ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

This week's roundup from The Hacker News gathers more than a dozen fresh security stories spanning AI tooling, malware, and supply-chain abuse. A new Android banking trojan called RemControl, distributed through fake Meta ads impersonating the TVTap IPTV app, abuses Accessibility Service for overlay phishing and remote device takeover, with ties suspected to the Medusa UNKN affiliate botnet; it shows signs of AI-assisted development. Separately, Z.ai disabled a default feature in its ZCode coding assistant after it was found silently uploading users' local repositories to Alibaba Cloud, echoing an earlier incident with Grok's coding CLI. Researchers also detailed a man-in-the-browser-style surveillance capability in VK's MAX super-app, a large-scale AI search poisoning campaign feeding fake support details through ChatGPT, Gemini, and AI Overviews, and a one-click Visual Studio Code flaw that bypasses Workspace Trust to run attacker code. Other items cover a backdoored WordPress plugin update, a ClickFix malware-as-a-service copycat, npm/PyPI supply-chain implants, and GitHub's new cache-mode defense against Actions cache poisoning—none tied to active in-the-wild exploitation, but all underscoring how trusted tools and defaults keep becoming attack surfaces.