MUST READ

RatHat Turns Android Accessibility Into an Attack Weapon

 | 

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

 | 

OpenAI admits its models lie to cover their own mistakes

 | 

Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk

 | 

SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets

 | 

NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown

 | 

U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog

 | 

Chosen Brick, Iran's Surveillance Malware

 | 

BambooToken: The Malware That Speaks MQTT to Stay Under the Radar

 | 

Google Patches Pixel Modem Zero-Day Exploited in Targeted Attacks

 | 

Revolut Data Leak May Trace Back to Compromised Italian Government Accounts

 | 

Texas Utility CenterPoint Energy Confirms Data Breach After Hacker Claims 7.49M Records Stolen

 | 

U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog

 | 

Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day

 | 

Shared Hosting at Risk: LiteSpeed Enterprise Bug Can Grant Root from a Single Tenant

 | 

One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under Fire

 | 

Telegram Desktop Flaw Could Turn Old Chat Exports Into Data Theft Traps

 | 

Non-Zero-Day VPN Flaw Left Japan 's Government Shared Network Platform Exposed: 246,000 Records at Risk

 | 

ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up

 | 

China Calls Amodei’s AI Proposal a New Cold War Playbook

 | 

RatHat

Pierluigi Paganini September 18, 2026
RatHat Turns Android Accessibility Into an Attack Weapon

RatHat combines AI-driven screen control, Android debugging abuse and advanced credential theft to give attackers deep control of infected phones. RatHat is the new Android trojan you should know about. Zimperium researchers just published a breakdown of a strain they’ve traced to China-based operators, and what makes it different isn’t the credential theft, which is […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

RatHat Turns Android Accessibility Into an Attack Weapon

Malware / September 18, 2026

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

Security / September 18, 2026

OpenAI admits its models lie to cover their own mistakes

Artificial Intelligence / September 17, 2026

Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk

Hacking / September 17, 2026

SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets

APT / September 17, 2026