Security firm Bitdefender identifies a botnet campaign called Midnight Mimosa that embeds malware directly into the firmware of low-cost Android smartphones across 150 countries.
North Korean-linked actors used a compromised infrastructure tool in July 2026 to deploy credential stealers and backdoors across multiple operating systems.
Attackers compromised high-profile developer accounts to inject malicious workflows into hundreds of repositories, stealing credentials from victims.
Cloudflare announces Clef-omni for native multimodal processing, alongside faster inference for Clef and reduced pricing for Clef-flash.
Federal prosecutors allege the executive secretly paid ransoms while overcharging victims for specialized recovery services.
Hackers breached operators for .gh, .sl, and .as domains to obtain unauthorized HTTPS certificates for Google services, Google confirmed on October 6.