Threat intel
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background.
Source: The Hacker News
Threat intel
Cisco Talos researchers say a highly sophisticated APT tracked as UAT-11473 exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances, to gain unauthorized access and deploy the KeyDrift malware.
AI-written summary Source: Cisco Talos Blog · Fetched
Threat intel
The China-nexus cyber espionage group Volt Typhoon has been attributed to a now-disrupted covert access network called Silent Train that was used for zero-day exploitation and strategic access, according to a Lumen Technologies Black Lotus Labs report shared with The Hacker News.
AI-written summary Source: The Hacker News · Fetched
Threat intel
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown.
Summary from source Source: The Hacker News · Fetched
Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.