Daily Security Feed - 2026-09-26

Security Feed Digest (2026-09-26)

Hacker News: Best

• Ollaya – Ollama for open-source, Jev-style decision models — Fri, 25 Sep 2026 18:33:50 +0000
• U.S. appeals court upholds designation of Anthropic as supply chain risk — Fri, 25 Sep 2026 15:29:25 +0000
• Factorio that you can touch — Fri, 25 Sep 2026 14:24:42 +0000
• First Principles Thinking — Fri, 25 Sep 2026 13:55:37 +0000
• Platform-independent SIMD in Go — Fri, 25 Sep 2026 11:47:06 +0000
• Git-bug: Distributed, offline-first bug tracker embedded in Git — Fri, 25 Sep 2026 11:38:31 +0000
• Ink and Switch interactive homepage — Fri, 25 Sep 2026 09:50:25 +0000
• Dutch governments builds alternative for Microsoft based on NixOS — Fri, 25 Sep 2026 08:06:49 +0000
• Pentium II at 600Mhz with Voodoo 3 Emulated on 86Box with M6 Mac Mini — Fri, 25 Sep 2026 07:27:45 +0000
• Goodbye Google — Fri, 25 Sep 2026 04:52:02 +0000
• What About Rails? — Fri, 25 Sep 2026 02:50:16 +0000
• Show HN: Koi.rest – watch some fish and regain your balance — Thu, 24 Sep 2026 21:33:03 +0000
• California is chasing wealth that has feet — Thu, 24 Sep 2026 20:34:32 +0000
• Opus 5.5 is good at explainer videos — Thu, 24 Sep 2026 20:28:47 +0000
• Show HN: Whiteboard (YC W26) – An open-source IDE for thoughtful software design — Thu, 24 Sep 2026 17:21:36 +0000
• Why is the liver so weirdly regenerative? — Thu, 24 Sep 2026 16:23:00 +0000
• GitHub has not removed malicious imitation software after 3 weeks — Thu, 24 Sep 2026 15:50:26 +0000
• Google’s Project Suncatcher to put ML infrastructure in space — Thu, 24 Sep 2026 13:53:29 +0000
• ‘That’s so AI ‘ What gen Alpha’s biggest insult tells us — Thu, 24 Sep 2026 12:23:41 +0000
• The newest ESP32 can run Linux and it’s getting close to a Raspberry Pi — Thu, 24 Sep 2026 11:08:39 +0000
• Nokia Design Archive (2025) — Thu, 24 Sep 2026 09:49:33 +0000
• Early rogue AI agent activity and attempts to hack found on urlquery.net — Thu, 24 Sep 2026 05:21:10 +0000

Krebs on Security

• U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions — Fri, 25 Sep 2026 21:44:40 +0000

BleepingComputer

• Kiteworks urges 6-hour server shutdown over potential zero-day attacks — Fri, 25 Sep 2026 17:41:07 -0400
• ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw — Fri, 25 Sep 2026 16:57:55 -0400
• Elementor WordPress flaw lets attackers create admin accounts — Fri, 25 Sep 2026 14:13:33 -0400
• CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks — Fri, 25 Sep 2026 13:24:20 -0400
• Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions — Fri, 25 Sep 2026 12:00:00 -0400
• OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex — Fri, 25 Sep 2026 10:54:33 -0400
• With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance — Fri, 25 Sep 2026 10:51:10 -0400
• Microsoft plans to deprecate Windows Deployment Services — Fri, 25 Sep 2026 08:40:59 -0400
• Rydox marketplace admin pleads guilty, faces 22 years in prison — Fri, 25 Sep 2026 07:35:14 -0400
• Microsoft: Recent Windows updates cause desktop loading issues — Fri, 25 Sep 2026 06:30:38 -0400
• Hackers steal $351.6 million in Bitget crypto exchange hack — Fri, 25 Sep 2026 04:33:44 -0400

Darkreading

• AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment — Fri, 25 Sep 2026 18:39:32 GMT
• What We Missed: Google Gemini Joins the AI Escape Party — Fri, 25 Sep 2026 17:56:23 GMT
• Stopping IT Worker Scams Requires Revamped HR Process — Fri, 25 Sep 2026 14:46:13 GMT
• Russia’s Hybrid Cyber-Physical War in Europe Heats Up — Fri, 25 Sep 2026 07:00:00 GMT
• How to Build a SASE Framework for Modern Cybersecurity — Thu, 24 Sep 2026 14:02:43 GMT

The Hacker News

• Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware — Fri, 25 Sep 2026 20:14:41 +0530
• PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence — Fri, 25 Sep 2026 18:48:06 +0530
• The SOC Doesn’t Need to Start Over with Every Alert — Fri, 25 Sep 2026 17:00:00 +0530
• Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise — Fri, 25 Sep 2026 16:05:55 +0530
• Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild — Fri, 25 Sep 2026 15:44:02 +0530
• Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data — Fri, 25 Sep 2026 10:19:22 +0530
• WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV — Fri, 25 Sep 2026 10:16:34 +0530

데일리시큐 - 최근인기기사

• 워드프레스 취약점 공개 수시간 만에 공격…PHP 파일 생성 시도 포착 — 2026-09-25 21:05:37
• 랜섬웨어 공격에 악용된 팀시티 취약점…빌드 서버 점검 시급 — 2026-09-25 14:45:14
• 추석 연휴 택배·경품 사칭 스미싱 주의…KISA·금융권 비상대응 — 2026-09-25 14:24:40
• AI 에이전트 결합한 ‘카르보나토’ 봇넷…노출된 도커 서버 타고 확산 — 2026-09-25 21:12:31
• 개인정보 유출 뒤가 더 문제…불법유통 게시물 3,341건 미삭제 — 2026-09-25 21:31:11