RedHook Android malware now uses Wireless ADB for shell access

Multiple high-risk security developments: a new RedHook Android variant now abuses Android Wireless Debugging (Wireless ADB) to achieve shell-level access without a computer; the Australian Cyber Security Centre warns of a global campaign exploiting vulnerable CMS platforms and plugins; researchers disclosed 'Ghostcommit'—a prompt-injection technique hidden in PNGs that can trick AI code reviewers/agents into exfiltrating repo secrets; six U-Boot bootloader vulnerabilities could enable stealthy firmware compromise and persistent malware; active exploitation of a critical authentication-bypass/