- Eiliko robot companion exposes private chats and can be hijacked
October 16, 2026
The Verge reports that Eiliko, a small AI robot companion made by Energize Lab, has serious security flaws that expose private conversations and let an attacker remotely change what the toy says. According to The Verge, researcher Sammy Azdoufal could access 13 million conversations and what appeared to be the entire active worldwide fleet of 68,000 ...
- AI-Powered Espionage Campaign Targets Government Linux Infrastructure
October 15, 2026
Unit 42 identified a campaign targeting government entities and state-affiliated infrastructure, with observed activity spanning from October 2025–April 2026. We track this activity as CL-UNK-1211. In the operations we witnessed, the attackers relied on AI-generated payloads. Multiple artifacts deployed throughout the intrusion contained AI-made conversational annotations and developer reasoning comments, suggesting that the code was either ...
- Bank of America had to hire 1,000 contractors to patch software flaws spotted by Anthropic Mythos
October 15, 2026
Bank of America, one of the largest financial institutions in the United States, was forced to hire a thousand people on contractor roles, and spend north of a $100 million dollars to fix all of the bugs found by the famed Mythos, Anthropic’s generative artificial intelligence (GenAI) model. When Anthropic first unveiled Mythos in April 2026, ...
- Governments are hacking people with ‘zero-click’ spyware by showing them online ads
October 15, 2026
Security researchers at digital rights unit The Citizen Lab say government spyware makers are abusing global advertising networks to target and hack devices by serving malicious online adverts. A new report published Thursday by the University of Toronto lab, which investigates surveillance and digital rights abuses, said an Israeli company called Discover-Tech allows spyware makers to ...
- The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
October 14, 2026
Over the past year, Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators, developers, and an illicit marketplace selling tools and infrastructure for large-scale phishing, enabling cybercriminal operations worldwide. Threat actors purchased and used these tools and infrastructure, including phishing kits and access to compromised or fraudulent Microsoft or Google cloud environments ...
- Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
October 14, 2026
Unit 42 investigated a multi-stage network intrusion against a telecommunications organization that occurred in September 2024, which we are tracking as cluster CL-STA-0954 (aka UNC5820). The attackers behind CL-STA-0954 achieved an initial compromise by exploiting CVE-2024-47575 against a centralized FortiManager appliance. From that single appliance, our observations are that the attackers exfiltrated an archive containing running ...
- FBI arrests OpenAI employee accused of planting hidden recording device in conference room
October 13, 2026
OpenAI said it has alerted the FBI after discovering that an employee allegedly planted a hidden recording device in one of the AI maker’s office executive conference rooms. The employee, named by federal prosecutors as Saudi national Abdulrahman Alfozan, was fired and arrested on October 9, about a week after OpenAI discovered the surveillance device. The company ...
- Hobbs and Whistles owner investigates hack that may have exposed customer data
October 13, 2026
The owner of Phase Eight, Hobbs and Whistles has said its websites and IT systems have been hit by a cyber-attack that may have compromised customers’ personal data. The South-African listed TFG London said it identified the “cybersecurity incident” at the three UK-based retail chains on Sunday. Its two other UK brands, Inside Story and White ...
- Hundreds of French supermarkets hit by cyberattack on refrigeration systems
October 12, 2026
Several supermarkets were forced to discard fresh and frozen food, Intermarché said, and have yet to estimate the losses. The Paris prosecutor has opened an investigation. Hundreds of French supermarkets belonging to the Intermarché and Coopérative U chains have fallen victim to a cyberattack targeting their refrigeration systems, the two retail giants said on Monday. Around 150 ...
- AI systems are fully capable of carrying out attacks against infrastructure
October 11, 2026
Autonomous AI systems are fully capable of carrying out a nightmare cyberattack scenario – finding and attacking critical operational technology and industrial equipment, and shutting down access to water, power, and other daily life necessities. If this happens, defenders may only have minutes to detect and block it, according to a Booz Allen Hamilton report. The consulting ...
- ‘123456’ password used in massive Danish CPR data breach
October 10, 2026
At least three accounts at the company linked to a major breach of Denmark’s CPR register reportedly used the password “123456”, including an administrator account. At least three user accounts at the Funen-based IT company Pays used the password “123456” when hackers gained access to Denmark’s CPR register, Politiken reports. One of them was the company’s administrator ...