Security Feed Digest (2026-10-20)
Hacker News: Best
- Mercury 3: Diffusion at scale — Mon, 19 Oct 2026 17:27:11 +0000
- Android apps running native on macOS — Mon, 19 Oct 2026 16:45:30 +0000
- MiniMax M3.1 Flash — Mon, 19 Oct 2026 16:39:09 +0000
- I no longer care to work on any Ruby gems so I’ve archived all my repositories — Mon, 19 Oct 2026 16:37:10 +0000
- CERN and Mistral sign a statement of intent to establish a strategic partnership — Mon, 19 Oct 2026 15:28:24 +0000
- Wine ported to OpenBSD — Mon, 19 Oct 2026 13:35:34 +0000
- Ask HN: How to deal with shipping AI-written code you don’t understand? — Mon, 19 Oct 2026 11:24:34 +0000
- Alternatives to animal testing are finally taking off — Mon, 19 Oct 2026 11:10:54 +0000
- Let’s Encrypt is adding two additional remote perspectives for domain validation — Mon, 19 Oct 2026 10:53:39 +0000
- Ousted Savannah police officer gave ICE agent husband access to Flock system — Mon, 19 Oct 2026 10:45:14 +0000
- Timestral: Mistral’s time-series foundation models — Mon, 19 Oct 2026 09:59:32 +0000
- I built a drone with only one motor [video] — Mon, 19 Oct 2026 09:05:07 +0000
- Linux 7.3 — Mon, 19 Oct 2026 07:23:57 +0000
- Starcraft: Ashfall — Mon, 19 Oct 2026 01:18:02 +0000
- William Gibson and the trademarking of cyberspace — Sun, 18 Oct 2026 23:37:57 +0000
- If you don’t run your own LLM proxy, how do you know whats going on? — Sun, 18 Oct 2026 21:09:12 +0000
- Hybrid Reasoning Agents: LLM agents that think in latent space, act through text — Sun, 18 Oct 2026 20:48:14 +0000
- Dogs seem to agree with humans that ‘bouba’ is round and ‘kiki’ is spiky — Sun, 18 Oct 2026 01:38:08 +0000
Krebs on Security
- Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site — Mon, 19 Oct 2026 13:48:56 +0000
BleepingComputer
- Nikkei discloses third data breach in a month, 1.8M records exposed — Mon, 19 Oct 2026 17:49:48 -0400
- WordPress SEO plugin Rank Math compromised to backdoor websites — Mon, 19 Oct 2026 17:24:51 -0400
- Hackers hijack AOMEI update servers to secretly spread malware — Mon, 19 Oct 2026 15:40:58 -0400
- Bullhorn takes staffing platform offline to contain cyberattack — Mon, 19 Oct 2026 14:51:13 -0400
- OpenCode hack exposes API keys amid AI distillation attacks — Mon, 19 Oct 2026 13:27:15 -0400
- Microsoft fixes game, app crashes caused by recent Windows update — Mon, 19 Oct 2026 10:55:23 -0400
- Inside the Underground Market for Know Your Client Services — Mon, 19 Oct 2026 10:00:10 -0400
- F5 releases out-of-band patches for critical NGINX vulnerabilities — Mon, 19 Oct 2026 09:49:24 -0400
- Microsoft fixes classic Outlook bug that hid Copilot buttons — Mon, 19 Oct 2026 08:44:44 -0400
- Microsoft: October Windows Server updates break Exchange sign-in, mail flow — Mon, 19 Oct 2026 04:58:41 -0400
Darkreading
- Researchers Infiltrate Microsoft Tech Support Scam Operation — Mon, 19 Oct 2026 21:13:41 GMT
- ‘AdFection’ Turns Ad Impressions Into Zero-Click Spyware Delivery — Mon, 19 Oct 2026 19:55:01 GMT
- ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs — Mon, 19 Oct 2026 19:19:33 GMT
- OnlyFans Copyright Takedowns Expose Compromised Websites — Mon, 19 Oct 2026 14:28:11 GMT
- The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience — Mon, 19 Oct 2026 14:00:00 GMT
The Hacker News
- Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor — Mon, 19 Oct 2026 23:02:13 +0530
- Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor — Mon, 19 Oct 2026 21:58:47 +0530
- ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More — Mon, 19 Oct 2026 19:44:07 +0530
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories — Mon, 19 Oct 2026 18:35:45 +0530
- From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software — Mon, 19 Oct 2026 17:20:00 +0530
- Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic — Mon, 19 Oct 2026 15:36:40 +0530
- Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers — Mon, 19 Oct 2026 11:59:44 +0530
- OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys — Mon, 19 Oct 2026 11:37:08 +0530
데일리시큐 - 최근인기기사
- 78리서치랩, AI 자율 침투테스트 도구 ‘ARTEX’ 수정판 배포…설치·운영 편의성 개선 — 2026-10-19 18:53:59
- [CISO 보안칼럼] 금융권 해킹공격 이후 우리는 제대로 대응하고 있을까? — 2026-10-19 14:44:14
- 한국가스기술공사, 관리자 다중인증 미적용에도 긴급 보안점검 ‘취약점 0건’ — 2026-10-19 18:28:15
- 안랩, 싱가포르 보안 콘퍼런스 ‘GovWare 2026’서 AI 보안 역량 선봬 — 2026-10-19 13:14:09
- 손명수 의원, “은행 고객정보 건당 8,000원에 불법 판매 정황”…금융정보 유통 실태 공개 — 2026-10-19 18:38:23
- 박상혁 의원, 예가람저축은행 등 태광그룹 계열사 전산 위탁 보안관리 지적 — 2026-10-19 18:45:53
- 솔트웨어, 글로벌 보안 기업 Wiz와 파트너십…클라우드·AI 보안 강화 — 2026-10-19 13:33:56
- 스패로우, 일본 ‘시큐리티 데이즈 폴 2026’에 참가…AI 코드 보안 어시스턴트 첫선 — 2026-10-19 12:49:06
- 시큐리티스코어카드, AI 기반 제3자 위험 관리 플랫폼 ‘타이탄 AI’ 발표 — 2026-10-19 11:39:18
- 클라우드네트웍스, 국제 개인정보보호 심포지엄서 ‘AI 통합 거버넌스 프레임워크’ 공개 — 2026-10-19 13:04:21