Microsoft's patch for Windows Defender zero-day ShieldBreak (CVE-2026-69414) is still bypassable, a new PoC called ShieldCrash was published today by researcher Nightmare-Eclipse. It demonstrates arbitrary file read as SYSTEM on all supported Windows versions running the September 2026 patches.

A group that came together through online gaming platforms stole more than $245 million in cryptocurrency. Its ringleader, a 22-year-old Singaporean living in Miami named Malone Lam, pleaded guilty in Washington.

120 MILLION TELEGRAM USER RECORDS ALLEGEDLY LEAKED

The listing claims the dataset contains fields including:

* Phone numbers and country codes
* First and last names
* Telegram usernames and nicknames
* User IDs
* Email addresses where available
* Country information
* Source metadata

'Do NOT underestimate the power of this tech' — AI researcher Jacob Coxon loudly RESIGNS from Anthropic.

'Could kill us by end of decade. This is not a marketing STUNT'.

German Police Access Encrypted Chats

German police intercept WhatsApp, Telegram, and Signal communications by linking Web or Desktop clients to investigated accounts to bypass end-to-end encryption without installing spyware, a technique that raises legal controversies over access to unauthorized historical messages.

Apple Now Sends Direct iPhone Alerts for Mercenary Spyware Attacks

Apple has expanded its Threat Notification system to warn users directly on their iPhones when it detects that they may have been individually targeted by sophisticated mercenary spyware.

Huawei and Cambricon raise prices significantly.

International Coalition Formed Against Telecom and Cyber Fraud.

· China initiates coalition in Lianyungang
· 46 founding countries, 34 observers, and 4 international organizations
· Focus on cross-border telecom and cyber fraud

Cyberattack Leaves UK Travelers Stranded

1,300 flights canceled Tuesday, 177 more on Wednesday.

Earlier rumors pointed to pro-Israel hackers.

Iran Claims It Hacked US Submarine.

Report says cyber and electronic warfare redirected it to Iranian waters.

Over 36,000 Plex Servers Still Vulnerable.

· Servers exposed online running outdated versions
· Plex urges immediate update to version 1.43.3
· No CVE IDs assigned yet, complicating response

Israel Top Target for Hacktivists Worldwide

· Israel hit with 16% of all hacktivist campaigns in H1 2026
· Over 1000 attacks claims recorded against Israel
· 85% of attacks by Pro-Palestine, pro-Russia and anti-Western groups

#TGITM @TheGhostITM

UAE Warns AI Is Making Cyberattacks More Complex

· AI makes attacks harder to trace and attribute
· Threats now include cybercrime and cyberwar
· Social media exploitation also rising

French Tax Authority Hacker Arrested

· 18-year-old suspected member of ZeroBytes group arrested
· Group claimed theft of data from over 600,000 people
· Stolen data includes names, tax IDs, emails, and financial info

Saudi Arabia Launches New Cyber Inspections

· Inspections target government, private, and critical infrastructure
· Aim to boost compliance and identify violations
· Focus on protecting critical infrastructure and government services

Baku to Host First International Ethical Hacking Conference

· CyberHackCon 2026 set for October 27 in Baku
· Focus on offensive security, critical infrastructure, AI threats
· Over 20 international speakers confirmed

Hackers Stealing Claude AI Tokens

· Attackers steal session data to hijack users' Claude accounts
· Victims report unusual token consumption with no activity
· OAuth keys used to create Claude Code sessions on victims' accounts

Boston Scientific Hit by Cyberattack

· Attack disrupts production, orders, and shipments
· Company may miss Q3 and full-year 2026 financial forecasts
· Significant impact on financial performance expected

Attackers are turning breach secrecy into leverage.

Bitdefender says some offer clean recovery and confidentiality for payment. Meanwhile, 55.2% of IT/security pros who experienced a breach or incident said they were asked to keep a breach quiet even when it should have been disclosed.