Three chained webOS flaws give a same-network attacker root on certain LG smart TVs without a PIN, according to an SSD Secure Disclosure advisory. LG has issued a fix, but only two models were tested.
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap−5
- Incentives
- Insufficient
- Confidence58
Bitdefender found ad-fraud malware preinstalled in the firmware of thousands of cheap MediaTek-based Android phones in more than 150 countries. The implant cannot be uninstalled, so the point of purchase is where a buyer can keep it out.
Perspective Coverage
9 publishers
- Builder
- Builder 22%
- Operator
- Operator 57%
- Investor
- Investor 21%
Reality
- Evidence68
- Adoption
- Insufficient
- Hype gap+10
- Incentives40
- Confidence70
Hunt.io mapped five SpiceRAT command-and-control servers active in mid-March 2026 and found a certificate spoofing Uzbekistan's state railway, issued by a Chinese state-funded CA, on hosts Bitdefender had filed under two other malware families.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+15
- Incentives40
- Confidence55
Huntress's agent, installed after an Akira ransomware attack, flagged a GOST tunnel on a domain controller set up about four hours after encryption began. The evidence that the ransomware ran came from Registry entries, event logs and Akira's own log files left on disk.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+10
- Incentives55
- Confidence55
Bitdefender's free AI Guardian beta vets each Claude Code and OpenClaw action on macOS, citing tests that manipulated agents in over a third of cases. That rate is Bitdefender's own, so the case for checking every agent action rests on the company offering the check.
Reality
- Evidence30
- Adoption
- Insufficient
- Hype gap+30
- Incentives75
- Confidence40
Eurojust says a 16-year-old is the suspected main operator of KillSec, a group it blames for almost 1,000 data-theft extortion attacks since 2024. Both published accounts say its favoured way in was poorly secured access to victims' cloud storage.
Perspective Coverage
14 publishers
- Builder
- Builder 16%
- Operator
- Operator 75%
- Investor
- Investor 9%
Reality
- Evidence78
- Adoption
- Insufficient
- Hype gap+25
- Incentives45
- Confidence76
buildOne report1 publisher Investigators say KillSec, tied to about 1,000 suspected attacks, got in through software flaws, weak cloud storage and logins bought on the dark web. Those gaps sit in victims' own systems, beyond the reach of any server seizure.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+5
- Incentives
- Insufficient
- Confidence40
Bitdefender says a China-nexus cluster hit Central Asian governments with seven RAT families, five undocumented. The AI fingerprint is in the workflow, not the code.
Reality
- Evidence60
- Adoption20
- Hype gap+10
- Incentives
- Insufficient
- Confidence58
Check Point's deobfuscation of 23 compiled V8 bytecode samples shows JSCeal replaying stolen cookies inside the victim's own browser profile, then stuffing local credentials at any password prompt until it holds a fresh OAuth token.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+18
- Incentives45
- Confidence63
Bitdefender says developers list deceptive apps in Google Play's Early Access program, where feedback goes only to the developer, then buy TikTok and Facebook ads to drive installs straight past the review layer.
Reality
- Evidence55
- Adoption35
- Hype gap+10
- Incentives40
- Confidence60
Bitdefender's free macOS beta attaches to Claude Desktop, Cursor, Codex and OpenCode as an MCP server, covers only the requests those tools route through it, and drops the container when the prompt ends.
Reality
- Evidence46
- Adoption12
- Hype gap+18
- Incentives76
- Confidence52
Asus is the biggest name so far through the Conditional Approval process that the Defense and Homeland Security departments run. Applicants hand over a component-level supply chain report and a time-bound plan to build the router in the US.
Reality
- Evidence60
- Adoption68
- Hype gap+28
- Incentives58
- Confidence55
The identifier that lets data brokers follow one handset from app to app is now disabled on government-issued phones at four US military organisations, after months of pressure from Senator Ron Wyden.
Publishers:bitdefender.com
Reality
- Evidence45
- Adoption55
- Hype gap+15
- Incentives40
- Confidence55
The figure sits 13.2 points above the 2023 reading after three years of expanded disclosure rules. The survey captures the request itself, leaving the requester's identity, whether anyone complied, and whether the breach went unreported outside its scope.
Reality
- Evidence28
- Adoption
- Insufficient
- Hype gap+27
- Incentives88
- Confidence56
MayaBot only shows up in 2022, seven years into the operation, and one branch of the funnel ends in a phone call to a scam call centre. That leaves the search referral and the redirector domains as the constants worth detecting.
Reality
- Evidence46
- Adoption54
- Hype gap+20
- Incentives45
- Confidence63
The release adds Proxmox VE, Nutanix AHV and Google Workspace coverage plus volume-level encryption at rest, while the anomaly detection and pre-restore malware scanning that catch a poisoned backup wait for an undated 2.1.
Reality
- Evidence25
- Adoption12
- Hype gap+45
- Incentives75
- Confidence60
Bitdefender puts 84% of its high-severity incidents on binaries that were already installed on the host. That figure and Microsoft's ClickFix number cover the two largest volume plays in the telemetry, and both sit outside what attachment scanning and patch cycles reach.
Reality
- Evidence55
- Adoption72
- Hype gap+15
- Incentives72
- Confidence58
Bitdefender logged 873 claimed ransomware victims in July, the third-highest month in a year. A brand that barely existed in June supplied 46 of them, on a leak site the analysts say they cannot fully verify.
Publishers:bitdefender.com
Reality
- Evidence38
- Adoption26
- Hype gap+42
- Incentives64
- Confidence44
Bitdefender ties seven remote access tool families to a single Central Asia espionage actor and finds traces of AI-assisted development. Its own numbers show where clustering still held.
Publishers:bitdefender.com · businessinsights.bitdefender.com · news.risky.biz Perspective Coverage
3 publishers
- Builder
- Builder 27%
- Operator
- Operator 55%
- Investor
- Investor 18%
Reality
- Evidence61
- Adoption42
- Hype gap+17
- Incentives71
- Confidence60