WRLD A.LIVE

13:002 reports

• TeamViewer fixes code injection vulnerability heise online
• TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them The Hacker News

12:00nothing heard

11:00nothing heard

10:00nothing heard

09:00nothing heard

08:00nothing heard

07:001 report

• Sophisticated malware targets government-specific windows systems in Asia SC Media

06:00nothing heard

05:00nothing heard

04:001 report

• APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian Governments CyberSecurityNews

03:00nothing heard

02:00nothing heard

01:00nothing heard

00:003 reports

• 68.8 GB of PH migrant-worker database backups was copied in 24 minutes astig.ph
• NPC probes alleged theft of 68GB of DMW-linked database backups Newsbytes.PH
• 68 GB of stolen PH gov’t data found online, says cybersecurity firm Rappler

22:003 reports

• SpaceX-Owned Cursor Says Malware Incident Hit Up to 5,000 Users Yahoo Finance
• Cursor: malicious extension may have affected up to 5,000 users — Channel NewsAsia UA.NEWS
• Claude Code extension poisoned with persistent SSH backdoor Help Net Security

21:009 reports

• Cursor Says Tampered Claude Code Extension Reached Up to 5,000 Users Technology Org
• Weaponized Claude Code Extension Gives Hackers Persistent Remote Access to Developer Systems CyberSecurityNews
• Malicious code detected in VS Code Claude Extension version 2.1.313 KuCoin
• Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor The Hacker News
• Kaspersky Uncovers NetamLoader Malware Targeting Government-Only Windows Systems in Asia digital terminal
• NetamLoader malware is aiming at government-specific Windows 10 setups across Asia ET CISO
• Kaspersky GReAT uncovers attack targeting government-only Windows system in Asia Kaspersky
• Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia Securelist
• Hackers target government Windows systems in Asia with new malware The Record from Recorded Future News

20:00nothing heard

19:00nothing heard

18:00nothing heard

17:003 reports

• Cursor Discloses SSH Backdoor Attempt in Malicious Claude Code Extension Unite.AI
• Cursor says up to 5,000 users affected by tampered Claude Code extension Reuters
• Trojanized Claude Code Extension 2.1.313 in Cursor Marketplace Plants SSH Backdoor Rescana

16:00nothing heard

15:001 report

• Philippines probes suspected theft of 68gb of migrant worker data Gulf News

14:00nothing heard

13:00nothing heard

12:00nothing heard

11:00nothing heard

10:00nothing heard

09:00nothing heard

08:00nothing heard

07:00nothing heard

06:00nothing heard

05:003 reports

• LDP Urges Govt to Address Cyberattacks on Companies Nippon.com
• Japan's GMO Internet outlines cyberattack-response measures MLex
• Japan’s Cyberattack Surge Tests Its Push to Strengthen Defenses Bloomberg.com

15:003 reports

• Japan's GMO Internet outlines cyberattack-response measures MLex
• Cyber Attack Emergency forces Japan to ask citizens to disconnect devices from internet Cybersecurity Insiders
• (Update) Tokyo Police Investigate Cyberattack on GMO nippon.com

14:003 reports

• Hackers release data after GMO ignores ransom demand | NHK WORLD-JAPAN News NHKニュース
• GMO internet confirms shutdown of hackers' website Manila Bulletin
• GMO Bond Spread Jumps as Cyberattack Hits Credit Market Bloomberg.com

13:00nothing heard

12:00nothing heard

11:00nothing heard

10:00nothing heard

09:00nothing heard

08:001 report

• Belgium's finance and tax agency hit by cyberattack, filing deadlines Euronews.com

07:00nothing heard

06:002 reports

• Silent Train: uncovering Volt Typhoon's operational framework for zero-day exploitation and strategic access Lumen Technologies
• A breakthrough for the group on the trail of Chinese hackers NPR

05:00nothing heard

04:00nothing heard

03:00nothing heard

02:003 reports

• Volt Typhoon hides zero-day attacks using 'Silent Train' framework BleepingComputer
• Silent Train: Volt Typhoon’s Sophisticated Infection Chain into US Targets Exposed ZERO DAY
• China’s ‘Volt Typhoon’ quietly built another hacking network following US crackdown, new findings say Nextgov/FCW

01:001 report

• CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers Security Affairs

23:003 reports

• Compromised camera management software gives attackers a way into corporate networks Help Net Security
• Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers The Hacker News
• EDK II UEFI PXE Flaw CVE-2026-97631: Critical Pre-Boot Code Execution Risk, Patch Not Yet Released Rescana

22:00nothing heard

21:00nothing heard

20:00nothing heard

19:00nothing heard

18:001 report

• Critical UEFI Firmware Flaw Could Expose Millions of Servers to Pre-Boot Code Execution CyberSecurityNews

17:001 report

• After PHP, another critical flaw puts server security at risk NewsBytes

16:008 reports

• After Bank Hack, Mirae Asset Life Also Hit... Scale of Personal Data Leak to Emerge Tomorrow 아시아경제
• Personal data of some 38,000 customers at Daishin Securities leaked The Korea Times
• FSS Governor Lee Chan-jin Warns of General Hacking Incidents at Major Securities Firms, Urges IT Security news.sbs.co.kr
• Three South Korean financial firms including Bithumb report data breaches, Yonhap says Reuters
• Korea Financial Firms Hit By More Hacks as Asia Breaches Grow Bloomberg.com
• Japan to Finalize Emergency Measures for Cyberattacks Next Week The Japan News
• GMO Internet offers up to $1 million reward for info on hackers Japan Today
• Japan Retail Traders Shrug Off GMO Hack, Says Central Tanshi FX Bloomberg

15:001 report

• UEFI bug CVE-2026-97631 lets code run over PXE before Secure Boot Pasquale Pillitteri

14:00nothing heard

13:00nothing heard

12:001 report

• After PHP, critical EDK2 flaw puts millions of servers at risk of hacking India Today

11:00nothing heard

10:00nothing heard

09:001 report

• Tokyo Police Investigate Cyberattack on GMO nippon.com

08:00nothing heard

07:00nothing heard

06:00nothing heard

05:001 report

• "This is a serious incident" - Kingdom Come: Deliverance developer Warhorse suffers cyberattack Eurogamer.net

04:001 report

• Code-execution flaw in UEFI firmware affects most servers on planet Earth Ars Technica

03:001 report

• GMO Customer Info Exposed after Unauthorized Access nippon.com

02:003 reports

• Critical Microsoft Authenticator flaw let malicious Android apps steal access to your precious accounts TechRadar
• Microsoft patches high severity flaw in Authenticator for Android BetaNews
• Microsoft Fixed a Major Authenticator Security Flaw Thurrott.com

01:004 reports

• Kingdom Come, Lord of the Rings studio Warhorse 'hit by a cyberattack' PC Gamer
• 'Our Immediate Priority Is to Secure Our Systems' — Kingdom Come: Deliverance Developer Hit by 'Serious' Cybersecurity Incident IGN
• Lord Of The Rings RPG Game Studio Hit By ‘Serious’ Cyberattack As The Internet Continues Breaking Kotaku
• Hackers breached the creators of Kingdom Come: Deliverance — Warhorse commented on the incident iXBT.games

00:004 reports

• Kingdom Come Developer Warhorse Studios Suffers Cyberattack, Full Impact Unknown Push Square
• Kingdom Come dev hit by cyberattack as Capcom take Street Fighter 5 offline Metro.co.uk
• Developer of Upcoming Lord of the Rings RPG Confirms Cyberattack IMDb
• Japan internet giant GMO says hackers posted stolen customer data TechCrunch

22:001 report

• Warhorse Studios hit by cyberattack, company systems and data affected GamesIndustry.biz

21:001 report

• Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens The Hacker News

20:001 report

• GMO Offers Up to ¥3 Million to Victims of Unauthorized Access; ¥160 Million Bounty to Identify Perpetrators BigGo Finance

19:002 reports

• Japan's cyber chief emphasizes need for swift response to threats MLex
• Node2Shell RCE in Node.js: Which Apps Are at Risk and What to Patch eSecurity Planet

18:003 reports

• Inside Node2Shell: A Closer Look at CVE-2026-111497 Akamai
• High-stakes standoff between GMO and hacker group escalates with first data leak The Japan Times
• Purported data of GMO clients leaked after ransom denied 朝日新聞

17:00nothing heard

16:007 reports

• GMO tells account holders to prepare for the worst as hackers threaten exposure The Japan Times
• Takaichi vows swift response to wave of cyberattacks Japan Today
• Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens GBHackers News
• HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow CyberSecurityNews
• PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw The Hacker News
• Hacker discloses GMO customer info after not getting ransom Japan Today
• 5 Forex Firms Report Customer Damage after GMO Server Breach nippon.com

15:00nothing heard

14:003 reports

• Microsoft Authenticator Flaw Could Let Android Apps Steal Account Tokens Without Permissions PhoneWorld
• Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions CyberSecurityNews
• Microsoft Authenticator vulnerability let rogue Android apps steal work account access Help Net Security

13:006 reports

• As cyber disruption becomes “inevitable,” technology sovereignty will matter more than ever Cyber Daily
• AI accelerates cyberthreats against Australia, intelligence agency warns MLex
• Average cyber-crime bill for Aussie businesses revealed The West Australian
• 'Take action': alert as cyber outages set to intensify inkl
• GMO Internet Warns of Imminent Cyberattack nippon.com
• AI supercharges cyberattacks on Australia, with superannuation savings in the firing line SMH.com.au

12:007 reports

• Worm armed 42 GitHub repos by hiding a payload too big to fail The Register
• Australia warns of 'unprecedented' AI threat Inquirer.net
• Australia warns of ‘unprecedented’ AI threat The Straits Times
• Australian cyber incident responses up 21 pct year-on-year: report Xinhua
• Cyberspies warn of chaos ahead ABC News & Headlines – Australian Broadcasting Corporation
• AISA: AI no substitute for getting cyber security basics right Inside State Government
• Australian cyber incident responses up 21 pct year-on-year: report Xinhua

11:001 report

• Japanese virtual desktop cloud hacked so hard it asks to be banned The Register

10:00nothing heard

09:007 reports

• Kyodo News Digest: Oct. 27, 2026 Japan Wire by Kyodo News
• Security concerns flagged within Japanese firm GMO before breach: CEO Japan Today
• Japan Vows to Address Cyber Attack on FX with Urgency Bloomberg.com
• Park24 to Pay ¥3,000 to 1.46 Million Car-Share Breach Victims Retail News Asia
• Japan's Park24 faces mass damages action over Times Car breach MLex
• Times Car Operators to Face Damages Lawsuit over Data Breach nippon.com
• CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder Rapid7

08:00nothing heard

07:00nothing heard

06:001 report

• Albanese Government works with public and private sector organisations to strengthen cyber resilience Sydney Times

05:001 report

• ‘Malicious’ state-sponsored actors using AI drive increase in threats Nine.com.au

04:00nothing heard

03:001 report

• Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw Infosecurity Magazine

02:006 reports

• Microsoft Releases Out-of-Band Security Updates for Brotli and .NET tarballs Vulnerability CyberSecurityNews
• Microsoft issues urgent .NET security patches for critical buffer overflow flaws Neowin
• Microsoft Launches Emergency Update on a Sunday; Microsoft Stock (NASDAQ:MSFT) Notches Up TipRanks
• Microsoft releases emergency .NET patches for critical Brotli flaw BleepingComputer
• Microsoft Issues Emergency Patch For Critical Google Algorithm Flaw Forbes
• Microsoft releases emergency .NET security fixes for Google Brotli bug The Register

01:003 reports

• Spy chief warns legacy tech leaves business exposed to cyberattacks AFR
• AI supercharges cyberattacks on Australia, with superannuation savings in the firing line The Age
• AI Cyberattacks Hit 1 in 3 Aussie Super Funds [2026] tech-insider.org

00:001 report

• Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes The Hacker News

22:001 report

• AI-powered phishing detection, third PHP2Shell bug, Quest medical breach LinkedIn

21:002 reports

• Japanese companies compensate users as cyberattacks buffet economy BusinessWorld Online
• Japanese company to compensate users hit by cyberattack Euronews.com

20:005 reports

• Government holds urgent cybersecurity meeting in response to recent data breaches The Japan Times
• Japan weighs cyber defense measures after attack hits GMO 朝日新聞
• Japan Faces Surge in Cyberattacks as AI Lowers Language Barrier JAPAN Forward
• Japan to boost cybersecurity measures against data breaches Manila Bulletin
• Japan PM vows swift response to wave of cyberattacks France 24

19:00nothing heard

18:002 reports

• Malicious downloads can trick AI coding agents into compromising themselves CSO Online
• Cybersecurity News: AI-powered phishing detection, third PHP2Shell bug, Quest medical breach CISO Series

17:00nothing heard

16:001 report

• Five Japanese FX Brokers Confirm Hackers Placed Trades After Server Host Breach Finance Magnates

15:002 reports

• OpenAI resumes frontier AI training after security overhaul, discloses flaw in widely used software The Hindu
• GMO's Urgent Request: Japan's Government to Decide on Triggering Active Cyber Defense; First-Ever Application Raises Dual Challenge of Deterrence and Secrecy BigGo Finance

14:005 reports

• Hackers find a way to turn users' own AI agents and Downloads folders against them Mashable SEA
• AI coding agents hijacked using AGENTS.md file in Downloads folder BleepingComputer
• AGENTS.md attack: What the reported incident shows NeoTeo
• Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware The Hacker News
• GMO Traders’ FX Assets Vanish Due to Unauthorized Access; Investors Also Fear Exposure of Personal Information The Japan News

13:00nothing heard

12:001 report

• Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign CyberScoop

11:003 reports

• Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader The Hacker News
• Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries SECURITY.COM
• Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign Cybersecurity Dive

10:002 reports

• Hackers Breach GMO Trading Cloud, Putting 26,739 Servers at Risk Bitcoin News
• Japanese companies compensate users as cyberattacks buffet economy Reuters

09:00nothing heard

08:00nothing heard

07:00nothing heard

06:00nothing heard

05:001 report

• Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device CyberSecurityNews

04:001 report

• Microsoft Teams to Use AI for Detecting Phishing Attacks Using Teams Conversations CyberSecurityNews

03:002 reports

• Microsoft Teams to get AI-powered, context-aware phishing detection BleepingComputer
• Microsoft Teams to get AI-powered phishing detection in 2026 TechGig

02:00nothing heard

01:001 report

• Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers The Hacker News

15:001 report

• Japanese firm GMO seeks 'Active Cyber Defense' by govt. NHKニュース

14:00nothing heard

13:00nothing heard

12:00nothing heard

11:00nothing heard

10:00nothing heard

09:00nothing heard

08:00nothing heard

07:00nothing heard

06:001 report

• Capcom ID Data Breach Impacts Nearly 12 Million Accounts Nintendojo

05:00nothing heard

04:005 reports

• Capcom Data Breach Exposes 11.7 Million Account Records Safestate
• Nearly 12 Million Capcom ID Accounts Affected in Huge Data Breach Push Square
• Capcom and Square Enix Suffer Online Attacks As Hackers Access Player Data Kotaku
• A Botnet Used Poetry To Mine Crypto From Over 3,000 Servers - Here's How BGR
• Capcom Confirms Data Breach That Affected 11.7 Million Users Engadget

22:001 report

• The defending NBA champion New York Knicks showed an appearance that did not fit the dignity of the 매일경제

21:001 report

• Tech News and Trends Tech Brew

20:001 report

• GMO Asks Govt to Take Active Cyber Defense Measures nippon.com

19:001 report

• Notice Regarding Goodwill Payments to Customers and Compensation for Losses from Unauthorized Transactions Following Unauthorized Access GMOインターネットグループ株式会社

18:003 reports

• Times CAR Offers ¥3,000 Compensation to 1.46 Million Users After Driver's License Image Leak ASCII.jp
• Park24 to pay ¥3,000 to Times Car users hit by data breach The Japan Times
• Park24 to Pay 3,000 Yen to Times Car Users Hit by Data Breach nippon.com

17:00nothing heard

16:001 report

• Park24 to Pay 3,000 Yen to Times Car Users Hit by Data Breach nippon.com

15:003 reports

• Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected BleepingComputer
• OANDA Japan Holds Withdrawals After Hack at Server Host Used by FX Traders Finance Magnates
• Sagawa Express Says 53 M. Sets of Personal Info Possibly Compromised nippon.com

14:005 reports

• Japan's Sagawa Express says up to 53 mil. customer records may have leaked 毎日新聞
• Sagawa: Up to 53 mil. customer records may have leaked | NHK WORLD-JAPAN News NHKニュース
• Sagawa Express: Up to 53.23 Million Records Potentially Leaked ASCII.jp
• Sagawa Express says 53 million sets of personal info possibly compromised The Japan Times
• Sagawa Express Says 53 M. Sets of Personal Info Possibly Compromised nippon.com

13:00nothing heard

12:00nothing heard

11:002 reports

• OpenAI resumes frontier AI training after security overhaul, discloses flaw in widely used software Rappler
• What Is PHP? Why Are Government and Business Websites Going Offline? The New York Times

10:001 report

• Knicks reportedly duped employees with championship ring email that was actually a phishing test CBS Sports

09:004 reports

• OpenAI resumes frontier AI training after security overhaul, discloses flaw in widely used software Central Oregon Daily
• An OpenAI Model Hacked Its Way Onto the Internet What's Trending ·
• OpenAI Details Training Containment Overhaul After September Model Incident Unite.AI
• Knicks Owners Respond to Backlash They Didn't Put a Ring On It After Phishing Email to Employees E! News

08:002 reports

• Knicks call plan to use fake championship rings as employee phishing test 'an unfortunate mistake,' will issue rings to employees Yahoo Sports
• OpenAI’s own agents found escapes from its training sandbox Cryptopolitan

07:002 reports

• OpenAI disables internet access during model training while Anthropic issues another mea culpa The Register
• OpenAI says it will no longer train its AI models on the live internet, citing “significant risks” TechCrunch

06:003 reports

• OpenAI resumes frontier AI training after security overhaul, discloses flaw in widely used software Reuters
• OpenAI Tightens Rules to Block Rival Model Distillation BankInfoSecurity
• OpenAI now trains its frontier AI models with no internet access The Verge

05:0011 reports

• Diplomatic entities in Central Asia targeted by new BlackX UEFI bootkit SC Media
• OpenAI resumes frontier AI training with enhanced security, no internet access The Mighty 790 KFGO
• OpenAI pauses frontier model training after security breach StreetInsider
• OpenAI to train frontier models without internet access after DNS misconfiguration incident Crypto Briefing
• Securing our frontier model training environment OpenAI
• OpenAI to Train AI Models Without Internet After Cyber Incidents Bloomberg.com
• More data breaches reported by Japan prefectural police forces, companies Japan Wire by Kyodo News
• Thousands of police personnel records exposed in app breach 朝日新聞
• Japan's Arcadia Says Up to 3.14 Million Email Addresses May Have Leaked; 1.42 Million Phishing Emails Also Sent BigGo Finance
• Cyberattacks Hit Japanese Police and Businesses News On Japan
• Data on 125,000 police officers in Japan potentially exposed Manila Bulletin

04:001 report

• Hackers target AI coding agents with malicious text files Mashable

03:005 reports

• Abandoned Popcorn Time apps had to be disabled to prevent a zombie army The Verge
• New BlackX UEFI bootkit exploiting Baton Drop Securelist
• BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations The Hacker News
• Bought a Cheap Android Phone? New Malware Discovery Raises Questions About Your Personal Data savingadvice
• Cheap Android phones found with malware already installed Fox News

02:001 report

• Resident Evil developer Capcom confirms breach involving more than 11.7 million account records GAMINGbible

01:002 reports

• Japanese Game Maker Capcom Has Confirmed - 11,774,247 Customer Records Exposed CyberSecurityNews
• Capcom ID Breach Hits 11.7 Million Accounts: What Players Need to Know Gadget Review

00:002 reports

• Over 11,000,000 affected in Capcom data breach as company apologises Yahoo
• The biggest-ever internet security threat has been known for 22 years. AI made it a crisis in 2 days CNN

23:0010 reports

• Hackers Changed Users’ Passwords in 11.7M-Account Capcom Breach All About Cookies
• Capcom data breach confirmed: More than 11 million accounts impacted Mashable SEA
• Resident Evil maker Capcom warns of phishing after 11.7 million records exposed Malwarebytes
• Phishing email to Knicks employees an 'unfortunate mistake,' MSG spokesman says ESPN
• Knicks Assistants Reportedly Haven't Gotten NBA Championship Rings, MSG Employees Tricked by Email Bleacher Report
• Knicks coaches didn’t get rings on banner night; MSG staff received phishing email: Sources - The Athletic The New York Times
• Knicks reportedly turned fake championship ring offers into cybersecurity lesson for employees Yahoo Sports
• Hackers can target your iPhone through websites and ads — here's how to protect your money Yahoo Finance
• AI-discovered bugs may soon trigger fresh disruptions, cyber experts say Reuters
• At OpenAI’s Cyber Lab, Hackers Race To Protect The Internet From AI Attacks Forbes

22:00nothing heard

21:001 report

• PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches The Hacker News

20:00nothing heard

19:001 report

• Capcom affected by data breach, over 11.7m Capcom ID accounts compromised GamesIndustry.biz

18:001 report

• Capcom Confirms Data Breach Affecting Nearly 12 Million Accounts Mezha

17:002 reports

• Capcom ID accounts hit by data breach affecting more than 11 million users, with nearly 200 passwords changed PC Guide
• Capcom data breach exposes 11.7 million account records Help Net Security

16:00nothing heard

15:00nothing heard

14:00nothing heard

13:00nothing heard

12:00nothing heard

11:00nothing heard

10:001 report

• What to know about the AI-detected security bug impacting wide swaths of the internet Cebu Daily News

09:00nothing heard

08:001 report

• Linux Kernel Hit by Two 9.0-Severity SMB Flaws Posted to Public Lists Before Any Fix BigGo Finance

07:003 reports

• What to know about the AI-detected security bug impacting wide swaths of the internet BusinessMirror
• Linux KSMBD RCE Flaws Disclosed Unpatched by Trend Micro ZDI Cyber Kendra
• Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List Phoronix

06:00nothing heard

05:001 report

• Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks The Hacker News

04:00nothing heard

03:001 report

• Race to update services' computer systems after cyber-security flaw found BBC

02:00nothing heard

01:007 reports

• Millions of hacking attempts as companies, governments rush to patch PHP flaws Reuters
• Websites at hacking risk from critical flaws, warns govt agency The Daily Star
• Resident Evil Developer Capcom Warns of Phishing After Breach Affects 11.7 Million Customer Records Mezha.net
• Russia-linked hackers used decentralised network in Ukraine cyberattack, ESET says Reuters
• Hacker breached Capcom ID - obtained data from 11 million accounts and started changing passwords iXBT.games
• Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes The Hacker News
• Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot Amazon Web Services (AWS)

00:006 reports

• Capcom's "CAPCOM ID" Hit by Unauthorized Access; 11.77 Million Email Addresses Leaked Worldwide BigGo Finance
• Capcom reports large-scale data breach affecting approximately 11.77 million "Capcom ID" accounts. No credit card information compromised AUTOMATON
• Capcom’s Data Breach Hit 11.7 Million Accounts, and Your Inbox Is the Real Target DualShockers
• Resident Evil Developer Capcom Issues Phishing Warning After Data Breach Hits Over 11 Million Customer Accounts IGN
• Capcom data breach confirmed: More than 11 million accounts impacted Mashable
• Websites shut down globally after AI finds cybersecurity flaw affecting 70% of the internet CNN

21:001 report

• 7 out of 10 Individuals Hit by Data Breaches Via Third Party, Kroll Finds Yahoo Finance

20:001 report

• Websites pulled offline worldwide as AI finds critical security flaws South China Morning Post

19:002 reports

• Websites shut down globally after AI finds a critical flaw affecting 70% of the internet CNN
• Millions of hacking attempts as companies, governments rush to patch PHP flaws Rappler

18:007 reports

• New iPhone spyware can steal passwords and photos Fox News
• Hackers are turning web browsing into a spyware trap Yahoo Tech
• DarkSword iPhone Attack Kit Logs Nine Data Theft Events in 30 Days TOKENPOST
• Ukrainian Man Reported Theft of Nearly $70,000 from Trust Wallet Given iPhone Vulnerability Incrypted
• Dead Domains, Live Exploits: How Infected Ads and Expired Analytics Tags Deliver Coruna and DarkSword to iPhones iVerify
• Hackers are turning web browsing into a spyware trap Axios
• Hackers Are Serving Malware To iPhones Via Hundreds Of Infected Websites Forbes

17:001 report

• Anthropic finds 94 cases where open-source projects drop security controls without warning Help Net Security

16:004 reports

• Signal bug could keep your mic - and camera - on after hangup The Register
• Signal bug could let someone keep listening after you hang up Malwarebytes
• Signal flaw could expose audio and video even after users hang up Help Net Security
• New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification The Hacker News

15:001 report

• UK working to identify exposure after global cyber-security warning BBC

14:00nothing heard

13:00nothing heard

12:001 report

• PHP: What is it and why did it spark a global cyber security scramble? BBC

11:00nothing heard

10:00nothing heard

09:00nothing heard

08:00nothing heard

07:002 reports

• Theori Finds AI Hacking Tool Sent 32,000 Requests in 20 Minutes THE ELEC, Korea Electronics Industry Media
• How Bank Hackers Got Claude to Do Their Dirty Work The Information

06:006 reports

• Hacker Group Used Claude, Grok to Automate Cyberattacks on Latin American Banks, The Information Reports marketscreener.com
• Korean banks breached with an open-source AI pentest agent OrcaRouter
• Hackers used Claude and Grok to automate attacks on 400+ Latin American banks Dealroom
• Hackers Used Claude and Grok to Automate Attacks on Banks The Information
• Hackers Employ Grok and Claude to Attack LatAm Banks PYMNTS.com
• New Zealand's Fisher & Paykel Healthcare hit by cyber breach Reuters

05:00nothing heard

04:001 report

• Why password resets won’t save you from OAuth consent phishing Spiceworks

03:003 reports

• Booking.com faces EU investigation over fake listings and scams Mezha.net
• “Absolutely substandard”. EU probes how Booking.com tackles scams EU Perspectives
• Booking Holdings Falls 3.4% as Investors Weigh Regulatory Risks and Q3 Outlook Quiver Quantitative

02:00nothing heard

01:006 reports

• Brussels opens DSA probe into Booking.com over fake listings and scams Dealroom
• Thousands of children’s details exposed after hackers used the password ‘Password1’ EasternEye
• Booking Holdings Inc Stock (BKNG) Moved Down by 3.29% on Oct 21: A Full Analysis TradingKey
• Fake ads and phishing: Booking.com faces massive EU probe Qazinform
• Booking.com targeted in EU investigation into phishing scams, fraudulent listings Y100 WNCY
• Booking.com faces EU investigation over scams and hidden ads Courthouse News

00:006 reports

• EU investigating Booking.com over action on fraud cases RTE.ie
• Booking.com targeted in EU investigation into phishing scams, fraudulent listings Reuters
• PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet wiz.io
• Booking faces EU probe over scams and unlabeled paid listings MLex
• BREAKING: EU opens formal probe into Booking.com over fraudulent listings and phishing LinkedIn
• Cloudflare deploys protections against php2shell vulnerability Cloudflare Blog

23:008 reports

• Booking.com targeted in EU investigation into phishing scams, fraudulent listings Modesto Bee
• Commission to investigate how Booking.com combats scams and fraud under the Digital Services Act The European Sting
• Booking.com Anti-Fraud Practices Face Scrutiny in Europe PYMNTS.com
• BREAKING: EU opens formal probe into Booking.com over fraudulent listings and phishing LinkedIn
• The European Union opens an investigation into fraud and phishing via Bookingcom المتداول العربي
• Booking.com under investigation by EU regulators over fake listings and scams The Guardian
• Patch the Planet: global response coordination as agents uncover critical vulnerabilities OpenAI
• Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign Yahoo

22:001 report

• Websites taken down across Europe as critical cyber-security update issued BBC

21:005 reports

• EU opens investigation into online travel agent Booking.com over fake listings, phishing scams Newswav
• Booking.com under in-depth EU probe over fraud safeguards, paid search results MLex
• European Commission investigates Booking platform over suspected scams and fraud Plataforma Media
• EU wants Booking.com to check out of its scam problem The Register
• EU probes Booking.com over fake listings and phishing scams Euronews.com

20:003 reports

• Two Welsh organisations reprimanded after cyber-attack exposed children’s information Nation.Cymru
• Hackers steal children's data after company used 'Password1' to protect old account BBC
• Critical security issue affecting PHP National Cyber Security Centre

19:006 reports

• Government websites go dark as software flaw sparks security scramble Reuters
• Hackers steal children's data after company used 'Password1' to protect old account BBC
• Ogi and Data Cymru reprimanded over ‘Password1’ breach of children’s data Herald.Wales
• Cyber attackers hacked thousands of children’s data due to this common password fail The Independent
• 'Password1' and a forgotten test account land Welsh outfits in hot water The Register
• Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account Infosecurity Magazine

18:00nothing heard

17:005 reports

• State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web The Hacker News
• SBI confirms data loss incident involving suspected exposure of 3,897 customer records Storyboard18
• SBI Dark-Web Exposure Explained: Were 3.75 Lakh Customers Breached? Open Magazine
• SBI data leak: Can hackers take a loan in your name? How to protect your money and credit score TradingView
• DNS security emerges as key defense against online scams Daily Tribune

16:004 reports

• SBI data breach claim: Hacker group alleges access to 3.75 lakh records, 2,722 documents IBTimes India
• SBI data breach: Personal data of nearly 4,000 exposed to dark web, how major is the incident? The Indian Express
• SBI admits major data breach, 375,000 customer records leaked on dark web ETV Bharat
• Cyberattack Hits India’s Largest Bank, Exposes Customer Records Bloomberg.com

15:005 reports

• Data-breach NHS worker told woman she had cancer BBC
• SBI Launches Investigation Into Suspected Leak of Customers’ Personal Data The420.in
• State Bank of India Probes Suspected Data Breach After Customer Records Found on Dark Web marketscreener.com
• SBI confirms data leak, appoints cybersecurity agency to conduct assessment The Times of India
• Cyberattack Hits India’s Largest Bank, Exposes Customer Records Bloomberg.com

14:00nothing heard

13:001 report

• SBI flags incident of data leak, says no material impact on bank's business operations Moneycontrol.com

12:006 reports

• SBI data breach? Hacker claims leak of 3.75 lakh records, over 2,700 documents Business Today
• State Bank Of India Experienced An Incident Involving The Loss Of Certain Data TradingView
• Hacker group claims access to 3.8 lakh SBI data entries The Times of India
• What information of 3.75 lakh account holders may be at risk as SBI gets hacked? | It claimed to have account-opening applications | Inshorts Inshorts
• SBI Data Breach Claim - Hackers Allegedly Claim Access to 3.75 Lakh Users' Database CyberSecurityNews
• State Bank of India reports cyberattack involving nearly 3,900 customer records Reuters

11:00nothing heard

10:001 report

• Google Chrome steps up warnings before visiting risky websites 디지털투데이

09:00nothing heard

08:00nothing heard

07:003 reports

• 8 eMudhra certificates are compromised. Here's what you need to know Cloudflare Blog
• Weak eMudhra Keys Trigger Global Certificate Security Response SuaraGarut.ID
• Urgent Go update: Blocking eight CA keys SecNews.gr

06:002 reports

• Meta Suspends Muse Chats Sharing Feature After It Left Private Details Exposed Engadget
• eMudhra incident compromises eight CA certificates heise online

05:004 reports

• Claroc finds 6,800 links to Meta Muse chats — Ars Technica UA.NEWS
• AI agents can expose your personal data: Here’s what to know INQUIRER.net USA
• AI agents are only as good as the personal info you share; that raises privacy concerns BusinessMirror
• AI-powered personal assistants could reshape the digital economy The Economist

04:004 reports

• Our latest defenses against evolving web scams blog.google
• Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns The Hacker News
• Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software The Hacker News
• The Internet goes on high alert after discovery of 8 compromised TLS certs Ars Technica

03:00nothing heard

02:004 reports

• Google says Chrome’s Safe Browsing Enhanced Protection mode makes users 10x safer 9to5Google
• Chrome will now show a warning before you visit ‘suspicious’ sites The Verge
• Chrome flags malicious commands that scammers pass off as fixes Help Net Security
• Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68 Laravel News

01:001 report

• Hugging Face CEO says the Netflix doc about its famous hack went 'full doomer mode' Business Insider

21:003 reports

• LDP Urges Govt to Address Cyberattacks on Companies nippon.com
• Ransomware Attacks Have Swept Japan. A.I. May Be Making Them Easier. The New York Times
• Nippon Columbia Malware Incident: 8.7 Million Records at Risk eSecurity Planet

20:002 reports

• Teikoku Databank Survey: Approximately 15% of Companies 'Unsure' if They've Suffered an Information Leak ASCII.jp
• Security firm finds China-linked AI agent behind Japan cyberattacks Japan Today

19:003 reports

• Who is Yuki Chen, China’s ‘superstar’ hacker who just joined AI leader Z.ai? South China Morning Post
• Japan's JETRO website taken offline after unauthorized access; investigation into possible data leak underway BigGo Finance
• Chinese AI Tool Likely Used in Cyberattacks on Japan Firms nippon.com

18:00nothing heard

17:001 report

• GMO unit says Artex was used in cyberattacks in Japan — Channel NewsAsia UA.NEWS

16:00nothing heard

15:002 reports

• Reality of AI Cyberattacks Targeting Japanese Companies Revealed by GMO Investigation ASCII.jp
• Chinese AI tool Artex used in wave of cyberattacks on Japan Yeni Şafak English

14:009 reports

• Japan faces 'next big storm' as hackers use stolen data, warns Trend Micro Nikkei Asia
• Chinese AI tool behind cyberattacks in Japan: Security firm CNA
• Millions of personal records in Japan, South Korea exposed amid surge in AI-powered cyberattacks The Straits Times
• No Info Breach Found at SoftBank Unit after Unauthorized Access nippon.com
• JETRO, more Japanese firms report breaches to network systems Japan Today
• Over 16% of Japanese companies experience data breaches The Japan Times
• AI Tool That Hacked Korean Banks Was Used in Japan, GMO Says Bloomberg.com
• ConnectWise breach puts more than 300 companies’ secrets at risk Cybernews
• ConnectWise CTO Sees ‘Light At End Of Tunnel’ In Bid To Restore ConnectWise Cloud Backup Microsoft 365 Access CRN

13:00nothing heard

12:00nothing heard

11:00nothing heard

10:00nothing heard

09:00nothing heard

08:00nothing heard

07:003 reports

• Hackers hijack AOMEI update servers to secretly spread malware BleepingComputer
• Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor The Hacker News
• Hackers Turn AOMEI Update Servers Into Malware Channels BankInfoSecurity

06:00nothing heard

05:004 reports

• Hackers Exploiting Plex Vulnerabilities in the Wild to Deploy Cryptominer Malware CyberSecurityNews
• ConnectWise Cloud Backup application abused in cross-tenant token sweep Sophos
• Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants The Hacker News
• Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor The Hacker News

04:003 reports

• The Fear of a One-Man-Band Weaponizing AI Agents Is Becoming Reality Gizmodo
• PSA: Patch your Plex media server before someone hacks it Ars Technica
• ConnectWise suspends Cloud Backup service after supply chain attack The Record from Recorded Future News

03:0013 reports

• New communications toolkit to help care providers prepare for cyber incidents Tech Xplore
• ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants Infosecurity Magazine
• Chips Under Control? Mirage News
• Max Planck Institute Develops Tools To Detect Chip Tampering Quantum Zeitgeist
• How to detect hardware tampering and protect chips against attacks by quantum computers Tech Xplore
• The Fear of a One-Man-Band Weaponizing AI Agents Is Becoming Reality AOL.com
• Chinese-speaking hacker used AI agents to target more than 100 company websites Mezha.net
• Broadcom router vulnerability: reported WPS flaw NeoTeo
• Broadcom WiFi Flaw Could Let Nearby Hackers Take Over Millions of Routers The420.in
• Broadcom Wi-Fi bug turns sweet 16, still lets strangers hijack your router The Register
• Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers The Hacker News
• Critical Broadcom Wi-Fi Flaw Exposes Routers To Takeover Without A Network Password LinkedIn
• ConnectWise CTO On Cloud Backup Cyberattack, M365 Update And Helping Thousands Of Partners CRN

02:0015 reports

• AI Penetration Tool 'Artex' Autonomously Attacks Four Internal Network Machines With Only a Target Provided BigGo Finance
• A hacker broke into John Deere and SharkNinja with an army of AI agents The Verge
• Hackers Use AI Agents to Do Hacking for Them PYMNTS.com
• Local cybersecurity experts fight AI threats with AI counter measures WTVG
• EXCLUSIVE: How one hacker used AI agents and a few thousand dollars to break into scores of sites Reuters
• How a Massive Chinese Crime Ring Hacked Staples to Steal Millions 404 Media
• Users confirm Plex running slow and hot due to malicious cryptominers Neowin
• Plex Media Server Owners Urged to Update Immediately After In-the-Wild Exploitation of Older Installations Turns Your Computer Into a Zombie | Cord Cutters News
• Your Plex Server Could Be Mining Crypto for Hackers Gizmodo
• Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure SecurityWeek
• ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants The Hacker News
• ConnectWise attack: what the Microsoft 365 sign-ins mean NeoTeo
• ConnectWise backup credentials exposed multiple Microsoft 365 tenants CSO Online
• ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU The Register
• ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users Cybersecurity Dive