-
A global phishing takedown has disrupted a cybercrime network linked to more than one billion malicious messages. The operation targeted over 75,000 organizations across 150 countries through infrastructure that supported large-scale fraud. Since the beginning of 2026, the network has directed more than 750 million malicious email and SMS messages at Microsoft customers. Investigators connected…
-
Hirudo Android malware steals financial credentials by replacing genuine banking apps with modified copies. These replacements retain most original functionality while interfering with security checks designed to protect customer accounts. Researchers identified malicious versions of eight banking apps. Beyond stealing login details, the malware lets attackers remotely control infected phones, read messages and record audio.…
-
An OpenAI engineer arrested in San Francisco faces allegations that he concealed an audio recorder in an executive conference room. Authorities say the room hosted discussions involving confidential research, product development and business matters. The US Department of Justice announced the case on October 13. Abdulrahman Alfozan, 35, a Saudi national who joined OpenAI in…
-
A critical Ghostscript PDF flaw could allow attackers to execute code on servers that process specially crafted documents. Tracked as CVE-2026-39919, the vulnerability affects PDF rendering workflows, including certain WordPress thumbnail-generation configurations. Artifex fixed the issue in Ghostscript 10.08.0 on September 8. However, researchers said exploitation depends heavily on the target environment, and they had…
-
Self-replicating AI could eventually spread across connected household devices and use their combined computing power, according to Anthropic research. Its experiments explored whether small models could prepare unfamiliar hardware to run AI workloads and propagate through a network. However, the researchers did not demonstrate a fully autonomous AI worm operating across real consumer devices. Their…
-
The Housing Ombudsman security incident has disrupted the watchdog’s case management system, preventing residents from submitting new complaints through its usual online process. The service disclosed the third-party IT incident on October 13 and said it was investigating alongside its external supplier. Although the incident has been contained, questions remain about the extent of any…
-
The TFG London cyberattack has disrupted IT systems serving fashion retailers Hobbs, Whistles and Phase Eight. Several systems remained unavailable when the company disclosed the incident on October 13, although physical stores continued trading. The company detected the attack on October 11 and launched its incident response and business continuity plans. It also brought in…
-
Ivanti has urged customers to patch an Ivanti Connect Secure zero-day that attackers are actively exploiting. Tracked as CVE-2026-104935, the authentication bypass vulnerability allows unauthenticated attackers to execute arbitrary commands on affected appliances. The company reported limited exploitation when it disclosed the issue on October 13. Meanwhile, researchers linked the vulnerability to an attack chain…
-
A critical Docker Hub flaw allowed attackers to impersonate other users and potentially download, publish, or delete container images. Docker has fixed the vulnerability, tracked as CVE-2026-105445, and says its investigation found no evidence of exploitation. The issue involved personal access tokens transferred during account conversions. Because attackers could retain a working token linked to…
-
Norway’s privacy regulator has fined Microsoft-owned advertising company Xandr NOK 92 million, approximately $9.6 million, over unlawful processing and sharing of Grindr user data. The Xandr GDPR fine is the largest penalty Norway’s Data Protection Authority has issued. The regulator, Datatilsynet, said the violations affected thousands of Norwegian users. Its findings concern advertising activity between…