BTMob Fraud-as-a-Service Platform Uses 1,400 Live Servers to Power Android Device Takeovers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 18, 2026 BTMob is an Android banking malware platform built to turn phones into tools for fraud. It reaches victims through fake apps, cloned download pages, and messages that look like routine customer support. Once installed, it can give …

GEEKOM Mini PC Realtek LAN Driver Package Found Infected With Asruex Trojan

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 18, 2026 A network driver download is meant to get a computer online. In this case, it became a potential malware route after a Realtek LAN driver package on a legacy GEEKOM support page was flagged as carrying the …

Kimsuky Expands Its Cyber Espionage Arsenal With Local AI Development Environment

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kimsuky, the North Korean espionage group, has expanded a campaign known as Operation GitPower with a local artificial intelligence development setup. It combines phishing emails with tools that may help create lures, review stolen material, and adapt operations faster. The …

Octagon Can Steal SMS One-Time Codes During Banking and Crypto Account Takeovers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Octagon is an Android theft tool that turns an infected phone into a platform for account takeover. It can steal login details, watch the screen, and capture verification codes that banks and exchanges use to protect accounts. It is sold …

Apple Fixes 28 Security Vulnerabilities Across macOS, iOS, and iPadOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 18, 2026 Apple has released security updates for macOS, iOS, and iPadOS, addressing 28 vulnerabilities that could expose users to data leakage, application crashes, kernel memory access, and arbitrary code execution. The updates were released on August 17, 2026, …

OpenAI Warns AI Models Can Automate Cyberattacks and Exploit Security Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 18, 2026 OpenAI Warns AI Models Can Automate Cyberattacks and Exploit Security Vulnerabilities OpenAI has warned that advancing artificial intelligence models are increasingly capable of automating critical phases of real-world cyberattacks. This technological shift enables threat actors to identify …

Why Threat Intelligence Feeds Often Fail to Meet SOC Expectations 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat intelligence (TI) feeds are expected to close visibility gaps that inevitably emerge in enterprise SOCs and make investigations faster and more effective. This promise sounds particularly attractive to leaders of growing SOC teams that need to face an increasing alert number …

Crypto Scammer Uses Claude Code to Process 100,000+ Phone Numbers for Victim Targeting

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 18, 2026 A cryptocurrency fraud operation has been found using AI coding tools to turn huge phone lists into a sharper victim-targeting system. The campaign combined account checks, phishing emails, phone calls, and counterfeit wallet software to pursue people …

10 Best Dark Web Monitoring Tools in 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Dark web monitoring involves tracking activities on the hidden internet, accessible only via specialized software and configurations. This shadowy realm hosts illicit markets for stolen data, illegal drugs, weapons, hacking services, and other criminal enterprises. By scraping intelligence from these …

CISA Warns of Ray-Project Ray Code Injection Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 18, 2026 CISA has added a critical Ray-Project Ray vulnerability, tracked as CVE-2025-62593, to its Known Exploited Vulnerabilities catalog after confirming exploitation in the wild. The flaw can allow remote code execution on systems where vulnerable Ray development environments …