Daily Security Feed - 2026-08-17

Security Feed Digest (2026-08-17)

Hacker News: Best

• AI;DR (AI; Didn’t Read) — Mon, 17 Aug 2026 19:47:15 +0000
• Qwen3.8 27B scores 52 on Artificial Analysis — Mon, 17 Aug 2026 17:25:17 +0000
• Universal Health Coverage Could Save $1T and 114k Lives a Year, Yale Study — Mon, 17 Aug 2026 15:49:57 +0000
• AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake’s Jira — Mon, 17 Aug 2026 14:18:38 +0000
• Apple’s App Tracking Transparency treated its own apps better than rivals — Mon, 17 Aug 2026 14:07:59 +0000
• How to disable or avoid intrusive AI — Mon, 17 Aug 2026 14:07:56 +0000
• Ask HN: Alternatives to GitHub — Mon, 17 Aug 2026 13:59:17 +0000
• A Preview of DuckDB v2.0 — Mon, 17 Aug 2026 13:46:27 +0000
• Incident with Github.com — Mon, 17 Aug 2026 13:40:55 +0000
• GitHub down again? no PR access — Mon, 17 Aug 2026 13:37:28 +0000
• Incident with Github.com — Mon, 17 Aug 2026 13:35:06 +0000
• GPT 5.6 Sol is the best “vision” model OpenAI ever released — Mon, 17 Aug 2026 12:09:42 +0000
• Linear algebra done right — Mon, 17 Aug 2026 05:21:34 +0000
• GIMP Development Update — Mon, 17 Aug 2026 03:08:47 +0000
• On AI regulation and messaging — Mon, 17 Aug 2026 01:59:56 +0000
• The federal keyword lists that canceled billions in research funding — Mon, 17 Aug 2026 00:14:10 +0000
• Reticulum – Decentralized Mesh Network — Sun, 16 Aug 2026 23:59:10 +0000
• Qwen 3.8 27B is excellent, but it defaults to overthinking things — Sun, 16 Aug 2026 23:45:09 +0000
• Anthropic’s ‘watermark’ text adulteration in Claude is a perversion of writing — Sun, 16 Aug 2026 21:53:43 +0000
• Nvidia dramatically reduces amount of OpenAI infra financing it may guarantee — Sun, 16 Aug 2026 21:07:10 +0000
• Stripe will reportedly acquire OpenRouter for $7B+ — Sun, 16 Aug 2026 20:31:16 +0000
• A third world engineer responds to “RISC-V: They should have known better” — Sun, 16 Aug 2026 17:01:07 +0000

BleepingComputer

• Hacker claims 3.6 million Azure account records stolen from major companies — Mon, 17 Aug 2026 15:35:01 -0400
• Pokémon Center data breach exposes customer info, cancels some orders — Mon, 17 Aug 2026 15:12:39 -0400
• Microsoft confirms GitHub is down worldwide — Mon, 17 Aug 2026 10:47:08 -0400
• Certighost and the Privilege Hiding in Your Certificate Authority — Mon, 17 Aug 2026 10:00:10 -0400
• Windows Server 2022 reaches end of mainstream support in 60 days — Mon, 17 Aug 2026 08:33:11 -0400
• Philips and GE investigating Clop ransomware data theft claims — Mon, 17 Aug 2026 07:25:02 -0400
• French tax authority data breach affects 678,000 individuals — Mon, 17 Aug 2026 06:09:48 -0400
• Microsoft working on Defender patch for ShieldBreak zero-day — Mon, 17 Aug 2026 05:05:33 -0400
• SafePal data breach impacts 39,798 customers, stolen info for sale — Sun, 16 Aug 2026 19:47:06 -0400

Darkreading

• Video Call Exploit Chains Two Flaws in Unisoc Modems — Mon, 17 Aug 2026 21:37:23 GMT
• ‘Turf War’ Between Claude Agents Leads to Self-Replicating Malware — Mon, 17 Aug 2026 20:26:34 GMT
• Adam Shostack Talks Hugging Face & PHANTOM-B — Mon, 17 Aug 2026 19:22:56 GMT
• Linux Botnet Evooo1Bot Expands Mirai Capabilities Well Beyond DDoS — Mon, 17 Aug 2026 15:44:34 GMT

The Hacker News

• Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects — Tue, 18 Aug 2026 02:33:04 +0530
• Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection — Tue, 18 Aug 2026 00:14:17 +0530
• Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads — Mon, 17 Aug 2026 23:52:09 +0530
• Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic — Mon, 17 Aug 2026 23:11:06 +0530
• ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More — Mon, 17 Aug 2026 18:53:51 +0530
• How MCP Servers Can Expose Enterprise Secrets — Mon, 17 Aug 2026 17:28:00 +0530
• Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access — Mon, 17 Aug 2026 16:22:34 +0530
• Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies — Mon, 17 Aug 2026 14:59:55 +0530
• Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware — Mon, 17 Aug 2026 13:06:19 +0530
• SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch — Sat, 15 Aug 2026 14:08:46 +0530
• Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner — Sat, 15 Aug 2026 12:54:04 +0530
• Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware — Sat, 15 Aug 2026 00:18:46 +0530
• IAM Compliance Requirements and Best Practices — Fri, 14 Aug 2026 22:49:49 +0530
• Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth — Fri, 14 Aug 2026 18:38:56 +0530
• Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers — Fri, 14 Aug 2026 16:37:45 +0530
• CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Traps — Fri, 14 Aug 2026 16:27:00 +0530
• Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware — Fri, 14 Aug 2026 16:14:34 +0530
• Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups — Fri, 14 Aug 2026 15:08:56 +0530
• China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud — Fri, 14 Aug 2026 13:24:18 +0530
• GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE — Fri, 14 Aug 2026 00:15:12 +0530
• ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories — Thu, 13 Aug 2026 23:47:10 +0530
• New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure — Thu, 13 Aug 2026 20:30:29 +0530
• AmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOS — Thu, 13 Aug 2026 19:13:14 +0530
• WindRelay Android Malware Turns Victims’ Phones Into NFC Relays for Payment Fraud — Thu, 13 Aug 2026 17:23:14 +0530
• North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring — Thu, 13 Aug 2026 17:15:00 +0530

데일리시큐 - 최근인기기사

• 해커들, 만료된 도메인 사들여 악성코드 유포…하루 6만5천개 재등록 — 2026-08-17 16:25:27
• 트럼프, 민간기업에 ‘해킹 반격’ 허용…해외 사이버범죄 조직 직접 공격 — 2026-08-17 16:51:28
• 앤트로픽 클로드가 쓴 글, 보이지 않는 ‘AI 워터마크’ 남는다 — 2026-08-17 11:59:43
• 독일, 사이버 방어 넘어 ‘적극 대응’…적대국 시스템 해킹 허용 추진 — 2026-08-17 19:22:35
• 앤트로픽 클로드 접속 장애…30여 분 만에 복구 — 2026-08-17 19:44:56

보안뉴스 > SECURITY

• 중국 연계 추정 해킹그룹, Babuk 랜섬웨어 변종 유포… VMware vCenter 취약점 악용 — Mon, 17 Aug 2026 18:02:00 +0900
• [배종찬의 보안 빅데이터] 중국의 대만 침공, 군대 아닌 AI 해킹 — Mon, 17 Aug 2026 10:03:00 +0900
• [속담으로 배우는 100가지 보안 습관 85] 소 잃고 외양간 고친다(5)-모르는 계좌 정리하기 — Mon, 17 Aug 2026 09:33:00 +0900