Ninja Forms Vulnerability Hides Admin Accounts on WordPress
Attackers are exploiting a Ninja Forms vulnerability to plant hidden admin accounts on WordPress sites. The plugin runs on more than 500,000 sites, so the pool of targets is huge. Researchers logged the first attempts on 4 October 2026, and the campaign is still live. The Ninja Forms vulnerability matters far less than what attackers do once they are through
Nikkei Data Breach Exposes 1,646 Contacts in Email Hack
Two Nikkei staff mailboxes fell into the wrong hands this year, and one of them became a phishing machine. Over the weekend, the Japanese media group that owns the Financial Times confirmed both break-ins. The Nikkei data breach exposed the names and email addresses of 1,646 people. But the bigger blow came later, when about 9,000 scam emails went out
Agentic AI Attack Breached a Dutch Security Nonprofit
A Dutch group that warns other firms about exposed systems has become its own case study. The Dutch Institute for Vulnerability Disclosure, or DIVD, says intruders broke into its network. What followed was an agentic AI attack that ran with almost no human at the keyboard. Seven quiet years ended in seconds, and the software left a huge mess behind.
Keio Corporation Cyberattack Halts Hotel and Payment Systems
Japan's trains run on a reputation for being on time, and that record rarely slips. It took a hit over the weekend of September 26, when a cyberattack reached Keio Corporation and the group pulled its network offline. Ransomware had already landed on its servers. Trains kept running, but the business systems behind them went dark, and that is where
JadePuffer Ransomware Wipes 100+ Azure Accounts in 7 Minutes
Seven minutes was all it took to wipe more than 100 storage accounts from a single Microsoft Azure tenant. No human sat at the keyboard, because AI agents did the scouting, stole the keys, and started deleting on their own. Microsoft researchers have tied two of these break-ins to the JadePuffer ransomware operation. The ending everyone expects from a ransomware
RemControl: New Android Malware Hides Inside a Fake IPTV App
A free app that promises live TV and sports streams is the kind of download many people grab without a second thought, and criminals know it. Researchers at Group-IB have found RemControl, a new strain of Android malware hiding inside a fake TVTap streaming app. Once it lands on a phone, it switches off one of Google's key defences and
ClosedQuorum Malware Lets Four AI Models Vote on Its Attacks
A new strain of Windows malware no longer waits for a hacker to tell it what to do. Researchers at Cisco Talos have found the ClosedQuorum malware, which lets four AI models vote on its next move. The panel of Gemini, DeepSeek, Qwen, and Mistral then decides if the malware steals data, digs in, or injects code. For anyone who
Rapuncel Infostealer Hides Behind Fake LastPass GitHub Pages
A new malware campaign is turning one of the most trusted names in password security into bait. Attackers built fake GitHub pages that pose as LastPass Authenticator and dozens of other apps. Anyone who downloads from them ends up with the Rapuncel infostealer. It also brings a driver that shuts off antivirus tools before the theft begins. How Fake GitHub
RatHat Android Malware Lets AI Take Over Your Phone
A new mobile threat has handed the boring part of phone hijacking to an AI model. Researchers at Zimperium have pulled apart RatHat, an Android malware family with an unusual trick. It ships live screen data to a well known AI assistant, then asks the model where to tap next. Scripted phone trojans break when an app changes its layout,
Attackers Hijack HBO Max Reddit Account in Malware Ad Scheme
Hackers took over the verified Reddit account that HBO Max uses to talk with fans, and they turned it into a malware tool. Over about two days, the hijacked profile ran 108 fake ads. Anyone who clicked risked infecting a Windows PC or Mac with programs that steal passwords, files, and crypto. Because the ads came from a trusted brand
