Android Malware Hijacks Update System for Car Head Units

Dark Reading security-news feed covering active exploitation of critical vulnerabilities, malware and botnet campaigns, phishing and session theft, nation-state operations, industrial and mobile threats, and emerging risks from AI agents and LLM-integrated tooling. The most urgent items include exploited Zimbra CVE-2026-73570 enabling communications-account takeover, a critical GitLab zero-click flaw CVE-2026-19478, unauthenticated access and model poisoning risks in OpenClaw/NemoClaw, and malware targeting Android devices, enterprise credentials, cloud environments, and industrial systems.