---

Threat Intelligence

• Google's Android Apps Get Public Verification to Stop Supply Chain Attacks
• Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs
• Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
• Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE
• DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

---

Cyber Attacks

• Google's Android Apps Get Public Verification to Stop Supply Chain Attacks
• Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs
• Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
• Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE
• DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

---

Vulnerabilities

• Google's Android Apps Get Public Verification to Stop Supply Chain Attacks
• Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs
• Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
• Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE
• DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

---

Artificial Intelligence

• Peter Sarlin’s QuTwo reaches $380M valuation in angel round
• Marc Lore says that AI will soon enable anyone open a restaurant
• Nuro receives driverless testing permit ahead of Uber robotaxi service launch
• SAP bets $1.16B on 18-month-old German AI lab and says yes to NemoClaw
• Bumble’s paying users are slipping as it bets on an overhaul later this year

---

• Chrome’s AI features may be hogging 4GB of your computer storage
• Google Home’s Gemini AI can handle more complicated requests
• Apple agrees to pay iPhone owners $250 million for not delivering AI Siri
• Microsoft gives up on Xbox Copilot AI
• Apple could let you pick a favorite AI model in iOS 27

---

Exploit Database

• [local] Windows 11 24H2 – Local Privilege Escalation
• [webapps] MindsDB 25.9.1.1 – Path Traversal
• [webapps] Traccar GPS Tracking System 6.11.1 – Cross-Site WebSocket Hijacking (CSWSH)
• [hardware] Linksys E1200 2.0.04 – Authenticated Stack Buffer Overflow (RCE)
• [local] Linux nf_tables 6.19.3 – Local Privilege Escalation

---