Skip to content
August 2026 Page 7

August 2026

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications, as well as Russian and European financial institutions, global fintech and cryptocurrency services, and military-focused… 

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL’s open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software’s spacecraft… 

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

Ravie LakshmananAug 20, 2026Malware / Mobile Security Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with “significant enhancements,” including a set of 167 remote commands and expands its… 

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

Ravie LakshmananAug 20, 2026Browser Security / Cryptocurrency A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3 products. According… 

This .99 deal gets you MS Office 2024 without the cloud strings attached

This $54.99 deal gets you MS Office 2024 without the cloud strings attached

TL;DR: Skip the cloud and the subscription — Microsoft Office 2024 Professional Plus is a one-time $54.99 purchase, down from $249.99, with Word, Excel, and PowerPoint included. Most productivity software now wants to live in the cloud, tethered to an… 

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Ravie LakshmananAug 20, 2026Vulnerability / Web Security Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked…