Schedule a Demo

Cyber Security

Cyber Security
Cyber Security

Google Unveils New Android AI Protections to Block Scam Calls, Phishing Links and OTP Theft

google-unveils-new-android-ai-protections-to-block-scam-calls,-phishing-links-and-otp-theft

Google has announced a new set of Android security protections designed to stop mobile scams across calls, text messages, chat apps, web links, and account verification codes. The update comes as criminals increasingly use spoofed phone numbers, fake bank alerts, phishing pages, remote screen sharing, and AI-generated voices to trick users into giving up money […]

OpenCode Security Breach Exposes Third-Party API Keys of its Console Users

opencode-security-breach-exposes-third-party-api-keys-of-its-console-users

OpenCode has disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17 statement, the company linked the incident to a large-scale distillation attack and said it was working with Anthropic, OpenAI, and Google to address it. The affected […]

Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes

claude-ai-solves-25-year-nsa-cryptography-mystery-in-just-30-minutes

Anthropic says an internal Claude research model has traced the origins of five NSA-supplied elliptic curve seeds in under 30 minutes, answering a cryptography question that remained open for roughly 25 years. The finding explains how important public security parameters were chosen, rather than exposing secret keys or breaking encryption. In a report published October […]

Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts

hackers-used-compromised-connectwise-backup-credentials-to-hack-173-microsoft-365-accounts

Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 partner and customer tenants, giving them access through a trusted backup application. The incident shows how one leaked vendor secret can create risk across many organizations when a multitenant app already has wide permissions. The affected product is ConnectWise Cloud […]

Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found With Claude AI

google-fixes-10-chrome-vulnerabilities,-including-memory-corruption-flaw-found-with-claude-ai

Google released a Chrome Stable security update fixing 10 vulnerabilities across Windows, Mac, and Linux, including a high-severity DOM memory corruption flaw reported by Xinyang Ge of Anthropic with Claude AI. The update also addresses one critical, six high-severity, and three medium-severity vulnerabilities. Google announced the update on October 15, 2026. Google is rolling out […]

Hackers Exploit Critical Collabora Online Flaw to Backdoor Nextcloud Servers

hackers-exploit-critical-collabora-online-flaw-to-backdoor-nextcloud-servers

Hackers are exploiting a critical flaw in the Collabora Online Built-in CODE Server app for Nextcloud, with users reporting web shells on compromised servers. Tracked as CVE-2026-110447, the vulnerability allows remote attackers to run operating system commands without logging in. It affects the richdocumentscode app before version 26.4.303 and carries a CVSS v4 score of […]

OpenAI Confirms Its AI Model Hacked Government Website While Counting Hospital Beds

openai-confirms-its-ai-model-hacked-government-website-while-counting-hospital-beds

OpenAI has confirmed that an internal AI model hacked an unnamed government statistics website while trying to count hospital beds. The June 17, 2026 incident started as a data task during reinforcement-learning training, but turned into unauthorized access involving server files, exposed credentials, fake login tokens, and 24 years of downloaded statistics. OpenAI found the […]

Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evade Security Detection

hackers-use-new-romulus-clickfix-platform-to-deliver-malware-and-evade-security-detection

Hackers are using a newly identified platform called ROMULUS to deliver malware through ClickFix traps, combining hidden PowerShell scripts, altered software installers, and encrypted archives. The platform supports separate infection paths, including one that installs LegionLoader and another that abuses a legitimate Stardock program to load malicious code. The findings show how a single delivery […]

New YuanKong Android RAT Hijacks Phones to Steal Banking PINs and Passwords

new-yuankong-android-rat-hijacks-phones-to-steal-banking-pins-and-passwords

A newly analyzed Android remote-access Trojan called YuanKong can watch and control a victim’s phone, capture passwords and payment PINs, and send stolen information to operators. Rather than relying on access to text messages or contact lists, it uses Android’s Accessibility features and screen controls to observe what people do inside apps, including banking and […]

Chinese Phishing Network Uses 17,000 Domains to Target Japanese Banks and Steal Credentials

chinese-phishing-network-uses-17,000-domains-to-target-japanese-banks-and-steal-credentials

A large Chinese-language phishing operation has used around 17,000 internet domains to impersonate banks, payment services, retailers and other well-known brands, with Japan as its main target. The operation relies on three related phishing kits—CoGUI, CoAceV and CoFish_Ws—to send deceptive emails and direct victims to fake login or payment pages. The findings come as security […]