Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
October 16, 2026
A counterfeit Chrome app from developer Hizbartech reached 100,000 downloads on Google Play and reportedly appeared as a sponsored result
Endpoint Security
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
A counterfeit Chrome app from developer Hizbartech reached 100,000 downloads on Google Play and reportedly appeared as a sponsored result above real Chrome.
Aoki Infostealer Now Steals API Keys From AI Coding Assistants
Symantec reports new Aoki infostealer variants that take credentials and session files from Claude, Codex, Cursor, Gemini, Copilot and AWS to enable LLMjacking.
GhostBat Android RAT Targets 60 Indian Banking and UPI Apps
Cyble describes an updated GhostBat Android RAT that uses a Ghost Overlay to steal UPI PINs from 60 Indian financial apps via fake traffic fine ...
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own security checks.
Vghost Linux Kernel Flaw CVE-2026-74580 Gets Public Exploit
A public exploit for Vghost, Linux kernel flaw CVE-2026-74580 in the vhost subsystem, gives local root and a VM escape path across nine years of ...
Hackers Hijack Danfoss Fridge Controllers at French Supermarkets
Attackers took over Danfoss refrigeration controllers overnight, forcing fridges to heat up and spoiling stock at hundreds of French supermarkets nationwide.
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and employees across Japan.
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command execution to iPhones.
Warden Stealer Rust Infostealer Targets AI Coding-Agent Tokens
Gen Threat Labs details Warden Stealer, a Rust malware-as-a-service infostealer that steals AI coding-agent tokens, browser data and crypto from Windows PCs.
Phishers Abuse Power BI Dashboards to Install ScreenConnect
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
Aoki Infostealer Now Steals API Keys From AI Coding Assistants
October 16, 2026
Symantec reports new Aoki infostealer variants that take credentials and session files from Claude, Codex, Cursor, Gemini, Copilot and AWS
GhostBat Android RAT Targets 60 Indian Banking and UPI Apps
October 16, 2026
Cyble describes an updated GhostBat Android RAT that uses a Ghost Overlay to steal UPI PINs from 60 Indian financial
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
October 15, 2026
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own
Vghost Linux Kernel Flaw CVE-2026-74580 Gets Public Exploit
October 14, 2026
A public exploit for Vghost, Linux kernel flaw CVE-2026-74580 in the vhost subsystem, gives local root and a VM escape
Hackers Hijack Danfoss Fridge Controllers at French Supermarkets
October 13, 2026
Attackers took over Danfoss refrigeration controllers overnight, forcing fridges to heat up and spoiling stock at hundreds of French supermarkets
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
October 12, 2026
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
October 12, 2026
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command
Warden Stealer Rust Infostealer Targets AI Coding-Agent Tokens
October 12, 2026
Gen Threat Labs details Warden Stealer, a Rust malware-as-a-service infostealer that steals AI coding-agent tokens, browser data and crypto from
Phishers Abuse Power BI Dashboards to Install ScreenConnect
October 12, 2026
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.