Public Exploit Lets One SMS Crash Android Phones, Drop 911 Calls
November 2, 2026
A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android’s phone process and loop devices; Android
Endpoint Security
Public Exploit Lets One SMS Crash Android Phones, Drop 911 Calls
A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android's phone process and loop devices; Android 12 and 13 lack a ...
Talos: VOLTA Infostealer Uses Claude and Gemini to Rank Victims
Cisco Talos details VOLTA-AUTODOXER, an infostealer that sends stolen victim data to Claude, Kimi or Gemini via OpenRouter to rank what each victim is worth.
MediaTek November Bulletin Fixes 57 Flaws, Six Critical Modem Bugs
MediaTek's November Product Security Bulletin patches 57 flaws, including six critical modem bugs that allow remote privilege escalation over radio contact.
Public Exploit Targets Linux Bonding Driver Flaw CVE-2026-31419
A public exploit for CVE-2026-31419, a Linux kernel bonding driver race condition, demonstrates root and container escape on Google's Container-Optimized OS.
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a phone when a user answers ...
Hugging Face Mining Malware Returns, Model Hits 28,000 Downloads
Pluto Security found 31 malicious Hugging Face repositories posing as Qwen2 checkpoints that hijack GPUs for crypto mining, with more than 32,000 downloads.
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi bug as a zero-day.
Yoba Campaign Hides XMRig Miner Behind Signed ChatGPT, Claude Files
Check Point says the Yoba campaign used fake GitHub pages for nonexistent AI apps to deliver an XMRig miner through signed OpenAI and Anthropic executables.
Fake FedEx Tax PDFs Deliver Sirius Backdoor That Survives Reset
Trellix details a Korean-language phishing campaign posing as FedEx that delivers a fileless Sirius Backdoor designed to persist through a full OS reset.
16-Year-Old EDK II PXE Flaw CVE-2026-97631 Runs Code Pre-Boot
A critical buffer overflow in TianoCore EDK II PXE code, CVE-2026-97631, can run code before Secure Boot loads, and no stable release contains a fix ...
Talos: VOLTA Infostealer Uses Claude and Gemini to Rank Victims
November 2, 2026
Cisco Talos details VOLTA-AUTODOXER, an infostealer that sends stolen victim data to Claude, Kimi or Gemini via OpenRouter to rank
MediaTek November Bulletin Fixes 57 Flaws, Six Critical Modem Bugs
November 2, 2026
MediaTek’s November Product Security Bulletin patches 57 flaws, including six critical modem bugs that allow remote privilege escalation over radio
Public Exploit Targets Linux Bonding Driver Flaw CVE-2026-31419
November 2, 2026
A public exploit for CVE-2026-31419, a Linux kernel bonding driver race condition, demonstrates root and container escape on Google’s Container-Optimized
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
October 30, 2026
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a
Hugging Face Mining Malware Returns, Model Hits 28,000 Downloads
October 30, 2026
Pluto Security found 31 malicious Hugging Face repositories posing as Qwen2 checkpoints that hijack GPUs for crypto mining, with more
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
October 29, 2026
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi
Yoba Campaign Hides XMRig Miner Behind Signed ChatGPT, Claude Files
October 29, 2026
Check Point says the Yoba campaign used fake GitHub pages for nonexistent AI apps to deliver an XMRig miner through
Fake FedEx Tax PDFs Deliver Sirius Backdoor That Survives Reset
October 29, 2026
Trellix details a Korean-language phishing campaign posing as FedEx that delivers a fileless Sirius Backdoor designed to persist through a
16-Year-Old EDK II PXE Flaw CVE-2026-97631 Runs Code Pre-Boot
October 29, 2026
A critical buffer overflow in TianoCore EDK II PXE code, CVE-2026-97631, can run code before Secure Boot loads, and no
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.