Our coverage: 15 reports since October 8, 2026. Latest: Attackers exploit Discord and Ngrok for CikaBika Bot command‑and‑control, October 18, 2026.
Darktrace notes the malware collects system data, captures screenshots, and the PowerShell script attempts to copy the Rust DLL into Microsoft Edge's installation folder and rename it dbghelp.dll.
The attackers installed the Pawns.app bandwidth-sharing app on compromised devices without owners’ consent, BleepingComputer reported.
Advisory issued Oct. 8, 2026 said hackers tied to Integrity Technology Group stole email from government, law enforcement, healthcare and religious groups and ran a portal giving third parties access
On October 8, Canonical said its websites were under a sustained distributed denial-of-service attack, marking the second major such incident in 2026.
He faces charges of conspiring to threaten information confidentiality to extort money and interfering with commerce through threats.
Cloudflare Radar data indicated Yandex automated web traffic fell to 0.3% after the strikes, while experts said the decline reflected indexing crawlers, not influence‑operation bots.
On 2026-05-12, Defence Online reported that the NCSC and partners re‑issued an advisory warning that China‑nexus actors attack UK organisations via large‑scale covert networks of compromised consumer routers and edge devices.
The agency’s March 2026 national‑security determination placed foreign‑made routers on its Covered List, TP‑Link’s newest Wi‑Fi 8 models remain barred pending conditional approval, and states allege the firm misled buyers about security and China ties.
The botnet extracts four words from a poem to form an IPv4 C2 address, letting operators rotate infrastructure without updating the malware.
A federal judge in Chicago sentenced Hamilton, 30, over a dark web marketplace that prosecutors say handled about $430 million in transactions.
Bitdefender Labs says its Midnight Mimosa campaign hit thousands of low-cost phones in more than 150 countries, and it could not say where in the supply chain the code was added.
Black Lotus Labs reports the malware, tracked as Canto Incognito, targeted exposed AI services such as LiteLLM and Ollama and rotated its command servers by editing a poem, with victim counts that vary by report.