Daily Security Feed - 2026-07-25

Security Feed Digest (2026-07-25)

Hacker News: Best

• Claude Opus 5 — Fri, 24 Jul 2026 16:57:41 +0000
• Be skeptical of OpenAI’s rogue hacker agent story — Fri, 24 Jul 2026 16:33:31 +0000
• Government orders GitHub to remove Bluetooth-based chat app Bitchat: Jack Dorsey — Fri, 24 Jul 2026 14:41:59 +0000
• Nvidia, Microsoft, Meta warn against overregulating open-weight models — Fri, 24 Jul 2026 13:32:30 +0000
• Half-Life 2 running natively on HaikuOS — Fri, 24 Jul 2026 12:53:59 +0000
• Em dashes are amazing — Fri, 24 Jul 2026 12:40:27 +0000
• My security camera shipped a GitHub admin token in its login page — Fri, 24 Jul 2026 11:54:41 +0000
• Flux 3 X Mimic: The Next Generation of Video-Action Models — Fri, 24 Jul 2026 09:31:48 +0000
• If coding has been solved, why does software keep getting worse? — Fri, 24 Jul 2026 09:08:17 +0000
• It’s getting harder to focus every day — Fri, 24 Jul 2026 08:18:30 +0000
• Flux 3 — Fri, 24 Jul 2026 06:17:08 +0000
• Claude Cookbook — Fri, 24 Jul 2026 05:09:15 +0000
• 98.css — Thu, 23 Jul 2026 22:30:29 +0000
• Show HN: Echo – Fable-level results at 1/3 the cost using open-weight models — Thu, 23 Jul 2026 19:26:01 +0000
• The arguments against open source AI are bad — Thu, 23 Jul 2026 16:49:57 +0000
• Why Software Factories Fail (or: harness engineering is not enough) — Thu, 23 Jul 2026 15:18:48 +0000
• Learn OpenGL, extensive tutorial resource for learning Modern OpenGL — Thu, 23 Jul 2026 14:53:34 +0000
• I regret migrating to Codeberg — Thu, 23 Jul 2026 14:06:47 +0000
• DARPA, U.S. Air Force fly AI-controlled F-16 — Thu, 23 Jul 2026 13:51:36 +0000

BleepingComputer

• OnTrac notifies customers of data breach after network hack — Fri, 24 Jul 2026 15:55:01 -0400
• Hermes AI agent used to automate attack on Thai Finance Ministry — Fri, 24 Jul 2026 15:09:09 -0400
• Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts — Fri, 24 Jul 2026 13:50:37 -0400
• Microsoft blames massive Microsoft 365 outage on maintenance bug — Fri, 24 Jul 2026 11:41:44 -0400
• Chick-fil-A data breach affects more than 13,000 customers — Fri, 24 Jul 2026 10:04:29 -0400
• Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack — Fri, 24 Jul 2026 10:01:11 -0400
• Europol flags 4,340 URLs for removal in ‘The Com’ crackdown — Fri, 24 Jul 2026 08:56:53 -0400
• Man gets six years for hacking 750 women’s Snapchat accounts — Fri, 24 Jul 2026 07:17:19 -0400
• Clop ransomware targets Windchill, FlexPLM in data theft attacks — Fri, 24 Jul 2026 03:36:39 -0400

Darkreading

• CISOs vs. Boards: Myth or Misunderstanding? — Fri, 24 Jul 2026 21:31:53 GMT
• Escape Artists: ‘Incorrigible’ AI Models Resist Rehabilitation — Fri, 24 Jul 2026 19:45:02 GMT
• Vatican’s Official Prayer App Leaks 700K+ Global Users’ PII — Fri, 24 Jul 2026 13:00:00 GMT
• Default Azure Automation Setting Enables Cross-Tenant Identity Takeover — Fri, 24 Jul 2026 12:48:16 GMT
• Europe’s Multilingual Reality Exposes AI Security Gaps — Fri, 24 Jul 2026 07:00:00 GMT

The Hacker News

• BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery — Fri, 24 Jul 2026 20:42:35 +0530
• Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller — Fri, 24 Jul 2026 19:45:21 +0530
• ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link — Fri, 24 Jul 2026 17:23:55 +0530
• Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers — Fri, 24 Jul 2026 17:15:17 +0530
• Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do — Fri, 24 Jul 2026 17:00:00 +0530
• Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry — Fri, 24 Jul 2026 15:45:29 +0530
• Golden Chickens Resurfaces With Four New Malware Families and Modular Implants — Fri, 24 Jul 2026 15:39:24 +0530
• NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats — Fri, 24 Jul 2026 13:11:06 +0530
• Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say — Fri, 24 Jul 2026 12:28:27 +0530
• Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks — Fri, 24 Jul 2026 12:20:57 +0530

데일리시큐 - 최근인기기사

• 클로드 코워크 샌드박스 탈출 취약점…맥 전체 파일 접근 가능 — 2026-07-24 07:17:42
• [보안이슈] “제조사가 만든 취약점, 왜 CISO가 책임지나”…보안기업의 PSIRT·패치 기한 제도화 요구 확산 — 2026-07-24 13:02:14
• [CISO 조찬] “믿었던 계정·보안솔루션·VPN이 뚫렸다”…CISO가 직면한 ‘신뢰 붕괴와 속도 격차’ — 2026-07-24 13:42:05
• [CISO 조찬] 켄 바그날 CEO, 사후 대응에서 선제 방어로…AI 시대 CISO 대응 전략 제시 — 2026-07-24 14:45:33
• [정보보안 연재소설-로그아웃되지 않는 밤] 제10화 ‘EOS의 유령’ — 2026-07-24 13:21:07
• 벨로크, 시큐어키와 인증 솔루션 조달 총판 계약…공공·금융 시장 공략 — 2026-07-24 13:50:29
• 메가존클라우드-아크릴, AI 인프라 사업 확장 위한 파트너십 체결 — 2026-07-24 15:36:02
• 데이터브릭스, 마이크로소프트와 2030년대까지 파트너십 연장 — 2026-07-24 14:21:32
• 쿠도커뮤니케이션, 포항시 AI 기반 안전보건 통합관리시스템 구축 완료 — 2026-07-24 14:10:44
• 위즈코리아, iM뱅크 개인정보보호 통합 플랫폼 구축 사업 수주 — 2026-07-24 15:28:11

보안뉴스 > SECURITY

• AI 해커, 인간과 겨뤄 18위… 시사점은? — Fri, 24 Jul 2026 18:05:00 +0900
• 벨로크, 시큐어키 조달 총판 계약 체결… 공공 ‘패스워드리스’ 정조준 — Fri, 24 Jul 2026 16:29:00 +0900
• [ISEC 2026 미리보기] 프라이빗테크놀로지, N2SF 시대 맞춤형 ‘AI 보안 허브’ 전략 제시 — Fri, 24 Jul 2026 16:14:00 +0900
• [ISEC 2026 미리보기] 세이퍼존, 네트워크 AI DLP 출시 — Fri, 24 Jul 2026 16:13:00 +0900
• 팔로알토, 엠브레이스 인수로 관제 플랫폼 확장 — Fri, 24 Jul 2026 16:08:00 +0900
• 공중화장실 불법촬영 탐지 의무화… 지슨 “제도가 시장 열었다” — Fri, 24 Jul 2026 16:07:00 +0900
• [카드뉴스] 법안 강화에도 데이터는 지하로… 추적 불가능한 암호화폐 거래로 진화한 음성망 — Fri, 24 Jul 2026 15:42:00 +0900
• 외교부 해킹, 현실화된 공급망 위협… 공공·민간 아우른 대응 체계 필요 — Fri, 24 Jul 2026 14:01:00 +0900
• 美 민관 사이버 위협 정보 공유 법적 리스크 없앤다… 관련 책임 면제 법안 하원 통과 — Fri, 24 Jul 2026 13:53:00 +0900
• 올해 코드게이트 최정상 해커는 ‘BunkyoWesterns’와 ‘김준원’ — Fri, 24 Jul 2026 11:53:00 +0900