 15:34:00 +0900
• [ISEC 2026 미리보기] 무분별한 AI 도입… 쿼리시스템즈, ‘통제 가능한 AI’ 해법 — Mon, 20 Jul 2026 15:31:00 +0900