First Malware Infecting Android Head Units

Exposed API keys in code are a major security issue, and notifying code owners has lead to little success in getting them removed, so Truffle Security found a way to remove them automatically. Sources: https://pastebin.com/F7DRn58z

Election time is often a time where we receive annoying mail due to our voting status, voter data is collected but in Illinois it has strict regulations around it. One candidate for mayor unintentionally leaked the voter data of 1.5 million Chicagoans. Source: https://blockclubchicago.org/2026/10/29/mayoral-candidates-website-exposed-voting-history-of-1-5-million-chicago-residents/

PHP2Shell Vulnerabilities were recently announced that made site owners and managers sweat, two critical risk vulnerabilities that can only be patched on version 8 of PHP leave many site managers exposed.

Refrigerators are so common in grocery stores and our own homes, and we are used to the occasional power outage resulting in food spoilage, but sometimes something much more targeted occurs. And we don't even know why. Source: https://www.reuters.com/legal/litigation/investigators-hunt-french-supermarket-fridge-hackers-no-claim-responsibility-2026-10-13/ (pastebin down)

A ransomware recovery firm claimed to have proprietary technology that could decrypt ransomware actor encryption algorithms, which seems too good to be true. As it so turns out, Monster Cloud was paying off the very threat actors that they claimed to be working against. Sources: https://pastebin.com/2Qq9tS4Z

Members of Killsec ransomware group were arrested across multiple countries, and the one in charge of it all may have been just 16 years old. Sources: https://pastebin.com/xU2UkHtN

Sort of. A novel attack against RSA algorithms that forges keys rather than finds the prime factors could be a cause for concern, especially with AI enhanced computing capabilities, before we've even hit the quantum era. Sources: https://pastebin.com/3MhFgcc3

Google becomes the 4th AI tech company to accidentally hack unrelated entities during a security test. But it seems for AI companies that cause real damage there is a lack of accountability for AI models going haywire. Sources: https://pastebin.com/HrK1tX2A

Real processes, if they are not followed properly, can be a convenient way for threat actors to manipulate employees into wiring over thousands of dollars. Sources: https://pastebin.com/i5spRdXz

As cars become computers on wheels there are more opportunities for hackers to exploit them to become tools in a larger operation. This is the first time we've seen the exploitation of an aftermarket head unit system, but it won't be the last. Sources: https://pastebin.com/FdXwZBtt