New RatHat Android malware uses AI to automate device control

BleepingComputer feed covering current cybersecurity developments, including Android remote-access malware, AI agent misalignment, a Brevo supply-chain compromise distributing ClickFix scripts, state-linked espionage malware, malicious browser extensions, exploited Cisco ISE vulnerability activity, Windows authentication issues, and DDoS infrastructure seizure. The most urgent item is the actively exploited maximum-severity Cisco Identity Services Engine zero-day; other notable threats include RatHat Android malware, SparroWocky, CHOSEN BRICK, and KREMLIN browser-extension malware.