#cybersecurity Tech News.
10 stories in the last 7 days
The latest cybersecurity news, distilled by AI into sharp ~100-word summaries. ByteBrief tracks cybersecurity across dozens of tech sources and brings you only what matters, updated hourly. Tap any story for the full brief, or open the original source.
CoinDCX admitted a loss of 15.99 million USDT, valued at Rs 152.02 crore, after confirming a breach on October 25. The exchange stated its automated sweeping service failed due to unknown vulnerabilities in old wallet infrastructure. This loss is approximately 2.4 times smaller than the Rs 368 crore breach the company suffered in July 2025.
Hardware wallet maker Keystone announced it will destroy 18,835 unsold devices following a website breach on Oct. 20 that exposed 25,964 buyer records. The incident stems from a failed automated deletion tool and a flaw allowing counterfeit devices to pass checks, prompting the company to cut data retention to 90 days.
On 15 and 16 October 2026, a crawler linked to Roblox downloaded 145.5 GB of data from 712 projects, including 364 adult files. The automated tool ignored robots.txt rules and scraped 224 projects from SmutBase for AI training purposes before being blocked.
Citrix released patches for eight NetScaler zero-day vulnerabilities on Sunday, September 26, 2026. This rapid response follows a 17-day window from discovery to disclosure, a significant drop from the 40 days averaged in 2024 and 2025. The fixes address CVE-2026-88771 through CVE-2026-88778, marking a shift toward faster vendor coordination after Dutch analysts spotted the attacks.
Eye Security researchers disabled the update mechanism for the abandoned Popcorn Time fork, Time4Popcorn, to stop millions of computers from being hijacked. The team registered 15 domains and served fixes to roughly 2 million systems by March 2026, achieving a 98% reduction in update requests.
Organized crime teams stole over $100 million dollars of computing and related gear via transit interception since June 2026. The thefts involve hacking, phishing, vehicular ramming, and GPS signal spoofing, affecting data center logistics globally.
The Australian Signals Directorate disconnected the Amadey malware backend, stopping criminals from accessing 180,000 infected computers globally. This action occurred on October 27, following a tip about 5 terabytes of stolen data. The destruction included 4.8 million records from Australians and hundreds of thousands from other nations, preventing further credential theft.
Australia's cybersecurity agency warned on Tuesday that artificial intelligence poses an unprecedented threat to computer networks and critical infrastructure. The Australian Signals Directorate reported an 80% increase in malicious activity, issuing over 4,400 warnings about potentially malicious activity in the past year.
Hackers drained $953,000 from 48 cryptocurrency wallets linked to Telegram trading bot Bloom in under two minutes. The attack affected nine traders and occurred via a remote code execution vulnerability in a third-party module. Bloom pledged to reimburse all affected traders in full.
CISA added two critical PHP vulnerabilities tracked as PHP2Shell to its catalog on Monday, ordering federal agencies to patch by Thursday. Threat actors exploited CVE-2026-109618 and CVE-2026-109619 for remote code execution. Roughly 70% of websites use PHP, with 5.1 million hosts exposed. Researchers confirmed in-the-wild exploitation over the weekend.
Summaries by ByteBrief