Compiled from 52 monitored sources · 52 articles reviewed
Today’s Briefing
ToxicPanda Android malware has expanded to target 349 applications with support for 167 remote commands, building on the supply chain compromise of Android car head unit update infrastructure reported earlier this week. Oracle published four critical vulnerabilities in Helidon's Imperative Web Server component (CVE-2026-73920, CVE-2026-73921, CVE-2026-73922, CVE-2026-73924) affecting versions 1.4.19 through 4.5.3, all rated easily exploitable by unauthenticated network attackers, alongside CVE-2026-76036, a critical buffer overflow in Chrome's Dawn component on Android prior to 151.0.7922.169 that permits arbitrary code execution outside the sandbox.
Top Stories
- Welcoming the Sri Lankan Government to Have I Been Pwned
- AWS makes it easier to spot firewall rules that have gone quiet
- ToxicPanda Android malware uses VPN permissions to block Google Play
Full brief available to subscribers
The complete operator brief — action items with patch deadlines, the vulnerability appendix and named actor activity — goes out by email each morning. Subscribe free to receive it.