Daily Threat Briefing — Aug 23, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of August 23, 2026.

1. ToxicPanda Android malware uses VPN permissions to block Google Play
   — Bleeping Computer
   
   The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support …
2. TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
   — The Hacker News
   
   The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing…
3. Hackers infect Android car head units with proxy botnet malware
   — Bleeping Computer
   
   A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromi…
4. Named Pipes Under Attack: Securing Windows Interprocess Communication
   — Bleeping Computer
   
   Windows named pipes provide fast interprocess communication, but weak access controls can expose privileged services to untrusted processes.…
5. How an Emerging Industrial Protocol Family Could Put OT at Risk
   — Dark Reading
   
   New research shows how attacks against some unprotected TSN protocols could allow attackers to disrupt or manipulate physical processes
6. 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
   — The Hacker News
   
   Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are …
7. New SynkLoader malware pushed in Microsoft Teams phishing campaign
   — Bleeping Computer
   
   A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a …
8. OWASP Flags Top AI Skill Risks in New Security Blueprint
   — Dark Reading
   
   The Open Worldwide Application Security Project has a brand-new top 10 security list tailored for the modern era, and it debuts a Universal …
9. Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
   — The Hacker News
   
   Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perfor…
10. Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
    — The Hacker News
    
    Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware …
11. Calling on Cyber Pros to Help Defend City Hall
    — Dark Reading
    
    Government agencies with smaller budgets need support — and here's how you can help.
12. OpenAI Adds Controls That Should've Been There Already
    — Dark Reading
    
    The new AI security controls follow the Hugging Face incident last month, though many of these additions perhaps should have been in place p…

Generated by HiveNet.ai Threat Intelligence Platform · August 23, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC