Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
October 21, 2026
An attacker used a hijacked contributor GitHub account to swap secret-stealing builds into five OVHcloud CLI releases for about 94
Endpoint Security
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
An attacker used a hijacked contributor GitHub account to swap secret-stealing builds into five OVHcloud CLI releases for about 94 minutes before detection.
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
Calif published a working OpenBSD 7.9 root exploit chaining a 37-year-old integer overflow with a kernel flaw; syspatch errata 018 and 026 fix both bugs.
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
Citizen Lab confirmed NSO Group's Pegasus spyware on the phone of Belgrade university rector Vladan Djokic days before Serbia's October 25 elections.
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
Researcher Hyunwoo Kim released working exploits for six Linux kernel bugs called Infinity Core, five of which give local root or container escape.
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
A counterfeit Chrome app from developer Hizbartech reached 100,000 downloads on Google Play and reportedly appeared as a sponsored result above real Chrome.
Aoki Infostealer Now Steals API Keys From AI Coding Assistants
Symantec reports new Aoki infostealer variants that take credentials and session files from Claude, Codex, Cursor, Gemini, Copilot and AWS to enable LLMjacking.
GhostBat Android RAT Targets 60 Indian Banking and UPI Apps
Cyble describes an updated GhostBat Android RAT that uses a Ghost Overlay to steal UPI PINs from 60 Indian financial apps via fake traffic fine ...
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own security checks.
Vghost Linux Kernel Flaw CVE-2026-74580 Gets Public Exploit
A public exploit for Vghost, Linux kernel flaw CVE-2026-74580 in the vhost subsystem, gives local root and a VM escape path across nine years of ...
Hackers Hijack Danfoss Fridge Controllers at French Supermarkets
Attackers took over Danfoss refrigeration controllers overnight, forcing fridges to heat up and spoiling stock at hundreds of French supermarkets nationwide.
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
October 21, 2026
Calif published a working OpenBSD 7.9 root exploit chaining a 37-year-old integer overflow with a kernel flaw; syspatch errata 018
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
October 20, 2026
Citizen Lab confirmed NSO Group’s Pegasus spyware on the phone of Belgrade university rector Vladan Djokic days before Serbia’s October
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
October 19, 2026
Researcher Hyunwoo Kim released working exploits for six Linux kernel bugs called Infinity Core, five of which give local root
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
October 16, 2026
A counterfeit Chrome app from developer Hizbartech reached 100,000 downloads on Google Play and reportedly appeared as a sponsored result
Aoki Infostealer Now Steals API Keys From AI Coding Assistants
October 16, 2026
Symantec reports new Aoki infostealer variants that take credentials and session files from Claude, Codex, Cursor, Gemini, Copilot and AWS
GhostBat Android RAT Targets 60 Indian Banking and UPI Apps
October 16, 2026
Cyble describes an updated GhostBat Android RAT that uses a Ghost Overlay to steal UPI PINs from 60 Indian financial
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
October 15, 2026
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own
Vghost Linux Kernel Flaw CVE-2026-74580 Gets Public Exploit
October 14, 2026
A public exploit for Vghost, Linux kernel flaw CVE-2026-74580 in the vhost subsystem, gives local root and a VM escape
Hackers Hijack Danfoss Fridge Controllers at French Supermarkets
October 13, 2026
Attackers took over Danfoss refrigeration controllers overnight, forcing fridges to heat up and spoiling stock at hundreds of French supermarkets
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.