Ledger has confirmed that a cryptocurrency hardware wallet linked to reported fund losses contained an unauthorized hardware implant, bringing physical…
Category: Cyber Security News
Attackers Reportedly Hack Supermarket Fridges and Raise Temperatures to 50°C
French supermarket chains are dealing with a major cybersecurity incident after attackers reportedly changed refrigeration settings remotely, causing some…
Critical GitLab Vulnerability Enables Arbitrary Code Execution Attacks on Servers
GitLab has released urgent security updates to fix a critical vulnerability that could allow attackers to execute arbitrary code on affected servers…
Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions
A critical vulnerability in Google’s shared DevSite platform could have allowed an unauthenticated attacker to forge Flask session cookies and trigger…
Google AitM Phishing Kit Uses WebSockets to Bypass MFA in Real Time
A Google account phishing kit uses live WebSocket connections to guide victims through fake sign-in screens, relay authentication requests, and steal…
Ahold Delhaize Takes Systems Offline Following Cybersecurity Incident
Ahold Delhaize has taken some systems offline after identifying a security issue within its network, the food retail group said on October 12, 2026. The…
WhatsApp Attachment Deploys Malware That Gains SYSTEM Access on Windows
A malicious WhatsApp attachment is being used to deploy a Windows remote access trojan that can reach SYSTEM-level access, giving its operators deep…
New Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing
Security researchers have found new ways to build fake domains that resemble trusted brands while still appearing as readable Unicode in Chromium-based…
IBM Patches 22 Verify Access Flaws, Including Critical Remote Code Execution Bugs
IBM patched 22 vulnerabilities in Verify Identity Access and Security Verify Access, including two critical flaws allowing unauthenticated remote code…
FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation
The FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on October 8, 2026, as part of its investigation into the hacking group…
Hackers Exploit Critical AhsayCBS Flaws to Deploy Webshells and XMRig Miners
Hackers are exploiting two flaws in AhsayCBS backup servers to run commands, plant webshells, and install XMRig cryptocurrency miners disguised as…
Microsoft Exchange Admin Center Issue Blocks Web Portal Access to Admins With “Internal Server Error”
Microsoft is investigating an Exchange admin center access issue that may prevent some administrators from opening the web portal used to manage Exchange…
Casbaneiro Malware Hides C2 Activity Until Victims Visit Banking Websites
Casbaneiro malware is hiding its main command and control traffic until an infected user visits a targeted banking website. The Windows banking trojan…
FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach
The FBI has arrested another suspected ShinyHunters co-conspirator as investigators pursue the group believed to be behind the FBIJobs.gov breach.…
Nippon Columbia Malware Infection May Have Exposed 8.7 Million Customer Records
Nippon Columbia Group disclosed a malware infection on October 8, 2026, that may have exposed millions of Daiichi Kosho customer and employee records…
CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks
CISA has added a long-standing Apache Struts flaw, tracked as CVE-2016-3081, to its Known Exploited Vulnerabilities catalog after confirming that…
Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access
A phishing campaign is abusing Microsoft Power BI to deliver rogue ScreenConnect installations and give attackers lasting remote access to Windows…
Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read
A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript execution, and ImageMagick…
Midnight Mimosa Infects Android Phones Before Users Even Turn Them On
Midnight Mimosa is reaching Android phones before their owners even press the power button. The malware arrives inside device firmware, giving its…
Decepticon – Autonomous Red Team Agent that Integrates Claude and Codex
Decepticon is an open-source autonomous red team agent that connects AI reasoning with hands-on security testing. Its integration with Claude Code and…