August 22, 2026
- ToxicPanda 2.0 adds 167 remote commands and a PIN-harvesting workflow against 140+ banking and crypto apps, expanding globally alongside GoldDigger's on-device fraud capabilities (The Hacker News). · Threat Activity
in A CVSS 10.0 Lands in Entra ID — and Microsoft Can't Keep Its Exploitation Story Straight