Daily Security Feed - 2026-10-15

Security Feed Digest (2026-10-15)

Hacker News: Best

• OpenCode 2.0 — Wed, 14 Oct 2026 20:48:24 +0000
• Things to know when you get cancer – 2026 Edition — Wed, 14 Oct 2026 19:26:30 +0000
• Fire at Starlink site in Bulgaria after suspected sabotage in Poland — Wed, 14 Oct 2026 18:37:21 +0000
• Banks are now trying to offload the AI data center debt they just underwrote — Wed, 14 Oct 2026 18:32:52 +0000
• Containment and monitoring failures are to blame for AI hacking reports: experts — Wed, 14 Oct 2026 17:45:23 +0000
• Google is silently linking your phone number across all signed-in accounts — Wed, 14 Oct 2026 16:28:51 +0000
• ICE Planning $100M ‘Nightmare’ Domestic Spy Program — Wed, 14 Oct 2026 16:24:11 +0000
• Passkeys are not a trap — Wed, 14 Oct 2026 15:15:45 +0000
• How Amazon pushes up prices all across the Internet — Wed, 14 Oct 2026 09:28:17 +0000
• Iosevka is an open-source, sans-serif and slab-serif monospace font — Wed, 14 Oct 2026 08:27:59 +0000
• AOSP Source Releases Are So Late Developers Disassemble Libraries to Report Bugs — Wed, 14 Oct 2026 06:18:01 +0000
• Felix Rieseberg Homepage — Wed, 14 Oct 2026 04:42:33 +0000
• Recreational Programming — Tue, 13 Oct 2026 22:33:33 +0000
• Show HN: Guitoro, a virtual guitar you strum with your keyboard — Tue, 13 Oct 2026 19:11:48 +0000
• I posted to HN, and then my website was flooded with AI bot traffic — Tue, 13 Oct 2026 15:25:50 +0000
• The United Kingdom generates less electricity per person than in the 1970s — Tue, 13 Oct 2026 15:12:57 +0000
• Apple’s new ‘Switch to Safari’ campaign details why you should ditch Chrome — Tue, 13 Oct 2026 14:26:08 +0000
• AI models can provably hide arbitrary capabilities — Tue, 13 Oct 2026 02:07:08 +0000

Krebs on Security

• U.K. Sanctions Cryptomus for RU Money Laundering — Wed, 14 Oct 2026 14:22:49 +0000

BleepingComputer

• Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks — Wed, 14 Oct 2026 18:56:47 -0400
• FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested — Wed, 14 Oct 2026 15:41:43 -0400
• Ledger asks sellers across Asia to halt sales after supply-chain attack — Wed, 14 Oct 2026 13:46:50 -0400
• Cisco patches new Secure Email Gateway zero-day exploited in attacks — Wed, 14 Oct 2026 13:29:14 -0400
• Microsoft fixes VPN issues caused by September Windows updates — Wed, 14 Oct 2026 10:27:01 -0400
• The Blind Spots of Agentic Pentesting and How to Close Them — Wed, 14 Oct 2026 10:00:10 -0400
• Global takedown hits network behind 1 billion phishing messages — Wed, 14 Oct 2026 09:12:52 -0400
• CISA warns admins to immediately fix Ivanti flaw exploited as zero-day — Wed, 14 Oct 2026 08:58:07 -0400
• Hirudo Android malware replaces banking apps to evade security checks — Wed, 14 Oct 2026 07:41:20 -0400
• Microsoft: Recent Windows updates may trigger Remote Desktop failures — Wed, 14 Oct 2026 06:48:09 -0400

Darkreading

• Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles — Wed, 14 Oct 2026 21:20:13 GMT
• Yam Store: The Phishing Network Behind a Billion Messages — Wed, 14 Oct 2026 20:57:16 GMT
• Anthropic ‘SneakPeek’ Flaw Is a Silent Zero-Click Threat — Wed, 14 Oct 2026 20:09:42 GMT
• Russian Influence Operation Widely Targeting Latin America — Wed, 14 Oct 2026 13:00:00 GMT
• Ransomware Gangs Embrace Physical Threats, Family Stalking? — Wed, 14 Oct 2026 05:00:00 GMT

The Hacker News

• Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability — Thu, 15 Oct 2026 00:08:56 +0530
• Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App — Wed, 14 Oct 2026 23:08:31 +0530
• Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages — Wed, 14 Oct 2026 22:39:15 +0530
• U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud — Wed, 14 Oct 2026 22:04:31 +0530
• CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts — Wed, 14 Oct 2026 18:00:42 +0530
• curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution — Wed, 14 Oct 2026 17:43:36 +0530
• How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team — Wed, 14 Oct 2026 17:20:00 +0530
• Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days — Wed, 14 Oct 2026 16:49:02 +0530
• Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks — Wed, 14 Oct 2026 16:38:22 +0530
• An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part. — Wed, 14 Oct 2026 16:30:00 +0530
• AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host — Wed, 14 Oct 2026 13:16:57 +0530
• Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave — Wed, 14 Oct 2026 11:22:28 +0530
• Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug — Wed, 14 Oct 2026 10:04:43 +0530
• OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room — Wed, 14 Oct 2026 07:29:25 +0530

데일리시큐 - 최근인기기사

• 프랑스 대형마트 500여 곳 사이버공격…냉장고 온도 50도까지 상승, 식품 폐기·화재 피해 — 2026-10-14 11:17:57
• 이훈기 의원, 쿠팡 개인정보 유출 과징금 불복소송 문제 제기 — 2026-10-14 11:08:41
• 글로벌 해킹보안 컨퍼런스 ‘POC2026’…11월 12~13일 서울 개최 — 2026-10-14 10:38:58
• “정보보호 우수기업 47곳서 개인정보 유출 처분”…김선민 의원, 평가기준 개선 촉구 — 2026-10-14 19:08:29
• 공공기관 개인정보 901만건 유출…10건 중 6건은 업무과실, 징계 권고는 6% 불과 — 2026-10-14 18:08:07
• 농촌진흥청, 농민 개인정보 57만5천건 유출…폐기 확약서 17차례 받고도 관리 부실 — 2026-10-14 18:02:32
• 옵스왓, N²SF 전환 대응…소프트웨어 개발부터 망간 전송까지 보안 연계 — 2026-10-14 14:26:20
• AI 해킹·공급망 공격 시대…오에스비씨, 외부 ‘반입 파일 검증 체계’ 구축 방안 제시 — 2026-10-14 10:56:45
• 도브러너, 11월 25일 ‘CSI 컨퍼런스 2026’ 개최…AI 콘텐츠 활용·보호 전략 공유 — 2026-10-14 13:53:18
• 팔로알토 네트웍스 “AI 공격 속도 대응하려면 보안 통합·자동화 필요” — 2026-10-14 15:28:18