Oxygen Forensics, A Russian-run forensics firm spent a decade inside European police departments.

Your car’s app could be telling Big Tech who you are and where you go

A study testing 21 cars from 19 brands and 30 companion apps found connections to advertising and tracking companies, and evidence that some apps shared sensitive personal data.

Modern cars can unlock remotely, route around traffic, stream entertainment, summon roadside help, and cool or heat the cabin before you get in. But those conveniences come with a privacy cost that drivers may struggle to see and are unable to refuse.

We’ve covered cars and privacy a few times before, especially after Mozilla researchers described cars as a “privacy nightmare.”

Chinese hackers impersonated U.S. AI experts and former officials in phishing emails targeting people working on AI policy, regulation and export controls, according to Proofpoint.

The hackers sent fake collaboration offers that led to password-stealing websites. Fewer than 10 people were targeted.

Proofpoint said the campaign appeared focused on gathering intelligence about U.S. AI policymaking rather than simply stealing technology.

Pentagon unveils AI-powered 'Autonomous Warfare Command,' taps Elon Musk for key role.

Andy Burnham’s government is looking for a British alternative to U.S. tech firm Palantir for major NHS and Ministry of Defence contracts as part of its “Buy British” push.

Ministers are considering using a break clause in Palantir’s £330mn NHS data-platform contract next March, possibly giving the company a temporary extension while a UK replacement is developed.

Officials are also examining alternatives for Palantir’s £240.6mn MoD contract, although some warn replacing its technology could be risky.

Attackers are exploiting a critical FortiMail flaw that allows unauthenticated arbitrary file writes.

CISA added "CVE-2026-104286" to KEV. Fortinet published IOCs and workarounds, with fixes still pending for some versions.

Police arrested a 16-year-old suspected of running KillSec.

Authorities took over the #ransomware group’s leak site and shut down five servers. The probe covers about 1,000 suspected attacks worldwide, with about 500 identified as successful so far.

AI agents hacked the hackers, stealing email addresses from security research org.

AI agents hacked the hackers - the Dutch Institute for Vulnerability Disclosure (DIVD) - via two zero-day bugs in its Zammad support platform, abusing the flaws to hijack sessions, run code remotely as the local zammad user, and escalate privileges to root.

The chained exploits took just seconds to move from session hijacking to root access, and on Thursday, the nonprofit bug hunting organization said the miscreants stole data belonging to its volunteer security researchers, including DIVD email addresses and potentially other contact details.

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks.

Russian hacking group Star Blizzard expands phishing operations with new malware technique.

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory.

ASUS warns of critical router flaw triggered by malicious VPN files.

Brazilian Elections: Foreign Interference and Disinformation Networks

Argentine operative Fernando Cerimedo: A Workers’ Party (PT) deputy formally petitioned the Supreme Federal Court (STF) to investigate Cerimedo for allegedly operating a “bot farm” from Bolivia to interfere in Brazil’s election in support of Flávio Bolsonaro.

U.S.-paid ads: Meta approved AI-generated false political ads targeting Brazilian audiences, paid for by a U.S. account, including one that showed Trump urging votes for Flávio. A study by the British organization Eko found that 87% of these policy-violating ads were approved by automated moderation.

Foreign X accounts: Accounts on X based outside Brazil ran paid pro-Flávio content between September 18–21 without disclosing sponsors. X itself identified pro-Flávio profiles in the U.S. and Poland after legal action by candidate Renan Santos.

Israeli disinformation infrastructure: The “Team Jorge” operation, an Israeli private intelligence group, has been linked to election manipulation in 33 countries, with Brazil among its targets.

Indian shadow accounts: A fake Indian Instagram profile was used to request the removal of posts about a Brazilian senator’s assets during the 2026 elections.

Abin warning: A report by the Brazilian Intelligence Agency (Abin), titled “Threats to the 2026 Electoral Process,” explicitly warned of right-wing influencers based in the U.S. running paid electoral propaganda for Flávio Bolsonaro on X.

Microsoft Report: Rise in Cyberattacks Against the Zionist Regime

According to Microsoft’s annual report, the Zionist regime (Israel) was the world’s second most-targeted entity for cyberattacks in the first half of 2026, accounting for 7.6% of recorded attacks.

· The United States ranked first with 25.5%, while Ukraine and Taiwan placed after the Zionist regime.

· Microsoft claims that 39% of one tracked cyber threat cluster’s activity targeted the Zionist regime. The United States followed at 23%, and the UAE at 9%.

· The report says this activity included cyber espionage, disruption attempts, and destructive attacks. Attackers used methods such as phishing, credential theft, and exploitation of vulnerabilities.

The findings highlight how geopolitical tensions continue to shape the global cyber threat landscape, attackers increasingly targeting government, defense, critical infrastructure, and technology sectors. Microsoft’s telemetry indicates that attackers are combining espionage with disruptive operations, aiming to gather intelligence, weaken response capacity, and create psychological impact.

The report also points to a growing use of credential theft and vulnerability exploitation — techniques that make it easier for attackers to get their first foothold inside a system and then carry out more damaging attacks from there.

#CyberAttack #CyberWar #Iran #ZionistRegime #Microsoft #TGITM @TheGhostITM