Essay says runtime API controls must track adaptive attacks
It cites Anthropic’s review of 832 banned accounts and says only 19% of organizations keep a continuous API inventory.
24
- Mentions · 7d26
- Mentions · 30d119
- All mentions196
- First seenAug 12, 2026
- Last mentioned9h ago
Timeline
196 articles · newest firstThreatsDay: Fortinet fixes, PHP2Shell scans, Authenticator token flaw
Fortinet is withholding flaw details until November 10 while Hudson Rock reports 40,573 exposed FortiGate secrets.
64
Microsoft offers voluntary buyouts to about 60,000 employees
Staff in the US, UK, Canada and India have until December to accept terms close to ordinary severance.
42
Phantom Blade Zero launches on GeForce NOW
World of Warcraft: Forever is set for November 4, with a launch-week access reward for eligible members.
4
MR ROBOT Android MaaS rents bank trojans aimed at Indian customers
CloudSEK says one affiliate’s data held 5,407 texts from 153 devices, with call forwarding on 58 percent.
64
Banking trojans infect 17,960 Android phones in India
Group-IB says seven families intercepted 7,611,443 SMS messages and stole cards, OTPs, and identity data.
74
CyberDakait malware hits 17,960 Indian banking Android devices
Operators intercepted 7,611,443 SMS messages and paired credential theft with XMRig mining on idle phones.
72
Unverified claim: India-based engineer approved for US cloud logs
Screenshots allegedly show escort approval for GCC Moderate logs; citizenship, session use, and content exposure are unconfirmed.
36
School and government DNS abused to promote illegal gambling
Infoblox found two operations using CNAME aliases and nameserver delegations; it does not report malware or stolen data.
58
Attackers shadow Indian government domains to promote illegal gambling sites
Infoblox says unauthorized NS delegations on maharashtra.gov.in and a separate Hidden Hawk operation abused school and government domains for SEO.
58
IFAAB audit finds GPT-4o financial-advice gaps for Indian personas
Male-labelled profiles received 60.1% higher initial resources and 46.8% higher post-advice resources than female-labelled ones.
52
Unverified claim: Microsoft cleared India-based engineer for US cloud logs
Screenshots of a resolved GCC-Moderate escort ticket do not show log contents, a named customer, or a completed transfer.
38
Bajaj Hospital servers encrypted overnight; Crypto 24 named
Billing and the hospital management system failed at 3 a.m., and a note said the ransom would rise if police were called.
62
SkyW4lker phishing kit abuses Microsoft 365 device-code login
ANY.RUN linked 618 analyses from June through October 21, 2026, with monthly cases rising from 20 to 200.
74
Microsoft ships Windows trust-list update after eMudhra key compromise
The October 26 update removes seven eMudhra-related certificates for devices that do not get automatic CTL updates.
68
Nvidia backs Simplismart’s $14 million round for leaner AI inference
The all-primary Series B values the Bengaluru startup at about $100 million, with Dallas Venture Capital leading.
44
AlphaEarth embeddings evaluated for crop classification across US and India
64-dimensional embeddings separate similar crops better than NDVI or harmonics, but transfer worse from the US to India.
34
Rapid7 says 71% of tracked exploitation starts within a week
Across 43 newly exploited high- and critical-severity flaws, disclosure-to-exploitation averaged three days.
54
Cybersecurity job openings listed for October 27, 2026
Roles span penetration testing, cloud networking, ISSO compliance and SOC 2 work across eight countries.
18
Check Point weekly brief covers Onamae intrusion, PHP exploits, GitLab RCE
The October 26 bulletin also flags an exploited Arista flaw, a LiteLLM package compromise, and the Aokigahara infostealer.
66
Microsoft offers voluntary buyouts to up to 60,000 employees
Staff in the US, UK, Canada and India can take the offer, including many AI and Xbox teams but not security.
40
Suspected North Korean campaign targets 216 vulnerable PHP hosts
Cyfirma links a Lazarus-linked group using AI-ranked public exploits to monitor and scan 216 unpatched PHP hosts via private I2P channel.
75
uCreator Android spyware steals Telegram 2FA and clones WeChat
The rentable kit hides in sideloaded Telegram and WeChat copies; its code and C2 match Doctor Web’s Baohuo.
68
India film board probes exposure of records for 500+ titles
Scripts, cut orders and distribution deals from e-Cinepramaan were reportedly downloadable on the Internet Archive for several days.
52
PHP2Shell exploited at a European government entity, Unit 42 says
Within two hours the attackers reached password hashes, MFA secrets, and an NTLM-relay path toward Domain Admin.
86
Indian government sites still serve revoked eMudhra certificates
Of 8,947 IGOD hosts checked on October 23, 156 still presented certificates revoked on October 19.
74
India SIM-binding rules may block WhatsApp without a registered SIM
Covered apps have until December 31, 2026, with the requirement expected to take effect on January 1, 2027.
46
India to require WhatsApp and Telegram accounts to stay tied to active SIMs
DoT’s deadline is December 31, 2026; how far accounts stop working depends on each app’s implementation.
48
eMudhra issued TLS certificates with private keys of 3 to 8 bits
Eight P-384 keys held only a handful of bits of entropy, so a network attacker could impersonate the certificate holder.
72
SBI notifies customers whose data was in a cyber incident
The bank says balances and funds are safe but gives no cause, data types, customer count or date.
58
eMudhra exits global TLS market after intermediate CA keys compromised
Chrome is set to drop emSign ECC Root CA – G3 on the morning of October 27; Mozilla has already removed it.
76
SBI notifies customers after finding 3,897 records exposed
SBI reviewed about 375,000 dark-web records and says balances are safe, with no confirmed core-system intrusion.
64
Attacker used DeepSeek to steal 5,200 Indian university records
Unit 42 says a weak administrator password, not a new software flaw, exposed the MongoDB holding student and staff data.
62
Unit 42: BUGSTER used DeepSeek V4 in India university data theft
The actor brute-forced a site and stole more than 5,200 student and faculty PII records, Unit 42 says.
64
State Bank of India discloses leak of 3,897 customer records
BreachForums user Siriusim posted SBI files, while the bank reported a much smaller official count.
52
eMudhra exits global TLS business after weak certificate keys
Eight intermediates used 3- to 8-bit private keys that could be cracked in milliseconds to mint trusted certificates.
74
eMudhra exits certificate business after weak intermediate keys
Eight intermediate keys were trivial values; browsers blocked them, and the firm says nothing was breached.
78
eMudhra Intermediate CA Private Keys Compromised
Eight eMudhra intermediate CA private keys generated with insufficient randomness were compromised, enabling private key derivation and unauthorized TLS certificate signing.
80
eMudhra exits global SSL/TLS issuance after weak CA private keys
Eight intermediate CA keys were tiny integers, including 4; the firm says none issued end-entity certificates.
64
eMudhra ends certificate business after weak private keys cracked
Eight intermediate keys were integers below 256, one of them 4; major browsers blocked the certificates within days.
76
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-10276419%9.3Message-origin spoofing enables file ops on BeyondTrust Remote Support
- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- CVE-2026-10493587%8.6Auth Bypass to Command Execution in Ivanti Connect Secure
- CVE-2010-333389%—Stack Buffer Overflow in Microsoft Office RTF Parsing Allows Remote Code Execution
- CVE-2015-254586%—Malformed EPS Image RCE in Microsoft Office
- CVE-2026-581389%9.3Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS…
Appears with
- Microsoftvendor · 39
- Googlevendor · 27
- eMudhravendor · 14
- Metavendor · 14
- Microsoftorganization · 13
- Androidproduct · 13
- CERT-Inorganization · 13
- Metaorganization · 12
- Microsoft 365product · 12
- Windowsproduct · 11
- Cloudflareorganization · 11
- OpenAIorganization · 11
- Applevendor · 10
- Google Threat Intelligence Grouporganization · 9
- Instagramproduct · 9
- UNC7017threat actor · 8
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.