The University of New Mexico Health Sciences Center (HSC) disclosed a cyberattack that disrupted patient care, diverted ambulances, and canceled classes across its campus. The incident began on Monday, October 26, 2026, when information technology security teams identified a threat and launched cont
The PHP security team released emergency updates on October 21, 2026, to fix two critical flaws that let unauthenticated attackers execute remote code. Researchers now refer to the pair collectively as PHP2Shell, and the bugs carry the official identifiers CVE-2026-109618 and CVE-2026-109619, respec
Attackers turned trusted Shopify apps into phishing funnels this month, sending shoppers who pressed Checkout to a lookalike payment page that harvested their card details. Researchers at client-side security firm cside traced the campaign to configuration data that app vendors served from their own
Security researchers at ThreatFabric have uncovered a new Android banking trojan called Hirudo, which replaces legitimate banking apps with tampered copies that blind built-in protections. The firm's Mobile Threat Intelligence team published its findings on October 14, 2026, describing a remote acce
Federal agents have arrested Edward Dubrovsky, a Canadian cybersecurity executive, in a case that multiple reports link to the FBI's crackdown on ShinyHunters. Dubrovsky, 54, has held senior roles at firms that help data breach and ransomware victims negotiate extortion payments with cybercriminals.
Researchers at Lumen's Black Lotus Labs have uncovered a cryptomining campaign that uses a new malware strain, PoeLLM, to hijack exposed AI servers. The operation turns compromised machines into cryptocurrency miners, forcing them to scan the internet and launch exploits against new victims. Accord
A China-linked ransomware operation known as Warlock has breached a water utility, a telecommunications provider, a regional government body, and a university. The attackers gained initial access to each network by exploiting vulnerabilities in on-premises Microsoft SharePoint servers, a tactic the
Spain's Data Protection Agency has confirmed the country's first documented personal data breach involving an autonomous artificial intelligence agent. The Agencia Española de Protección de Datos, known as AEPD, disclosed the incident in a blog post published on September 14, 2026. An unnamed organi
Cybercriminals compromised the official, verified HBO Max Reddit account and used it to distribute malicious advertisements across the platform. Security researchers say the attackers deployed 108 malicious ads over roughly 48 hours, targeting both Windows and macOS users. The campaign relied on the
Security researchers have identified a new and dangerous strain of Android malware called Mantax Otax. The malware merges ransomware and spyware capabilities into a single, highly aggressive attack tool. Indonesian threat actors reportedly operate the campaign, targeting victims with encryption, dat