Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website...
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root...
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Swati KhandelwalOct 14, 2026Vulnerability / Virtualization Security researchers ran their own code inside a protected part of Windows that is...
Show, don’t tell: Sophos AI at CAMLIS
For the fourth year running, Sophos AI will share new research at the Conference on Applied Machine Learning in Information...
Expanding the military footprint: China’s new air base in Laos
As China’s power and self-confidence grows, it’s becoming much more active in projecting power by establishing military bases abroad. The...
TfNSW’s ‘Project Guardian’ senses rail corridor, highway incursions
Key points Transport for NSW has launched a year-long trial of real-time detection and sensing technology at three locations to...
Microsoft floats “risk cohorts” as patch load hits record size
Key points Microsoft's October Patch Tuesday fixed 1417 CVEs, 42 percent more than September's 998 and nearly eight times October...
US raids 40 laptop farms for North Korean IT workers
Key points US authorities have arrested Michael James Bostelle and Juan Cecilio Pena Carillo, accused of hosting company laptops for...
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that...
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive...
Not there yet: Indonesia’s military has a space unit without a mandate or money
Indonesia’s military has built the organisation needed to protect its interests in outer space, including monitoring its waters. But parliament...
Firefox takes aim at the enterprise browser market
if ( !emtpy($headline_subheadline ) ) : ?> Mozilla’s Firefox Enterprise combines an independent browser engine with a self-hostable management console,...
Always-On Assurance: How Cisco is Reimagining the Secure Development Lifecycle
Software security must adapt for the AI eraGenerative AI has created a security crisis of scale. It is also the...
An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office
Chatbot prompts reveal the engineer’s alleged efforts to set up a covert listening device days before one was found in...
