2026

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories 2026-07-16 at 18:41 By A lot of this week’s trouble starts with something that looks close enough. A familiar repo. A useful installer. A harmless sync setting. Then the handoff goes bad, the box starts talking to someone else, and the damage […]

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer 2026-07-16 at 18:27 By n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more than one external token issuer, it matched an incoming JWT to a local user on the sub claim alone and […]

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands 2026-07-16 at 18:27 By Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that’s been spreading via websites infected with ClickFix lures since late April 2026. “The malware is full-featured, lightweight, and modular,” Elastic Security Labs researcher Cyril François said […]

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password 2026-07-16 at 18:27 By ClickLock Stealer, a new macOS infostealer, answers a victim’s refusal by killing their apps on a loop until they hand over the login password. It arrives as a command pasted into Terminal, asks for the password behind a […]

20+ Hijacked Government Websites Became
an Attack Channel 2026-07-16 at 18:27 By More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma campaign uncovered by ANY.RUN, a leading provider of interactive malware analysis and threat intelligence solutions. The investigation revealed previously undocumented backdoor behavior, hidden infrastructure relationships, and […]

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands 2026-07-16 at 18:27 By Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click “Buy Now” instead. Ask a coding assistant to apply a maintainer’s fix from a GitHub thread, […]

20+ Hijacked Government Websites Became
an Attack Channel 2026-07-16 at 16:41 By More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma campaign uncovered by ANY.RUN, a leading provider of interactive malware analysis and threat intelligence solutions. The investigation revealed previously undocumented backdoor behavior, hidden infrastructure relationships, and […]

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands 2026-07-16 at 16:41 By Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click “Buy Now” instead. Ask a coding assistant to apply a maintainer’s fix from a GitHub thread, […]

Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor 2026-07-16 at 16:41 By An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm, along with a previously unreported backdoor dubbed Stupig. Daxin (“srt64.sys”), as the kernel-mode rootkit is referred to, was first documented […]