Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
A novel RAT uses trojanized replacements of legitimate banking apps to neutralize security controls from inside itself. Hirudo is a remote access…
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
On Thursday, researchers from The Citizen Lab at the University of Toronto revealed a worst-case scenario found in the wild: spyware silently…
CenterPoint Energy Data Breach Impacts 1 Million Texans
CenterPoint Energy has notified Texan authorities that the personal information of over 1 million individuals was compromised in a data breach. The…
Microsoft fixes bug causing Windows black screens, Explorer crashes
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates…
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
Ravie LakshmananOct 15, 2026Supply Chain Attack / Cloud Security The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000…
CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO
At school James Robinson was more sporty than STEM, but after school he rose from the track to cybersecurity leader at Netskope.…
UK Legal Aid Agency: Hackers stole records dating back to 1978
The Legal Aid Agency (LAA), an executive agency of the UK’s Ministry of Justice that manages the country’s Public Defender Service, says…
Langflow’s Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that…
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Ravie LakshmananOct 15, 2026Vulnerability / Cryptojacking Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have…