Security Feed Digest (2026-08-05)
BleepingComputer
- OpenAI, Anthropic AI agents targeted real people and systems in cyber tests — Tue, 04 Aug 2026 19:39:59 -0400
- TP-Link patches Omada ZTP flaws allowing hackers to breach networks — Tue, 04 Aug 2026 18:18:20 -0400
- Phishing service spoofs RingCentral to steal Microsoft 365 accounts — Tue, 04 Aug 2026 17:45:36 -0400
- New XCSSET variant targets macOS devs via compromised Xcode projects — Tue, 04 Aug 2026 15:03:09 -0400
- 77 Open VSX extensions found harvesting developer info — Tue, 04 Aug 2026 14:50:55 -0400
- Massive ChainDrop npm supply-chain attack infects hundreds of packages — Tue, 04 Aug 2026 11:24:35 -0400
- Varonis Agent IBAC keeps AI agents within their intended boundaries — Tue, 04 Aug 2026 10:00:10 -0400
- Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts — Mon, 03 Aug 2026 20:17:15 -0400
Darkreading
- Smoke#Screen RMM Takeover Gambit Exposes Threat Actor Playbook — Tue, 04 Aug 2026 18:37:35 GMT
- AI Notetaker Lets Hackers Spy on Government, Corporate Video Calls — Tue, 04 Aug 2026 13:00:00 GMT
- Device Code Phishing Up 1,500% in 2026; Vishing Doubles — Tue, 04 Aug 2026 07:00:00 GMT
The Hacker News
- Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens — Tue, 04 Aug 2026 22:57:39 +0530
- Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks — Tue, 04 Aug 2026 19:00:23 +0530
- Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access — Tue, 04 Aug 2026 18:41:22 +0530
- When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted — Tue, 04 Aug 2026 17:00:00 +0530
- Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent — Tue, 04 Aug 2026 16:46:23 +0530
- New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root — Tue, 04 Aug 2026 16:06:27 +0530
- DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT — Tue, 04 Aug 2026 14:33:23 +0530
- CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises — Tue, 04 Aug 2026 12:30:13 +0530
데일리시큐 - 최근인기기사
- [단독] 롯데카드 전·현직 CISO 모두 정직 확정…4년 동종업계 취업 제한, 금융권 ‘나쁜 선례’ 우려 확산 — 2026-08-04 19:15:29
- 크롬 패스키 노린 신종 공격 공개…악성코드로 지문 인증 우회 — 2026-08-04 03:17:02
- 영국 경찰 법률 데이터베이스 해킹…경찰·사법 관계자 10만 명 이상 정보 유출 — 2026-08-04 00:55:12
- 리버뱅크, 랜섬웨어 공격으로 데이터 탈취…“공격자가 삭제했다고 확인” — 2026-08-04 03:45:38
- LG유플러스, MDR 전문기업 파고네트웍스 인수…전사 보안 체계·기업 보안 사업 강화 — 2026-08-04 09:34:59
- [김승주 교수 칼럼] 한국에도 NIST가 필요하다 — 2026-08-04 09:00:48
- 오픈AI, 차세대 AI ‘아스트라’ 공개…10년 넘은 수학 난제 10건 해결 — 2026-08-04 07:16:29
- 카스퍼스키, 컨테이너 시큐리티 업데이트…DevSecOps·GitHub Actions 보안 강화 — 2026-08-04 09:49:04
- 에브리존-솔리데오, ‘화이트디펜더’ 공공총판 계약… 공공 랜섬웨어 대응 강화 — 2026-08-04 09:28:12
- 지니언스, 상반기 역대 최대 실적…영업이익 294% 급증 — 2026-08-04 09:43:50
보안뉴스 > SECURITY
- [배종찬의 보안 빅데이터] ‘AI 스스로 해킹’하는 시대, 통제 가능한가 — Tue, 4 Aug 2026 17:51:00 +0900
- 호텔 와이파이 노린 러시아 해커, 가짜 업데이트로 감시 악성코드 유포 — Tue, 4 Aug 2026 17:43:00 +0900
- 이글루코퍼레이션, 클라우드·AI 보안 특허 4건 취득… 지능형 보안 고도화 — Tue, 4 Aug 2026 17:40:00 +0900
- 지니언스, 2026년 상반기 매출 249.2억원 ‘역대 최대’… 영업이익 294.3%↑ — Tue, 4 Aug 2026 17:39:00 +0900
- 웹·API 통합 보안 체계 구축, 모니터랩-시큐레터 ‘맞손’ — Tue, 4 Aug 2026 17:36:00 +0900
- [CSW 2026] “이제 AI 에이전트가 새로운 공급망 공격 표면… 속도보다 검증 신경 써야” — Tue, 4 Aug 2026 16:59:00 +0900
- 한국아이태드산업협회-이엘비랩, 국내 ITAD 산업 표준화 등 위한 업무협약 체결 — Tue, 4 Aug 2026 16:23:00 +0900
- LGU+, 보안 기업 파고네트웍스 인수… “위협 탐지·분석·대응 내재화” — Tue, 4 Aug 2026 15:04:00 +0900
- [신간] 역대 대통령 8명을 지킨 경호관의 기록… ‘대통령의 등 뒤 1미터’ 출간 — Tue, 4 Aug 2026 14:59:00 +0900
- 에브리존-솔리데오, ‘화이트디펜더’ 공공총판 계약 체결… 공공 랜섬웨어 방어망 짠다 — Tue, 4 Aug 2026 14:05:00 +0900
Security Feed Digest (2026-08-05)
Hacker News: Best
- Zed DeltaDB — Wed, 05 Aug 2026 18:52:54 +0000
- Discovery Loop — Wed, 05 Aug 2026 16:19:44 +0000
- Demis Hassabis is moving from CEO to Chairman at Google DeepMind — Wed, 05 Aug 2026 16:05:37 +0000
- Changes at Google DeepMind: Demis Hassabis from CEO to Chair, Jeff Dean departs — Wed, 05 Aug 2026 16:05:31 +0000
- Jeff Dean leaving Alphabet — Wed, 05 Aug 2026 16:04:33 +0000
- Cops Used Flock to Track a Man Across State Lines for a Pretextual Weed Search — Wed, 05 Aug 2026 15:20:11 +0000
- Cloudflare OS: an open platform for agents, apps, and work — Wed, 05 Aug 2026 13:58:53 +0000
- Civilian plane crash in New Mexico tied to military GPS blocking — Wed, 05 Aug 2026 11:03:13 +0000
- Eight Myths on Software Engineering and GenAI — Tue, 04 Aug 2026 23:50:52 +0000
- libexpat now funded by the City of Munich for up to 6 months — Tue, 04 Aug 2026 23:18:12 +0000
- Pi’s Minimalism Is Its Advantage — Tue, 04 Aug 2026 22:22:12 +0000
- AI fuels more than half of cybercrime in Africa as scams surge – Interpol — Tue, 04 Aug 2026 22:01:41 +0000
- Thanks FedEx, This Is Why We Keep Getting Phished (2024) — Tue, 04 Aug 2026 21:09:39 +0000
- I am retiring from fulltime writing (& pseudonymity) to launch Guardian Angel — Tue, 04 Aug 2026 20:48:17 +0000
- Oxide Computer raises $445M (SEC Form D) — Tue, 04 Aug 2026 20:13:40 +0000
- In Memory of My Wife, Elise Cawley, with Thanks for 36 Wonderful Years — Tue, 04 Aug 2026 18:51:38 +0000
- Waymo in Dallas — Tue, 04 Aug 2026 18:29:41 +0000
- All of Winona Police Department’s Flock cameras cut down and stolen — Tue, 04 Aug 2026 17:00:28 +0000
- Mistral’s Shieldstral: 3B open-weights model for multimodal moderation — Tue, 04 Aug 2026 16:36:05 +0000
- Apple says more ex-employees may have taken confidential data to OpenAI — Tue, 04 Aug 2026 15:37:42 +0000
- Show HN: Simple algorithm and color space to generate diverse skin tones — Tue, 04 Aug 2026 15:16:22 +0000
- Xbox goes down. You can’t play games you own on disc — Tue, 04 Aug 2026 12:01:02 +0000
- AI-Generated Images Discourage Me from Reading Your Blog — Tue, 04 Aug 2026 11:30:17 +0000
- U.S. used ‘virtually all’ of its long-range precision missiles during Iran war — Tue, 04 Aug 2026 10:59:08 +0000
- Ray Bradbury’s “There Will Come Soft Rains” is set today (2026-08-04) — Tue, 04 Aug 2026 10:13:13 +0000
- DeepSeek V4 Flash on a Single AMD MI300X — Tue, 04 Aug 2026 10:00:55 +0000
- FFmpeg 9.0 — Tue, 04 Aug 2026 09:30:33 +0000
- Harness engineering for self-improvement — Tue, 04 Aug 2026 06:17:54 +0000
- Apple is getting this wrong — Tue, 04 Aug 2026 05:32:13 +0000
- There Will Come Soft Rains (1950) [pdf] — Mon, 03 Aug 2026 23:24:53 +0000
BleepingComputer
- Ransom Cartel ransomware creator sentenced to 16 years in prison — Wed, 05 Aug 2026 19:00:50 -0400
- Canadian pleads guilty to Snowflake cloud data-theft attacks — Wed, 05 Aug 2026 17:53:26 -0400
- Hackers run khunt post-exploitation toolkit from Oracle database — Wed, 05 Aug 2026 15:55:25 -0400
- COLDCARD security audit phishing attack installs remote access tool — Wed, 05 Aug 2026 13:49:41 -0400
- CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws — Wed, 05 Aug 2026 11:51:33 -0400
- Google Blogger locks hundreds of blogs in malware false positive — Wed, 05 Aug 2026 10:59:29 -0400
- How AI-powered phishing killed blocklists for good — Wed, 05 Aug 2026 10:01:11 -0400
Darkreading
- AI Sends Global Crime Syndicates Into Fraud Nirvana — Wed, 05 Aug 2026 23:35:28 GMT
- AI Browsers Vulnerable to ‘PleaseFix’ Zero-Click Agent Hijacking — Wed, 05 Aug 2026 23:30:00 GMT
- No Perfect Fix for AI Browser Prompt Injection Flaws — Wed, 05 Aug 2026 22:18:25 GMT
- CSS: The Hidden Threat Lurking in Your Inbox — Wed, 05 Aug 2026 19:47:55 GMT
- 15 TP-Link Bugs Expose Risks in Zero-Trust Provisioning — Wed, 05 Aug 2026 19:08:36 GMT
- Flaws in Google APK for Python Unlock Agent-to-Agent Attack — Wed, 05 Aug 2026 18:03:31 GMT
- Angola’s Largest Telco Breached Hours Before IPO — Wed, 05 Aug 2026 08:00:00 GMT
The Hacker News
- Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures — Thu, 06 Aug 2026 00:14:31 +0530
- OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes — Thu, 06 Aug 2026 00:03:47 +0530
- Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt — Wed, 05 Aug 2026 21:06:03 +0530
- Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports — Wed, 05 Aug 2026 20:44:05 +0530
- Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug — Wed, 05 Aug 2026 19:57:30 +0530
- Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain — Wed, 05 Aug 2026 19:11:27 +0530
- New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch — Wed, 05 Aug 2026 17:13:27 +0530
- Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk — Wed, 05 Aug 2026 17:13:19 +0530
- Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup — Wed, 05 Aug 2026 16:34:23 +0530
- Leaked n8n API Tokens Exposed Live Instances to Credential Theft — Wed, 05 Aug 2026 16:05:29 +0530
- Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data — Wed, 05 Aug 2026 14:53:03 +0530
- Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself — Wed, 05 Aug 2026 13:23:50 +0530
- CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited — Wed, 05 Aug 2026 13:10:39 +0530
- QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer — Wed, 05 Aug 2026 11:17:19 +0530
데일리시큐 - 최근인기기사
- [블랙햇 USA 2026] 미국 사이버 대응, 방어 넘어 공격 인프라 해체·군사작전 통합으로 — 2026-08-05 11:02:58
- [정보보안 연재소설-로그아웃되지 않는 밤] 제15화 ‘개발환경 개떡같다는 말’ — 2026-08-05 05:27:39
- KISA, 기업별 공격표면 분석 기반 ‘맞춤형 사이버 위협 알림 서비스’ 시범 운영 — 2026-08-05 12:40:01
- [김승주 교수 칼럼] 강제 설치형 보안 프로그램, 금융권만 봐서는 안 된다 — 2026-08-05 16:43:41
- 티오리 ‘진트 코드’, 애플 최신 OS서 CVSS 9.8 커널 취약점 발견 — 2026-08-05 15:40:26
- 웁살라 시큐리티, 블록체인 인텔리전스 기업 최초로 CTA 가입 — 2026-08-05 12:51:28
- 한국퀀텀컴퓨팅, 독일 Data-Warehouse와 PQC 전환 플랫폼 사업 본격화 — 2026-08-05 12:57:57
- 나루씨큐리티, KISA와 중소기업 보안 사각지대 해소 나선다 — 2026-08-05 15:37:29
- 레드햇, AI 안전·거버넌스 자동화 오픈소스 프로젝트 ‘아사고’ 출범 — 2026-08-05 15:34:05
- [정보보안 연재소설-로그아웃되지 않는 밤] 제16화 ‘개발환경 개떡같다는 말’ — 2026-08-05 16:53:17
보안뉴스 > SECURITY
- “스스로 우회로 찾는다” 中 해커 ‘딥시크’ 악용한 자율형 AI 해킹 적발 — Wed, 5 Aug 2026 17:36:00 +0900
- “AI 시대 인증 패러다임 바꾼다”… 패스워드리스 얼라이언스 포럼 콘퍼런스 개최 — Wed, 5 Aug 2026 17:02:00 +0900
- 영국 경찰 법률 데이터베이스 해킹, 경찰 등 13만5000명 정보 유출 주장 — Wed, 5 Aug 2026 16:41:00 +0900
- 나루씨큐리티, KISA와 손잡고 전국 중소기업 보안 사각지대 해소 — Wed, 5 Aug 2026 16:36:00 +0900
- KISA, 기업 맞춤형 사이버 위협 알림 서비스 개시… 자산 보호 밀착 지원 — Wed, 5 Aug 2026 16:03:00 +0900
- “AI 공격 대응, 우선순위 선별부터 자동화까지” 벌른체크, 증거 기반 인텔리전스 제시 — Wed, 5 Aug 2026 15:22:00 +0900
- 세이퍼존, ISEC 2026서 생성형 AI 특화 ‘통합 DLP’ 아키텍처 공개 — Wed, 5 Aug 2026 15:15:00 +0900
- 미네소타 상수도 공격 이후 확대된 미국 OT 사이버공격… 최소 7개주 피해 — Wed, 5 Aug 2026 13:12:00 +0900
- 안랩, 아태지역 엔드포인트 보안 ‘경쟁전략 리더십’ 선정 — Wed, 5 Aug 2026 11:47:00 +0900
- 티오리 ‘진트 코드’(Xint Code), 애플 OS서 CVSS 9.8점대 취약점 발견 — Wed, 5 Aug 2026 11:46:00 +0900