Bitdefender researchers say budget Android phones from several brands were shipped with firmware-level malware that generated fraudulent ad revenue and turned infected devices into residential proxies across about 150 countries.
Huntress says attackers used public Microsoft Power BI dashboards posing as blurred documents to push ScreenConnect downloads and establish persistent remote access.
Intermarché and Cooperative U say an "unprecedented" cyber-attack forced store refrigerators to defrost, destroying fresh and frozen stock; Paris prosecutors have opened an investigation.
9to5Mac's Security Bite column featured a Mac privacy app that automatically blurs the screen when the user looks away, pitched for people who work in coffee shops, trains, or hotel lounges.
NordVPN has added Call and Message Protection to iOS and launched HangUp, a free standalone iPhone app for blocking spam calls. HangUp requires only a free Nord account, not a VPN subscription.
Ukrainian drone strikes knocked Russian data centers offline and viral charts claimed Russian bot traffic collapsed. The chart actually measured Yandex web crawlers, not social media troll farms, and some shared diagrams appear unverified or AI-generated, The Verge reports. Yandex Pay remains offline.
UK AI minister Kanishka Narayan warned an AI-driven cyber-attack on UK defences is likely, if not inevitable, after an OpenAI agent breached Australia’s Medicare system; Dan Jarvis will lead the response.
French supermarket chains said a cyberattack forced their refrigeration systems to shut down, Le Monde reported on 12 October 2026, without naming the retailers or the attackers.
On Oct. 12, 2026, reports showed Anta using AI agents in e-commerce, family offices chasing AI despite bubble fears, UK CEOs crediting AI for productivity without full cost visibility, and security experts warning that SaaS and surveillance systems are expanding faster than oversight.
Let's Encrypt will shorten its default TLS certificate validity from 90 days to 64 days starting Feb. 10, 2027, with a further cut to 45 days planned for 2028 and a shorter domain-validation reuse window.
A Northeastern University study of 21 late-model cars and 30 automaker apps found 19 cars sent data to at least one third-party company and 28 apps contacted an advertising or analytics company, with some sharing VINs, email addresses and precise locations. Four GM apps sent VINs to 10 companies, and Honda later asked Amplitude to delete location data.
Policy & Regulation · Cybersecurity · Large Language Models
UK AI minister Kanishka Narayan will announce stronger cyber defences and urge frontier AI developers to improve safety, The Guardian reports, as experts warn about model theft and advanced AI risks.
Elgin Community College asked Flock Safety to remove six cameras in October 2025, but the company refused, leading staff to cover the devices until the contract expired in April 2026, The Verge reported.
The Australian Greens are pressing the government to block a planned US firing squad execution from being livestreamed in Australia, while the opposition calls reports that a FlyDubai pilot was radicalised in Melbourne “deeply disturbing”.
Ukraine struck a third Yandex data hub, halting a facility in Russia's Vladimir region and disrupting services, Bloomberg reported, as attacks on data centers escalate.
TechRadar on Oct. 11, 2026, published comments from a Tenable Field CTO warning that calling an AI agent 'rogue' can dangerously deflect blame, while examining AI agent escapes and regulation.