Hackers have stolen sensitive records from the UK’s Legal Aid Agency (LAA), with investigations confirming that some of the affected records date back to 1978. The latest findings were announced on 14 October 2026 by the UK government. The agency operates under the Ministry of Justice and provides services that help people access legal aid. … Continued
Palo Alto Networks has released security updates to address a high-severity remote code execution (RCE) vulnerability in its PAN-OS software. Tracked as CVE-2026-0322, the flaw has a CVSS score of 8.6 out of 10. The company has reported limited exploitation targeting the firewall management interface, making this an important security concern for organizations using affected … Continued
Cybersecurity researchers have uncovered a new Android banking trojan called Hirudo that targets banking users by replacing legitimate banking applications with modified versions. According to Dutch mobile security company ThreatFabric, the malware changes how banking apps perform their built-in security checks. Researchers identified modified versions of eight Indonesian banking apps, while the malware’s credential-targeting activity … Continued
Cybersecurity researchers at XBOW have developed a powerful exploit targeting Google Chrome on Windows in just six days, with help from a publicly available OpenAI AI model. The team received a $250,000 reward from Google for discovering and reporting the vulnerabilities. The achievement highlights how artificial intelligence is changing cybersecurity research and helping experts identify … Continued
Japan’s major karaoke company Daiichi Kosho has disclosed a cybersecurity incident that may have exposed the personal information of approximately 8.72 million records. The company, known for operating popular karaoke brands such as Big Echo, said the incident involved a computer belonging to an external service provider. The announcement was made on October 8, 2026, … Continued
A cybercriminal group known as CyberXero reportedly used artificial intelligence (AI) tools alongside traditional hacking software in a campaign targeting websites and critical infrastructure. According to cybersecurity researchers, the operation affected WordPress websites, e-commerce platforms and Ukrainian organizations. More than 628,000 records linked to Ukrainian individuals were reportedly stolen. Researchers believe the activity began at … Continued
SonicWall has warned that attackers are exploiting serious security vulnerabilities in its SMA1000 series secure remote access appliances. These devices help employees connect to company networks and applications from outside the office. One of the vulnerabilities, tracked as CVE-2026-83548, received the maximum severity score of 10.0 out of 10. The company confirmed active exploitation and … Continued
Anthropic has announced the Anthropic Cyber Mission, a long-term initiative aimed at strengthening cybersecurity and protecting critical digital systems. Announced on October 8, 2026, the initiative will provide security tools, research, and technical resources to defenders. The company plans to focus initially on two key areas: critical infrastructure protection and open-source software security. The initiative … Continued
The FBI and the U.S. Secret Service have warned that the FortiBleed campaign is still active and continues to target internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The campaign focuses on stealing valid credentials that can give attackers access to networks and security devices. According to the agencies, attackers are continuing to scan internet-exposed … Continued
The latest 2026 Voice of the CISO findings show that cyber risk is changing rather than simply increasing. The research, based on more than 1,600 CISOs across 16 countries, shows that some traditional indicators have improved. The number of CISOs expecting a material cyberattack within the next 12 months fell from 76% in 2025 to … Continued
