Nyroxis – Personal Endpoint Security https://validator.w3.org/feed/docs/rss2.html nyroxis home RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker Blog 16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure ⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices New “Bad Epoll” Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android New Avalon Malware Framework Packs CrownX Ransomware Capabilities North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer European Parliament Member Investigating Spyware Was Hacked With Pegasus PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API Identity Lifecycle Management Wasn’t Built for AI Agents  U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards ⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More 236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers Why Post-Quantum Cryptography Starts With Credentials FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue