The U.S. CISA has added CVE-2026-31431, a local privilege escalation bug impacting various Linux distributions, to its Known Exploited Vulnerabilities catalog. With evidence of in-the-wild abuse and a CVSS 7.8 rating, the flaw can grant root access after local compromise. Prioritize vendor patches and harden monitoring for suspicious privilege-escalation attempts on Linux hosts.
Source: TheHackerNews
Deep#Door RAT Campaign Hides Python Backdoor Inside Batch Files
Securonix researchers detail “Deep#Door,” a Windows-targeting operation that packages a Python RAT inside a .bat file, terminates built-in defenses, and establishes multiple persistence points. Data exfiltration rides a public TCP tunneling service, helping traffic blend in. Defenders should hunt for script-launched Python processes, abnormal persistence artifacts, and outbound tunnels to unvetted relays.
Source: Security Affairs
Trellix Reports Unauthorized Access to Portions of Source Code Repository
Trellix disclosed a breach that granted attackers access to part of its source code repo. The company says there’s no evidence of code misuse; it has engaged forensic experts and notified law enforcement. Customers should track Trellix advisories and validate code-signing and update provenance as a supply-chain precaution.
Source: Security Affairs
Google Overhauls VRPs: Android Rewards Up to $1.5M; Chrome Payouts Reduced
Google is rebalancing its Android and Chrome bug bounty programs, raising top Android rewards to $1.5M while reducing some Chrome payouts. The shift emphasizes high-impact, “AI-resistant” vulnerabilities as automated exploit discovery evolves. Expect researcher focus to tilt toward complex, systemic issues over lower-severity browser bugs.
Source: Security Affairs
NCSC Warns AI-Driven Bug Hunting Will Trigger a Patch Tsunami
The UK’s cyber agency cautions that AI-accelerated code auditing is surfacing years of latent vulnerabilities at once. Organizations should prepare for surging disclosure volume by tightening asset inventories, automating patch pipelines, and enforcing maintenance windows to keep pace.
Source: The Register
Microsoft To Change Windows Update Flow; Secure Boot Deadline Looms
Microsoft is set to adjust Windows Update within 10 days amid warnings that Secure Boot protections will expire on over a billion PCs. Enterprises should verify update readiness and remediation plans to avoid gaps in boot-chain security. Review device compliance and firmware/boot policy configurations ahead of the change.
Source: Forbes Security
Attackers Abuse Google AppSheet and Drive in Large-Scale Facebook Phishing
A campaign leveraging Google AppSheet and Drive is bypassing filters to steal thousands of Facebook Business accounts worldwide. Hosting lures on trusted Google infrastructure helps phishing pages evade detection and gain user trust. Security teams should expand detections for brand abuse on reputable cloud platforms and add out-of-band verification for account recovery prompts.
Source: HackRead
You May Also Be Interested In...
New Bluekit Phishing Kit Features AI Assistant
2 US Cybersecurity Experts Jailed for Aiding ALPHV (BlackCat) Ransomware
Meta Discloses 2 WhatsApp Vulnerabilities In New Security Advisory