RatHat can steal Android PINs, but the documented attack needs extensive access
RatHat’s credential-theft capabilities are documented, but they depend on sideloading, an Accessibility grant and abused debugging access.
Read More
News
KillSec infrastructure seized as investigators examine suspected role of 16-year-old
Authorities seized KillSec’s leak site, servers and domains while arresting three suspects, including a minor alleged to have been a main operator.
Read More
Shinhan Bank confirms data breach as evidence of AI use remains inconclusive
Shinhan confirmed that sensitive information was extracted through a loan recruiter service, while reported evidence of AI involvement remains circumstantial.
Read More
OpenAI fixes ChatGPT for macOS flaw that could let local code misuse trusted access
ChatGPT for macOS build 26.924.20706 contains the documented fix, but the reported attack path began with code already running locally and no confirmed theft was identified.
Read More
Microsoft’s reported 502% rise in Teams voice phishing needs context
Microsoft’s reported surge in Teams voice phishing points to identity abuse, but missing counts and methodology limit conclusions about victims, AI and global prevalence.
Read More
Public record does not yet confirm fifth Australian agency hack claim
A fifth Australian agency has not been confirmed in the available record, which documents four bodies and materially different forms of interaction.
Read More
BYD identifies Shark 6 infotainment defect, but OTA fix has no date
A planned Shark 6 update targets the infotainment pathway reproduced by BYD, while the remote demonstration required prior physical preparation and researcher-supplied connectivity.
Read More
OpenAI’s Services Australia notice conflicts with later account on credentials
OpenAI’s 10 September notice to Services Australia reported no credential access. Its 28 September account said the internal model retrieved credentials.
Read More
Google starts Gemini 4 Argon rollout with selected cyber defenders
Gemini 4 Argon is reaching selected Fairwind partners first, while public access, independent testing and details of a claimed healthcare flaw remain pending.
Read More
Apple fixes possibly exploited CoreGraphics flaw with iOS 26.7.1 and iPadOS 26.7.1
iOS 26.7.1 and iPadOS 26.7.1 address CVE-2026-86950, which Apple has linked to possible exploitation in a targeted attack.
Read More