565/69 Thursday, October 15, 2026 Anthropic has published a report warning that small artificial intelligence (AI) models may soon develop the capability to autonomously spread across internet-connected devices, including IoT products such as smart ovens and low-cost Android-based TV boxes. Such activity could potentially form self-propagating worm botnets capable of operating and expanding without centralized […]
566/69 Thursday, October 15, 2026 The U.S. Department of Justice disclosed that Abdulrahman Alfozan, a 35-year-old Saudi national and OpenAI employee, was arrested on October 9, 2026, after allegedly installing a concealed audio recording device in an executive conference room at OpenAI’s San Francisco office to record conversations without authorization. Alfozan was charged with using […]
567/69 Thursday, October 15, 2026 Researchers from Wordfence disclosed CVE-2026-39919, a Critical vulnerability in Ghostscript with a CVSS v4.0 score of 9.3. Ghostscript is software widely used to process PostScript and PDF files. The vulnerability is a heap-based buffer overflow in the JPEG 2000 image-processing component and affects Ghostscript versions 9.21 through 10.07.1. It could […]
564/69 Wednesday, October 14, 2026 Reports have emerged of cyberattacks targeting refrigeration control systems at several supermarkets in France. Attackers gained control of Danfoss AK-SM and AK-SC devices and manipulated their defrost settings, causing temperatures in some refrigerators and freezers to rise to approximately 50°C. As a result, significant quantities of fresh and frozen products […]
563/69 Wednesday, October 14, 2026 Canonical, the parent company of Ubuntu, disclosed that its websites were continuously targeted by a Distributed Denial-of-Service (DDoS) attack on October 8, 2026, marking the second DDoS incident affecting the company’s infrastructure this year. Canonical stated through Ubuntu Discourse that its team was working to mitigate the incident and that […]
562/69 Wednesday, October 14, 2026 A U.S. federal court has sentenced 30-year-old Raheim Hamilton to 40 years in prison for co-founding and operating Empire Market, a darknet marketplace that facilitated more than USD 430 million in illegal transactions between 2018 and 2020. The case is significant for cybersecurity and international law enforcement because it targets […]
561/69 Monday, October 12, 2026 Researchers from CrowdStrike disclosed a campaign targeting multiple financial organizations from late September to early October 2026, with evidence indicating that data was exfiltrated from compromised systems. The attackers used ARTEX, an open-source agentic penetration testing tool, together with Claude Code and multiple Large Language Models (LLMs) to support their […]
560/69 Monday, October 12, 2026 Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive, was arrested in Pennsylvania, United States, in a case reportedly connected to the FBI’s ongoing investigation into the ShinyHunters group. Dubrovsky previously held senior positions at cybersecurity companies that assisted victims of data breaches and ransomware attacks with ransom negotiations involving cybercriminals. FBI […]
559/69 Monday, October 12, 2026 Cybersecurity researchers from Bitdefender have disclosed the discovery of a malware campaign named Midnight Mimosa, which comes preinstalled in the firmware of several brands of budget Android smartphones based on MediaTek platforms. The malware is embedded in the devices before users turn them on for the first time and cannot […]
558/69 Friday, October 9, 2026 Cybersecurity researchers have disclosed that version 0.5.144 of the tensorlake package on npm was compromised with malware as part of a supply chain campaign linked to ChainDrop/Shai-Hulud. The malware executes during package installation through a preinstall script and is designed to steal credentials and sensitive information from developer systems, including […]
