RatHat can steal Android PINs, but the documented attack needs extensive access
RatHat’s credential-theft capabilities are documented, but they depend on sideloading, an Accessibility grant and abused debugging access.
Read More
Month: October 2026
KillSec infrastructure seized as investigators examine suspected role of 16-year-old
Authorities seized KillSec’s leak site, servers and domains while arresting three suspects, including a minor alleged to have been a main operator.
Read More
Shinhan Bank confirms data breach as evidence of AI use remains inconclusive
Shinhan confirmed that sensitive information was extracted through a loan recruiter service, while reported evidence of AI involvement remains circumstantial.
Read More
OpenAI fixes ChatGPT for macOS flaw that could let local code misuse trusted access
ChatGPT for macOS build 26.924.20706 contains the documented fix, but the reported attack path began with code already running locally and no confirmed theft was identified.
Read More
Microsoft’s reported 502% rise in Teams voice phishing needs context
Microsoft’s reported surge in Teams voice phishing points to identity abuse, but missing counts and methodology limit conclusions about victims, AI and global prevalence.
Read More
Public record does not yet confirm fifth Australian agency hack claim
A fifth Australian agency has not been confirmed in the available record, which documents four bodies and materially different forms of interaction.
Read More
BYD identifies Shark 6 infotainment defect, but OTA fix has no date
A planned Shark 6 update targets the infotainment pathway reproduced by BYD, while the remote demonstration required prior physical preparation and researcher-supplied connectivity.
Read More
OpenAI’s Services Australia notice conflicts with later account on credentials
OpenAI’s 10 September notice to Services Australia reported no credential access. Its 28 September account said the internal model retrieved credentials.
Read More
What one Google engineer’s route reveals about moving into cybersecurity
One engineer’s route into Google security shows how software skills, documented security work, education and exceptional access combine in a career pivot.
Read More
Cybersecurity’s foundations are not obsolete. They must be enforceable
The enduring principles of cybersecurity still matter, but AI demands faster execution, task-scoped agent authority and recovery plans that work in practice.
Read More