Cheap Androids Arrived With Unremovable Banking Malware
Midnight Mimosa put firmware malware on budget Androids in 150 countries. Treat unboxing as a cybersecurity incident and audit the SKU list.
October 2026
Your Model Takes Orders From Malware
Malware is prompt-injecting AI reviewers. That cybersecurity gap lives in your pipeline. See what to lock down this week.
The Bot Got Admin. The Emails Got Sold
A patched AWS agent bug and a $10M training dump show cybersecurity still treats bots and inboxes like toys. See what to lock down.
Government Inboxes Delivered Full Remote Access
ASHVEIN hid C2 in inbox HTML while event lures stole Google sessions. Audit the cybersecurity controls that already trust that content.
You Paid Retail for Wholesale Ransom Keys
Fake decryptors marked up ransomware keys $11M. Your cybersecurity recovery process is the next target. Audit the helper before you run it.
Web3 Dependencies Stole Cloud Tokens From CI Jobs
Web3 packages are walking cloud tokens out of CI. Here's the cybersecurity hardening that actually cuts that path. Check your runners.
Google’s Padlock Came From Ghana’s Registry
Hijacked registries issued real Google certificates. See what your cybersecurity team should hunt in Certificate Transparency tonight.
One Unpatched Day. Overnight Exploit Traffic.
Atlassian file-read scans hit honeypots a day after the patch. Your cybersecurity window is hours. Audit Data Center nodes tonight.
Your Own App Just Phished the Customer List
ASOS shoppers got a rogue hacked alert through the official app. Treat notification vendors as cybersecurity identities. Check your send path.
The Evidence Kit Stopped Apple’s Reboot
GrayKey Preserve targets Apple's 72-hour reboot, a cybersecurity delay your stolen-device playbook cannot wait on. Check the clock.