Cybersecurity

Cybersecurity

Hirudo Android Malware Replaces Banking Apps to Evade Security Checks

A new Android malware called Hirudo steals banking credentials by replacing legitimate banking apps with modified copies, according to mobile security company ThreatFabric. Researchers found malicious copies of eight ban

menu_book2 min read visibility1 reads history2 weeks ago linkBleepingComputer share

Cybersecurity

U.S. authorities say North Korean hackers infiltrated at least 70 companies

The U.S. Department of Justice says North Korean hackers used American facilitators and “laptop farms” to gain access to at least 70 U.S.-based companies. Prosecutors said they indicted and arrested at least two people…

menu_book2 min read visibility1 reads history2 weeks ago linkTechCrunch share

Cybersecurity

Ghostscript flaw enables remote code execution through crafted PDFs

A critical heap buffer overflow in Ghostscript could let attackers run code remotely by sending specially crafted PDF files to systems that process them. The vulnerability is tracked as CVE-2026-39919. Researchers at Def

menu_book1 min read visibility1 reads history2 weeks ago linkBleepingComputer share

Cybersecurity

FBI Arrests OpenAI Employee Accused of Hiding Recording Device

The FBI arrested an OpenAI employee accused of planting a hidden recording device in an executive conference room at the company’s San Francisco office. Federal prosecutors identified the employee as Abdulrahman Alfozan,

menu_book2 min read visibility1 reads history2 weeks ago linkTechCrunch share

Cybersecurity

Microsoft’s October 2026 Patch Tuesday fixes 1,411 flaws, including 3 zero-days

Microsoft’s October 2026 Patch Tuesday updates fix 1,411 vulnerabilities, including one that was actively exploited and two that had been publicly disclosed. BleepingComputer reports that the total counts vulnerabilities

menu_book1 min read visibility1 reads history2 weeks ago linkBleepingComputer share

Cybersecurity

UK Housing Ombudsman investigates security incident affecting case system

The U.K. Housing Ombudsman Service is investigating a security incident involving a third-party IT provider that affected its case management system on Tuesday. The service said the incident has been contained and that i

menu_book1 min read visibility1 reads history2 weeks ago linkBleepingComputer share

Cybersecurity

Cyberattack Disrupts IT Systems at TFG London Fashion Brands

TFG London says a cyberattack disrupted IT systems used by its Phase Eight, Hobbs and Whistles fashion brands. The company detected the incident on October 11 and activated its incident response and business continuity…

menu_book1 min read visibility1 reads history2 weeks ago linkBleepingComputer share

Cybersecurity

VPN dark web alerts may repackage public breach data

VPN providers increasingly sell dark web alerts as premium security features, but some services rely on breach data that users can check for free, according to TechRadar writer Mark Gill. The article asks whether…

menu_book2 min read visibility1 reads history2 weeks ago linkTechRadar share

Cybersecurity

Ivanti Reports Limited Exploitation of Connect Secure Zero-Day

Ivanti says attackers are exploiting a high-severity zero-day vulnerability in its Connect Secure (ICS) remote access gateway. The company urged customers using affected versions to upgrade immediately. Tracked as CVE-20

menu_book1 min read visibility1 reads history2 weeks ago linkBleepingComputer share

Cybersecurity

Docker Hub flaw let attackers impersonate users and alter images

Docker disclosed a critical vulnerability in Docker Hub that could let attackers use a personal access token (PAT) to access another user’s container repositories. The flaw, tracked as CVE-2026-105445, could allow image

menu_book2 min read visibility1 reads history2 weeks ago linkBleepingComputer share