News

Verified reporting on breaches, outages, arrests, takedowns and the disclosures that change how security teams spend their week. Updated throughout the day.

13 articles

3D conceptual illustration of CERT-In mobile cyber alert showing SMS smishing packets unfolding into a trojanized Android APK intercepting UPI payments and banking credentials

High

NewsBanking & Fintech

CERT-In Warns of Massive Android Smishing Campaign Masquerading as Traffic E-Challans

CERT-In issued advisory CIAD-2026-0038 warning against an aggressive smishing blitz delivering trojanized APKs disguised as official Parivahan traffic e-challan notices.

14 Sept 20267 min read

Mei-Lin Chen

NewsTechnology, Cloud & SaaSCritical
Google September 2026 Android Bulletin Patches Critical System Zero-Click RCE Flaws
Google’s September 2026 Android security update resolves 34 vulnerabilities, led by critical zero-click remote code execution defects in the Android System framework.
Mei-Lin Chen14 Sept 20267 min read
NewsGovernment & DefenceHigh
Florida DMV confirms DAVID driver database breach after officer credentials compromised on personal device
Florida’s motor vehicle department confirmed an intrusion into its DAVID database after an officer’s credentials were stolen by infostealers; ShinyHunters claims 200,000+ driver records.
Priya Raman14 Sept 20265 min read
NewsTechnology, Cloud & SaaSMedium
Microsoft September 2026 cumulative updates trigger Remote Desktop Services deadlock across Windows Server
Enterprise sysadmins face operational paralysis as September 2026 security updates trigger Remote Desktop Services freezes across Windows Server 2019, 2022, and 2025.
Aisha Noor14 Sept 20265 min read
NewsHealthcare & PharmaBreaking
IDScan.net says customer information in cloud accounts may have been accessed
IDScan.net says an unauthorized party may have accessed or copied cloud-account customer information, including names and government ID numbers.
Priya Raman12 Sept 20265 min read
NewsBanking & FintechHigh
StreamRAT Android banking trojan targeted 570,000 European users through deceptive Meta streaming ads
ThreatFabric uncovers StreamRAT, a sophisticated Android banking trojan promoted via fraudulent Meta TV streaming ads, hijacking Accessibility services to drain accounts.
Aisha Noor12 Sept 20265 min read
NewsCrypto & Web3High
Trezor alerts 347,000 customers after third-party Brevo breach triggers targeted phishing wave
A cyberattack on email service provider Brevo compromised 347,000 Trezor customer records, fueling sophisticated phishing campaigns designed to steal crypto recovery seeds.
CST Newsroom11 Sept 20265 min read
NewsGovernment & DefenceHigh
A CVSS 10.0 ERP Flaw Your Scanner Will Never Report: The CERT-In Blind Spot
CERT-In scored an unauthenticated RCE in Manacle ERP at CVSS 10.0. The CVE is in NVD, but with no CPE data your scanner cannot match it. Here is how to fix that.
CST Newsroom11 Sept 20266 min read
NewsCrypto & Web3Critical
Liquid Network Elements Protocol Exploit Triggers 4,000 BTC Sidechain Drain
A vulnerability in the Elements sidechain protocol led to an unauthorized 4,000 BTC withdrawal from the Liquid Federation multi-sig peg, prompting an emergency network freeze and partial fund recovery.
CST Newsroom7 Sept 20266 min read
NewsHealthcare & PharmaCritical
Healthcare ransomware wave: OVP Health and ProHealth Medical hit within weeks
Emerging crews Storm and Krybit claimed attacks on two healthcare providers, with a combined 244 GB of patient and employee data alleged stolen.
CST Newsroom6 Sept 20265 min read
NewsTechnology, Cloud & SaaSCritical
HostDZire ransomware encrypts ESXi virtual disks across three countries
An August attack compromised multiple VMware ESXi nodes at hosting provider HostDZire, encrypting virtual disks beyond recovery across India, the Netherlands and the US.
Daniel Okafor2 Sept 20266 min read
NewsGovernment & DefenceHigh
Rhysida ransomware hits Berlin Senate network as public sector attacks accelerate
The Rhysida group claimed an attack on Berlin’s Senate network, part of a run of incidents that also struck a national tax authority and a justice ministry within two weeks.
Daniel Okafor1 Sept 20265 min read
NewsTransport & LogisticsHigh
CEVA Logistics cyberattack halts shipping across eight European warehouses
A cyberattack on CEVA Logistics stopped goods moving out of eight European sites, delaying deliveries for major customers and reviving hard questions about logistics resilience.
CST Newsroom1 Sept 20265 min read

Sector Intelligence

All Industry Verticals

Explore threats, incident disclosures, and compliance mandates tailored to your sector.

Browse all 11 verticals →

All Industries Banking & Fintech20 Industrial, OT & IoT11 Healthcare & Pharma7 Government & Defence25 Technology, Cloud & SaaS67 Energy & Utilities5 Telecom & Media9 Retail & E-commerce5 Transport & Logistics2 Education & Academia7 Crypto & Web33