Android AI Agent Hijacking, Bit2Watt Power Grid Attack, Ransomware Hits AI Models, and More

THN Daily Updates Cybersecurity Program Development for Business: The Essential Planning Guide ($49.95 Value) FREE for a Limited Time Get answers to all your cybersecurity questions Download Now Sponsored LATEST NEWS Jul 21, 2026 Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs An Android app that can draw over other windows and write to shared storage can slip instructions to the AI agent driving that phone, in text no human eye will ever see. Two more steps, and the same app is running comm... Read More N-day is Becoming N-Hour. Patching Faster Won't Save You. Every patch is a confession. The moment a vendor ships a security fix, the diff between the old code and the new code tells anyone watching exactly what was broken and where. Turn that diff back into a working exploit,... Read More Guardant Health’s Practical Case for SIEM + MDR Consolidation With Exaforce With a lean team, Guardant Health runs 24/7 detection and correlation in seconds using Exaforce SIEM and MDR. Read More New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no exploit and no break-in. That is the claim behind Bit2Watt, desc... Read More WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites. The two securit... Read More New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier this month. The same operator has now been spotted deploying ENCFORG... Read More Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post shared on X, the threat intelligence firm said it's observing in-the-... Read More UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According to the Computer Emer... Read More Cybersecurity Program Development for Business: The Essential Planning Guide ($49.95 Value) FREE for a Limited Time Get answers to all your cybersecurity questions Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi