-
Google is expanding Android scam protection with AI-powered message analysis, suspicious-link checks and safeguards against unauthorized call forwarding. The features are rolling out to eligible devices, although availability varies by feature. The update targets increasingly convincing fraud attempts, including fake bank alerts, spoofed phone numbers and AI-generated voices. According to Google, its existing Phone and…
-
A proxyjacking campaign has compromised at least 143 devices across 34 countries, turning victims’ internet connections into revenue sources. The attacker installed legitimate bandwidth-sharing software without the owners’ permission and used their connections as residential proxy nodes. Threat researchers at GreyNoise uncovered the operation while investigating suspicious activity at an unnamed organization. Their findings show…
-
Fake Arch Linux packages impersonating popular software management tools appeared in the Arch User Repository (AUR), triggering a community investigation. The packages combined legitimate code with malicious installation scripts that ran remotely fetched code with root privileges. The campaign came to light on October 13. Subsequently, the AUR team removed the malicious packages and banned…
-
Windows Server 2022 support moved into its extended phase on October 13, 2026, marking the end of mainstream support. However, Microsoft will continue providing monthly security updates until October 14, 2031. The October 2026 security update was the final release under mainstream support. Consequently, organizations now enter the next stage of the operating system’s lifecycle,…
-
A fake Chrome app on Google Play copied the browser’s branding and displayed more than 100,000 downloads. A screenshot also showed the impersonator appearing in a sponsored position above Google’s genuine browser. However, the download figure covers the app’s entire history, including its earlier existence as a game. It therefore remains unclear how many people…
-
W Social privacy practices face scrutiny after a journalist identified publicly accessible records containing users’ identity details. The European alternative to X denies suffering a data breach and says users chose which information to share. The findings reportedly included nationality information for more than 2,500 users and full names for almost 2,000. In a small…
-
The Legal Aid Agency breach exposed records dating back to 1978, according to new findings from the UK government agency. Further analysis identified approximately 250,000 stolen records from before 2007, extending the known historical scope of the attack. Attackers breached the agency’s IT systems in April 2025. Investigators initially identified stolen applicant and recipient information…
-
Palo Alto Networks has released security updates for a PAN-OS RCE flaw that attackers have exploited against firewall management interfaces. Tracked as CVE-2026-0322, the vulnerability allows authenticated attackers to execute code with root privileges. The company confirmed limited exploitation in its October 14 advisory. However, attackers need valid credentials and network access to the management…
-
The FBI has raided suspected North Korean laptop farms in Texas as part of a crackdown on fraudulent remote IT employment. Authorities searched 40 residences and seized approximately 187 laptops, alongside equipment used to access computers remotely. The Justice Department also announced charges against 14 people in a related remote-worker conspiracy. Two U.S. nationals face…
-
The Ledger supply-chain attack has prompted the cryptocurrency wallet maker to ask distributors and resellers across Southeast Asia and Hong Kong to suspend sales. The company also wants sellers to remove devices from shelves while it investigates hardware tampering. Investigators found modified wallets containing implants that capture recovery phrases and transmit them through an LTE…