Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
October 20, 2026
Citizen Lab confirmed NSO Group’s Pegasus spyware on the phone of Belgrade university rector Vladan Djokic days before Serbia’s October
Endpoint Security
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
Citizen Lab confirmed NSO Group's Pegasus spyware on the phone of Belgrade university rector Vladan Djokic days before Serbia's October 25 elections.
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
Researcher Hyunwoo Kim released working exploits for six Linux kernel bugs called Infinity Core, five of which give local root or container escape.
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
A counterfeit Chrome app from developer Hizbartech reached 100,000 downloads on Google Play and reportedly appeared as a sponsored result above real Chrome.
Aoki Infostealer Now Steals API Keys From AI Coding Assistants
Symantec reports new Aoki infostealer variants that take credentials and session files from Claude, Codex, Cursor, Gemini, Copilot and AWS to enable LLMjacking.
GhostBat Android RAT Targets 60 Indian Banking and UPI Apps
Cyble describes an updated GhostBat Android RAT that uses a Ghost Overlay to steal UPI PINs from 60 Indian financial apps via fake traffic fine ...
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own security checks.
Vghost Linux Kernel Flaw CVE-2026-74580 Gets Public Exploit
A public exploit for Vghost, Linux kernel flaw CVE-2026-74580 in the vhost subsystem, gives local root and a VM escape path across nine years of ...
Hackers Hijack Danfoss Fridge Controllers at French Supermarkets
Attackers took over Danfoss refrigeration controllers overnight, forcing fridges to heat up and spoiling stock at hundreds of French supermarkets nationwide.
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and employees across Japan.
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command execution to iPhones.
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
October 19, 2026
Researcher Hyunwoo Kim released working exploits for six Linux kernel bugs called Infinity Core, five of which give local root
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
October 16, 2026
A counterfeit Chrome app from developer Hizbartech reached 100,000 downloads on Google Play and reportedly appeared as a sponsored result
Aoki Infostealer Now Steals API Keys From AI Coding Assistants
October 16, 2026
Symantec reports new Aoki infostealer variants that take credentials and session files from Claude, Codex, Cursor, Gemini, Copilot and AWS
GhostBat Android RAT Targets 60 Indian Banking and UPI Apps
October 16, 2026
Cyble describes an updated GhostBat Android RAT that uses a Ghost Overlay to steal UPI PINs from 60 Indian financial
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
October 15, 2026
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own
Vghost Linux Kernel Flaw CVE-2026-74580 Gets Public Exploit
October 14, 2026
A public exploit for Vghost, Linux kernel flaw CVE-2026-74580 in the vhost subsystem, gives local root and a VM escape
Hackers Hijack Danfoss Fridge Controllers at French Supermarkets
October 13, 2026
Attackers took over Danfoss refrigeration controllers overnight, forcing fridges to heat up and spoiling stock at hundreds of French supermarkets
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
October 12, 2026
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
October 12, 2026
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.