Daily Reading for 2026-07-14
Daily Reading for 2026-07-14
Security
Security Risk Advisors
- 🚩 RedHook Android RAT expands capabilities by abusing Wireless ADB and Shizuku to obtain shell-level privileges without rooting devices.
- 🚩 Malicious npm package impersonates Polymarket to steal cryptocurrency wallets, cloud credentials, and provide attackers full remote access.
- Ghostcommit hides prompt injection inside images to trick AI coding agents into leaking repository secrets.
Microsoft Security Blog
- Defending SaaS-based applications against ShinyHunters OAuth abuse
- Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID