Author: nitya

Cybersecurity researchers have uncovered a new Android banking trojan called Hirudo that targets banking users by replacing legitimate banking applications with modified versions. According to Dutch mobile security company ThreatFabric, the malware changes how banking apps perform their built-in security checks. Researchers identified modified versions of eight Indonesian banking apps, while the malware’s credential-targeting activity … Continued

Cybersecurity researchers at XBOW have developed a powerful exploit targeting Google Chrome on Windows in just six days, with help from a publicly available OpenAI AI model. The team received a $250,000 reward from Google for discovering and reporting the vulnerabilities. The achievement highlights how artificial intelligence is changing cybersecurity research and helping experts identify … Continued

Japan’s major karaoke company Daiichi Kosho has disclosed a cybersecurity incident that may have exposed the personal information of approximately 8.72 million records. The company, known for operating popular karaoke brands such as Big Echo, said the incident involved a computer belonging to an external service provider. The announcement was made on October 8, 2026, … Continued

A cybercriminal group known as CyberXero reportedly used artificial intelligence (AI) tools alongside traditional hacking software in a campaign targeting websites and critical infrastructure. According to cybersecurity researchers, the operation affected WordPress websites, e-commerce platforms and Ukrainian organizations. More than 628,000 records linked to Ukrainian individuals were reportedly stolen. Researchers believe the activity began at … Continued

SonicWall has warned that attackers are exploiting serious security vulnerabilities in its SMA1000 series secure remote access appliances. These devices help employees connect to company networks and applications from outside the office. One of the vulnerabilities, tracked as CVE-2026-83548, received the maximum severity score of 10.0 out of 10. The company confirmed active exploitation and … Continued

Anthropic has announced the Anthropic Cyber Mission, a long-term initiative aimed at strengthening cybersecurity and protecting critical digital systems. Announced on October 8, 2026, the initiative will provide security tools, research, and technical resources to defenders. The company plans to focus initially on two key areas: critical infrastructure protection and open-source software security. The initiative … Continued

The FBI and the U.S. Secret Service have warned that the FortiBleed campaign is still active and continues to target internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The campaign focuses on stealing valid credentials that can give attackers access to networks and security devices. According to the agencies, attackers are continuing to scan internet-exposed … Continued

The latest 2026 Voice of the CISO findings show that cyber risk is changing rather than simply increasing. The research, based on more than 1,600 CISOs across 16 countries, shows that some traditional indicators have improved. The number of CISOs expecting a material cyberattack within the next 12 months fell from 76% in 2025 to … Continued

A former core infrastructure engineer has been sentenced to 32 months in prison after carrying out a ransomware-style attack against his former employer’s computer network. Daniel Rhyne, 59, of Kansas City, Missouri, pleaded guilty to charges involving intentional damage to a protected computer and extortion. The company was a U.S.-based industrial organization headquartered in New … Continued

Japanese media company Nikkei has disclosed two separate security incidents involving employee email accounts on Microsoft 365 and Google Workspace. The company revealed the incidents on October 4, 2026, after unauthorized access was detected. The two incidents involved different employee accounts and Nikkei has not said that they were connected. No specific hacker or hacking … Continued