<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Threat-Digest on CuraSec</title><link>https://curasec.metacog.co.kr/tags/threat-digest/</link><description>Recent content in Threat-Digest on CuraSec</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 11 Sep 2026 14:58:57 +0000</lastBuildDate><atom:link href="https://curasec.metacog.co.kr/tags/threat-digest/index.xml" rel="self" type="application/rss+xml"/><item><title>ThreatsDay Digest: Android Flaws, Browser Phishing, Scam Shops Roundup</title><link>https://curasec.metacog.co.kr/insights/2026-09-11-threatsday-200-android-flaws-browser-built-phishing-119k-sca/</link><pubDate>Fri, 11 Sep 2026 14:58:57 +0000</pubDate><guid>https://curasec.metacog.co.kr/insights/2026-09-11-threatsday-200-android-flaws-browser-built-phishing-119k-sca/</guid><description>&lt;ul>
&lt;li>&lt;strong>Engineer — Learn:&lt;/strong> The digest themes — overpermissioned extensions, supply-chain packages, and unpatched legacy bugs — are directionally relevant, but the summary is too thin to identify any specific software or action; skim the full roundup for items that touch your stack.&lt;/li>
&lt;li>&lt;strong>SOC/IR — Learn:&lt;/strong> Browser-based phishing chains that abuse trusted services are a useful TTP pattern to keep in mind when tuning lure-detection rules, but no IOCs or specific campaign details are surfaced here.&lt;/li>
&lt;li>&lt;strong>Leader — Skip&lt;/strong>&lt;/li>
&lt;/ul></description></item></channel></rss>