Samsung admits Galaxy devices can leak passwords through clipboard wormhole

This infosec roundup highlights multiple contemporary risks: a major WorkComposer S3 exposure leaking millions of screenshots, Samsung devices storing clipboard data (including passwords) in plaintext, Microsoft’s mitigations for the 2023 Storm‑0558 Exchange compromise, the emergence of the Toymaker initial access broker deploying the LAGTOY backdoor that enables credential theft and paves the way for ransomware (Cactus), rapid exploitation of many newly disclosed CVEs, and opportunistic scams—alongside Mitre’s ATT&CK v17 updates.