Mobile Security & Privacy The Shadow AI Crisis: How Autonomous Enterprise Agents Bypass Traditional Identity Controls October 10, 2026 rifanmuazin As corporate technology stacks rapidly evolve to incorporate generative artificial intelligence, enterprise security teams are confronting a profound and unsettling reality: the vast majority of AI agents operating within their…
Mobile Security & Privacy Major Open-Source Maintainer Accounts Compromised in Renewed "GhostAction" Supply Chain Attack Campaign October 10, 2026 Pevita Pearce Cybersecurity researchers have issued urgent warnings regarding an ongoing, highly sophisticated credential-theft campaign that has successfully compromised high-profile open-source maintainer accounts to covertly inject malicious automated workflows into hundreds of…
Mobile Security & Privacy GhostAction Campaign Strikes Again: High-Profile Open-Source Accounts Compromised to Push Malicious GitHub Workflows October 9, 2026 Ali Ikhwan Cybersecurity researchers have uncovered alarming new details regarding an ongoing credential-theft campaign known as GhostAction, which has successfully compromised high-profile open-source maintainer accounts to propagate malicious workflows across tens of…
Mobile Security & Privacy CISA Adds Five Flaws Exploited by China-Linked Flax Typhoon to KEV Catalog Amid Global Warning October 9, 2026 Asep Darmawan The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following confirmed abuse by a China-linked threat actor known as…
Mobile Security & Privacy International Law Enforcement Exposes Sophisticated Cyber Espionage Campaign Linked to Chinese Firm October 9, 2026 Suro Senen An international coalition of law enforcement and cybersecurity agencies has issued a sweeping joint advisory detailing a multi-year cyber espionage campaign targeting critical infrastructure, government organizations, law enforcement agencies, healthcare…
Mobile Security & Privacy International Law Enforcement and Intelligence Agencies Expose Sophisticated Cyber Espionage Campaign Linked to Chinese Firm October 8, 2026 Nana Law enforcement and intelligence agencies across seven countries have issued a sweeping joint advisory detailing an extensive, multi-year cyber espionage campaign orchestrated by hackers tied to a prominent Chinese cybersecurity…
Mobile Security & Privacy Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia October 8, 2026 Nana Muazin Unlike traditional phishing campaigns that rely on straightforward web pages mimicking familiar login portals, Wazza introduces complex filtering, session management, and multi-stage traffic controls directly into the delivery infrastructure. This…
Mobile Security & Privacy Cybersecurity Researchers Uncover New Campaign of Malicious Firefox Extensions Stealing Cryptocurrency Wallet Keys October 8, 2026 Raul Delapena Setiawan Cybersecurity researchers have uncovered a new cluster of 16 malicious Mozilla Firefox extensions specifically designed to target cryptocurrency users by stealing their wallet recovery phrases and private keys. According to…
Mobile Security & Privacy Hackers Compromise Country-Code Top-Level Domains to Obtain Fraudulent HTTPS Certificates for Google and YouTube October 8, 2026 Nana Wu In a sophisticated and alarming cyber incident, malicious actors successfully compromised three country-code top-level domains (ccTLDs), enabling them to acquire unauthorized HTTPS certificates for several high-profile Google and YouTube web…
Mobile Security & Privacy Attackers Compromise Three ccTLDs to Obtain Unauthorized HTTPS Certificates for Google Domains October 7, 2026 Iffa Jayyana In a sophisticated cyber incident highlighting the vulnerabilities inherent in global domain name infrastructure, attackers successfully compromised three country-code top-level domains (ccTLDs) to obtain unauthorized HTTPS certificates for several high-profile…
