ICYMI: 2026-10-08
Latest Headlines
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
The Man Behind a West Bank Telegram Channel Trying to Keep Palestinian Drivers Safe
Security Awareness Training Isn’t Dead, but It Needs a Rethink
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
Rein Security Raises $25 Million to Guard AI Agents at Runtime
TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme
FortiBleed Attackers Locking Victims Out of Fortinet Devices
Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets
Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts
Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases
Microsoft Teams Adds Synthetic Audio and Video Detection to Fight Deepfake Meeting Attacks
DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases
Critical Sungrow Inverter Vulnerability Lets Attackers Access Solar Plants Without Passwords
Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code
FBI disrupts Chinese hacking tools used to breach critical infrastructure
Ransomware attack disrupts Japan’s IDCF Cloud used by govt clients
FakeGit malware campaign returns with 17,610 malicious GitHub repos
Cisco warns of critical flaws allowing Nexus switch takeover
OAuth grants pile up faster than you can review them. Here’s how to keep up.
Uranium crypto exchange hacker convicted for stealing $53 million
Microsoft Teams to get support for third-party deepfake detection tools
ASOS links data breach to social engineering attack, credential theft
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
– MTZ