Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
October 12, 2026
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and
Endpoint Security
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and employees across Japan.
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command execution to iPhones.
Warden Stealer Rust Infostealer Targets AI Coding-Agent Tokens
Gen Threat Labs details Warden Stealer, a Rust malware-as-a-service infostealer that steals AI coding-agent tokens, browser data and crypto from Windows PCs.
Phishers Abuse Power BI Dashboards to Install ScreenConnect
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
Midnight Mimosa Malware Found Preinstalled on Budget Android Phones
Bitdefender found Midnight Mimosa malware embedded in firmware on budget MediaTek Android phones sold in more than 150 countries, and users cannot remove it.
PoeLLM Malware Hides C2 Addresses in GitHub Poems, Infects 3,000+
Lumen's Black Lotus Labs says PoeLLM malware infected over 3,000 servers, hiding C2 addresses in poems on GitHub to mine cryptocurrency on AI infrastructure.
Dell Patches Root-Level Flaw CVE-2026-86360 in System Update Tool
Dell fixed a critical path traversal, CVE-2026-86360, in its System Update CLI that lets unauthenticated remote attackers run code as root, plus four more bugs.
Android October 2026 Update Patches 25 Flaws, Seven Rated Critical
Google's Android security bulletin for patch level 2026-10-01 fixes 25 vulnerabilities, seven of them critical, with no in-the-wild exploitation reported.
ClickFix Variant Smuggles Payloads Through Browser Cache
Microsoft Threat Intelligence says a new ClickFix variant hides a script in the browser cache as a PNG, sidestepping the Windows Run dialog's character limit.
ClingSTUN Botnet Abuses STUN Protocol for C2, Exploits Dozens of Flaws
FortiGuard and Nozomi detail Cling, a Linux botnet that hides command traffic in STUN requests and exploits about two dozen router and IoT vulnerabilities.
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
October 12, 2026
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command
Warden Stealer Rust Infostealer Targets AI Coding-Agent Tokens
October 12, 2026
Gen Threat Labs details Warden Stealer, a Rust malware-as-a-service infostealer that steals AI coding-agent tokens, browser data and crypto from
Phishers Abuse Power BI Dashboards to Install ScreenConnect
October 12, 2026
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
Midnight Mimosa Malware Found Preinstalled on Budget Android Phones
October 12, 2026
Bitdefender found Midnight Mimosa malware embedded in firmware on budget MediaTek Android phones sold in more than 150 countries, and
PoeLLM Malware Hides C2 Addresses in GitHub Poems, Infects 3,000+
October 8, 2026
Lumen’s Black Lotus Labs says PoeLLM malware infected over 3,000 servers, hiding C2 addresses in poems on GitHub to mine
Dell Patches Root-Level Flaw CVE-2026-86360 in System Update Tool
October 7, 2026
Dell fixed a critical path traversal, CVE-2026-86360, in its System Update CLI that lets unauthenticated remote attackers run code as
Android October 2026 Update Patches 25 Flaws, Seven Rated Critical
October 7, 2026
Google’s Android security bulletin for patch level 2026-10-01 fixes 25 vulnerabilities, seven of them critical, with no in-the-wild exploitation reported.
ClickFix Variant Smuggles Payloads Through Browser Cache
October 6, 2026
Microsoft Threat Intelligence says a new ClickFix variant hides a script in the browser cache as a PNG, sidestepping the
ClingSTUN Botnet Abuses STUN Protocol for C2, Exploits Dozens of Flaws
October 6, 2026
FortiGuard and Nozomi detail Cling, a Linux botnet that hides command traffic in STUN requests and exploits about two dozen
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.