Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
November 3, 2026
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says
Endpoint Security
Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says built the backdoor into firmware.
cPGuard Update Channel Hijacked to Push Linux Server Backdoor
An attacker used stolen credentials to push a malicious script through OPSSHIELD's cPGuard update channel, installing a backdoor and stealing root SSH keys.
Android November Bulletin Fixes 216 Flaws, Three Zero-Click RCEs
Google's November Android bulletin patches 216 vulnerabilities, including CVE-2026-58868 and two more zero-click critical RCE bugs; no exploitation reported.
Public Exploit Lets One SMS Crash Android Phones, Drop 911 Calls
A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android's phone process and loop devices; Android 12 and 13 lack a ...
Talos: VOLTA Infostealer Uses Claude and Gemini to Rank Victims
Cisco Talos details VOLTA-AUTODOXER, an infostealer that sends stolen victim data to Claude, Kimi or Gemini via OpenRouter to rank what each victim is worth.
MediaTek November Bulletin Fixes 57 Flaws, Six Critical Modem Bugs
MediaTek's November Product Security Bulletin patches 57 flaws, including six critical modem bugs that allow remote privilege escalation over radio contact.
Public Exploit Targets Linux Bonding Driver Flaw CVE-2026-31419
A public exploit for CVE-2026-31419, a Linux kernel bonding driver race condition, demonstrates root and container escape on Google's Container-Optimized OS.
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a phone when a user answers ...
Hugging Face Mining Malware Returns, Model Hits 28,000 Downloads
Pluto Security found 31 malicious Hugging Face repositories posing as Qwen2 checkpoints that hijack GPUs for crypto mining, with more than 32,000 downloads.
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi bug as a zero-day.
cPGuard Update Channel Hijacked to Push Linux Server Backdoor
November 3, 2026
An attacker used stolen credentials to push a malicious script through OPSSHIELD’s cPGuard update channel, installing a backdoor and stealing
Android November Bulletin Fixes 216 Flaws, Three Zero-Click RCEs
November 3, 2026
Google’s November Android bulletin patches 216 vulnerabilities, including CVE-2026-58868 and two more zero-click critical RCE bugs; no exploitation reported.
Public Exploit Lets One SMS Crash Android Phones, Drop 911 Calls
November 2, 2026
A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android’s phone process and loop devices; Android
Talos: VOLTA Infostealer Uses Claude and Gemini to Rank Victims
November 2, 2026
Cisco Talos details VOLTA-AUTODOXER, an infostealer that sends stolen victim data to Claude, Kimi or Gemini via OpenRouter to rank
MediaTek November Bulletin Fixes 57 Flaws, Six Critical Modem Bugs
November 2, 2026
MediaTek’s November Product Security Bulletin patches 57 flaws, including six critical modem bugs that allow remote privilege escalation over radio
Public Exploit Targets Linux Bonding Driver Flaw CVE-2026-31419
November 2, 2026
A public exploit for CVE-2026-31419, a Linux kernel bonding driver race condition, demonstrates root and container escape on Google’s Container-Optimized
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
October 30, 2026
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a
Hugging Face Mining Malware Returns, Model Hits 28,000 Downloads
October 30, 2026
Pluto Security found 31 malicious Hugging Face repositories posing as Qwen2 checkpoints that hijack GPUs for crypto mining, with more
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
October 29, 2026
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.