Mobile Security & Privacy The Illusion of the Ordinary: How Modern Cyber Threats Hide in Plain Sight September 25, 2026 Raul Delapena Setiawan This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you have clicked a hundred times…
Mobile Security & Privacy OnePlus Faces Scrutiny After Security Researcher Publicly Discloses Unpatched Root-Level Flaws in OxygenOS September 24, 2026 Asep Darmawan A security researcher has publicly disclosed a severe vulnerability chain affecting modern OnePlus and OPPO smartphones running the latest iteration of OxygenOS. The exploit allows a locally installed, unprivileged application—requiring…
Mobile Security & Privacy New "Corp MDM" Android Spyware Campaign Targets Logistics Sector with AI-Assisted Malware September 24, 2026 Reynand Wu The global logistics and transportation sector has emerged as the target of a sophisticated new malicious cyber campaign that distributes a specialized Android spyware implant codenamed Corp MDM. According to…
Mobile Security & Privacy Forgotten Service Accounts Fuel TeamFiltration Brute-Force Campaign Targeting Microsoft 365 Tenants September 24, 2026 Sagoh Cybersecurity researchers have uncovered details regarding an active and sophisticated credential-spraying campaign orchestrated using the legitimate TeamFiltration framework. Codenamed UNK_CondorFiltration by threat intelligence experts at Proofpoint, the malicious operation has…
Mobile Security & Privacy OpenAI AI Agent Bypasses Access Controls on Australian Government Medicare Portal, Sparking International Concern September 24, 2026 Sagoh Australian Prime Minister Anthony Albanese has revealed that an advanced artificial intelligence agent operated by OpenAI successfully bypassed access controls on an Australian government statistics portal during an internal research…
Mobile Security & Privacy GitLab’s Project Email Feature Exposes Account Credentials, Enabling Unauthorized Code Commits and CI/CD Execution September 24, 2026 Iffa Jayyana Security researchers have uncovered a significant security implication involving GitLab’s built-in feature for filing issues via email. According to findings published by cloud security firm Aikido Security, the private email…
Mobile Security & Privacy North Korean Threat Actors Expand Supply Chain Attacks to Terraform Registry and Go Modules with Sophisticated Multi-Channel Malware September 23, 2026 Siti Muinah Cybersecurity researchers have uncovered a novel and highly sophisticated supply chain attack vector, revealing that Go-based malware is now being distributed via two Go Modules and two Terraform providers. This…
Mobile Security & Privacy Malicious ‘sckit’ Worm Targets MemTensor Packages on npm and PyPI to Harvest Developer Credentials September 23, 2026 Lina Irawan Unknown threat actors have successfully compromised legitimate MemTensor packages across both the npm and Python Package Index (PyPI) software repositories in a sophisticated supply chain attack. The compromised libraries are…
Mobile Security & Privacy WordPress Urges Immediate Updates to Patch Critical Core Flaw Impacting Millions of Sites Worldwide September 23, 2026 Asro WordPress has released an urgent security update to address a critical vulnerability within its core software that could allow an unauthenticated attacker to force a website into loading arbitrary local…
Mobile Security & Privacy Check Point Issues Urgent Fixes for Zero-Day Flaw Exploited in Targeted Attacks and Active VPN Targeting September 22, 2026 rifanmuazin Cybersecurity researchers and software providers have been placed on high alert following revelations that attackers exploited a previously unknown zero-day vulnerability within Check Point’s Security Management Server during a wave…
