Security
North Macedonia charges alleged administrator of the OLVX stolen-data marketplace in a joint case with the FBI
Officials say the 20-year-old suspect's site sold credentials and personal data through more than 1,500 seller accounts.
Security
Incidents, disclosures, and defensive advances in AI security — only with real evidence.
- Security
Android malware 'Hirudo' replaces Indonesian banking apps with trojanized copies
ThreatFabric says the malware combines credential theft with live remote control of the infected phone.
- Security
OpenAI engineer charged with hiding a recording device in an executive conference room
Prosecutors say Abdulrahman Alfozan plugged the device into a TV's USB port. OpenAI says it has no sign that model weights, source code or customer data were taken.
- Security
Microsoft fixes a record of more than 1,400 flaws in October, including an exploited Windows zero-day
Microsoft fixed more vulnerabilities this month than in all of 2025. The actively exploited bug lets malicious files get past Mark of the Web warnings.
- Security
Attackers chained three Ivanti Connect Secure zero-days, part of which Ivanti had found in June
Volexity says a group it tracks as UTA0576 bypassed authentication, ran code and escalated privileges. CISA has added the flaw to its list of exploited vulnerabilities.
- Security
Attackers hijack refrigeration controllers and spoil food at hundreds of European supermarkets
The overnight attack reportedly targeted Danfoss controllers and triggered their defrost function. It raised temperatures to as much as 50°C, mostly in French stores.
- Security
GitLab patches a maximum-severity flaw that could let unauthenticated attackers run code on its servers
CVE-2026-97229 is an integer overflow in the regular expression compiler used by GitLab's CI/CD system. It affects both Community and Enterprise editions, and GitLab is urging administrators of self-managed instances to upgrade.
- Security
Ledger links at least $86 million in crypto thefts to a hardware implant in devices sold by one reseller
A small circuit board hidden under the screens of signers sold through Southeast Asian reseller CryptoBilis captured user data and sent it to the attackers.
- Security
Drone strikes on three Yandex data centers disrupt cloud and online services across Russia
Two facilities have shut down completely after the attacks, which are believed to have been carried out by Ukrainian forces. One of them reportedly housed two of Yandex's three AI training supercomputers.
- Security
Two outlets report that CyberXero used Claude Code and 51 AI agents to steal more than 628,000 Ukrainian records
The Hacker News and Security Affairs both describe an AI-agent campaign attributed to a group called CyberXero.
- Security
Let's Encrypt will issue 64-day certificates by default from February 2027
The change is a step toward 45-day certificates in 2028. Testing in the staging environment starts October 14.
- Security
Suspect arrested in Pennsylvania is a Canadian cybersecurity executive who co-founded ransomware negotiation firm CYPFER
Court records name Edward Dubrovsky and list conspiracy and extortion charges in a case that reports link to the ShinyHunters breach of FBI systems.