Fake Netflix APK Delivers PanDa RAT Through Meta Ads
Fake Netflix and streaming APKs in Meta ads delivered PanDa RAT. Check Android permissions, remove the app, and secure banking accounts safely.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 24, 2026
Latest reports
SynkLoader Malware Uses a Fake Windows Lock Screen to Steal Passwords
SynkLoader arrives through fake Teams help-desk chats, steals Windows passwords with PhishLocker, and opens remote access. See what to do after each exposure.
Claude Sessions Stolen by Infostealers Drain Usage
Anthropic warns that infostealers are stealing Claude sessions and draining usage. Learn how to revoke access, clean the device, and secure other accounts.
McKesson Data Breach: What Is Confirmed So Far
McKesson confirms data theft tied to a subset of Oncology & Multispecialty and Medical-Surgical customers. See what is confirmed and what to do.
.vu Phishing Surge Uses 1,660 Domains to Steal Accounts
A .vu phishing operation used 1,660 short-lived domains and AiTM login relays. Learn the warning signs and what to do after a click or…
Carhartt Data Breach Exposes 12.9 Million Accounts
The validated Carhartt breach contains 12.9 million accounts with names, emails, phone numbers, and addresses, but no listed passwords.
TerminalFix Turns Fake CAPTCHA Into a Network Tunnel
Microsoft says TerminalFix uses a fake CAPTCHA, PowerShell, DLL sideloading, and a reverse tunnel. Check these artifacts if the command ran.
FBI Disrupts QTFY Router Botnet Behind China-Linked Attacks
The FBI and DOJ disabled QTFY’s QScan and QTRouter platforms. Compromised routers and IoT devices hid attacks on critical infrastructure.
Klever Fixes 2 Critical KLV Minting Flaws
Klever-Go flaws CVE-2026-54754 and CVE-2026-54755 could create unbacked KLV. One was exploited in June; version 1.7.19 fixes both.