🇹🇬BREAKING: Vercel Confirms KVM Zero-Day

Security researcher Paulos Yibelo claims to have discovered a full VM-escape zero-day, allowing a guest VM to reach the host with root-level access.

Vercel CEO Guillermo Rauch confirmed that the company identified a KVM zero-day through its Vercel Sandbox bounty program, describing it as affecting a major Linux virtualization technology. A full technical write-up is reportedly coming.

Vercel’s Sandbox bounty program offers up to $50,000 for Critical vulnerabilities, including Firecracker microVM-to-EC2 host escapes and cross-tenant access.

🇹🇬Subscribe — @comnotify

🇹🇬BREAKING: Odisha Cyber-Fraud Mule Account Network Busted

Odisha Police arrested four people in Bhubaneswar for allegedly operating a mule-account network used by cyber fraudsters to route money across the country.

Police said the network used Telegram, WhatsApp, VPNs, crypto payments and SMS-forwarding APKs, with suspected links to foreign operators. The investigation began after a Bhubaneswar resident allegedly lost ₹91.9 lakh in an online investment scam.

🇹🇬Subscribe — @comnotify

🇹🇬BREAKING: Man Dies After Fall From 43rd Floor of Noida’s Supernova

A 28-year-old software engineer, Sambhav Jain, from Manesar, died after jumping from the 43rd-floor balcony of an Airbnb at Supernova in Sector 94, Noida.

Police said Jain had booked the Airbnb for a one-day stay. An AC repair team working nearby reportedly spotted him at the balcony railing and tried to persuade him to step back, but he subsequently fell.

Police are investigating the circumstances surrounding the death, including reports of financial difficulties, debt and family-related stress.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: Retired Mumbai Teacher Duped of ₹89 Lakh in Digital Arrest Scam

A retired teacher from Chembur, Mumbai, was allegedly duped of ₹89 lakh by a fraudster posing as an NIA officer. The scammer falsely claimed her Aadhaar card was linked to a ₹2.55 crore fraud and threatened her with arrest. 

The woman sold gold and even took a ₹23 lakh personal loan to make payments to the fraudsters. She eventually confided in her daughter after being asked for more money, following which she approached the cyber police. 

Police have registered a case and launched an investigation.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: Denmark Reports Major Data Breach Affecting 8.8 Million

Denmark says unauthorised parties gained access to the names, addresses and CPR identification numbers of around 8.8 million people through the country’s Central Person Register.

The figure includes current residents, people who have emigrated and deceased individuals. The access occurred during September, after attackers misused a Danish private company’s legitimate access to the register.

Authorities have stopped the company’s access, while police and Denmark’s data protection authority investigate the incident. Officials say it is still unclear who was behind the breach.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: Benin Players Want Messi’s Final Argentina Shirt

Benin players are reportedly hoping to leave Lionel Messi’s farewell game with a piece of memorabilia from the Argentine legend.

Defender Tijani Mohamed has already said he plans to ask Messi directly for his shirt after the match, saying: “Messi, look, I love you so much, give me your shirt.”

The Argentina vs Benin farewell match is scheduled for October 6 at the Monumental in Buenos Aires.

🇹🇬— @comnotify

🇹🇬JUST IN: Japan’s Times Car Breach: 6.6M Accounts Affected

Japanese car-sharing service Times Car confirmed that approximately 6.6 million accounts were affected by unauthorised access. Personal information including names, addresses, birth dates, phone numbers and email addresses was accessed.

For around 1.6 million accounts, identity-verification documents including driver’s licence images were also exposed. Credit-card information was not affected.

A new report today says more than 37,000 people have registered interest in a potential class-action lawsuit over the breach.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: Pentagon Stops Using Anthropic AI

The Pentagon says it has ceased using Anthropic products, months after designating the company a supply-chain risk.

However, sources told the BBC that Claude was still being used last week, including in military operations involving Iran. Claude was also reportedly integrated into Palantir’s Maven intelligence platform.

Defense Secretary Pete Hegseth had set a deadline of late August to phase out Anthropic’s technology.

🇹🇬Subscribe — @comnotify

🇹🇬BREAKING: ASOS App Used to Send Hacker Ransom Note

ASOS customers received a shocking “ASOS HACKED” notification through the company’s own app. The message, addressed to ASOS’ DPO and IT team, claimed attackers had fully compromised its Snowflake instance and threatened to leak data unless the company engaged with them. 

ASOS is investigating the incident, but there is currently no confirmation that customer data was accessed or stolen. The attackers also reportedly linked to a Telegram channel. 

🇹🇬— @comnotify

🇹🇬BREAKING: 960,000 Records From South Korea’s Largest Church Found on Hacker Server

Around 960,000 member records from Seoul’s Yoido Full Gospel Church were reportedly found on an attacker-controlled server, according to cybersecurity firm Oasis Security.

The 47.3GB data trove reportedly included names, addresses, phone numbers, resident registration numbers, around 330,000 offering records, 68,000 electronic approval documents and 14,706 internal messenger conversations.

The church says it is investigating the suspected breach with authorities and security experts, so the exact scope of the confirmed leak is still being established.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: Google Pixel 10 Targeted at Pwn2Own Ireland

Google’s Pixel 10 is facing multiple hacking attempts at Pwn2Own Ireland 2026, where security researchers demonstrate zero-day exploits against fully updated devices.

The contest offers $300,000 for a successful remote compromise of the Pixel 10. Researchers have 90 days to allow vendors to patch reported vulnerabilities before public disclosure.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: Swiss Marketplace Ricardo Exposes 890,000 Accounts

Swiss online auction platform Ricardo has disclosed a data breach affecting approximately 890,000 user accounts after a security flaw allowed unauthorised access to customer order data.

The exposed information includes names, postal addresses and phone numbers. Business accounts may also have had company names exposed.

Ricardo detected suspicious activity on October 7 and says the vulnerability has now been fixed. Email addresses and passwords were not affected.

The company is notifying affected users and plans to file a criminal complaint with Swiss authorities.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: FBI Arrests Suspect in ShinyHunters Data Breach

The FBI has arrested a Canadian citizen in Pennsylvania suspected of being a key co-conspirator in the ShinyHunters-linked breach of FBI agents’ data, according to The New York Times.

Investigators say the breach involved a contractor who allegedly failed to apply a critical security patch. The investigation is ongoing.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: MUSK STEPS UP ATTACK ON AMBANI, SHARES REPORTS ON BJP LINKS

Elon Musk escalated his public feud with Mukesh Ambani on October 10, sharing media reports alleging that a Reliance-funded firm helped boost BJP campaigns on Facebook and that Reliance-linked Qwik Supply made major political donations.

According to the reports, Qwik Supply donated ₹385 crore to the BJP and ₹25 crore to Shiv Sena through electoral bonds. Musk’s posts come amid his accusations that business interests are delaying Starlink’s entry into India to protect existing telecom operators.

The government has rejected claims of unfair treatment, saying licensed satellite operators must meet security requirements before launching services. Reliance has not publicly responded to Musk’s latest allegations.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: $92.9M LOST IN LEDGER WALLET SUPPLY-CHAIN ATTACK

Ledger confirmed an unauthorized hardware implant in a device linked to reseller CryptoBilis, as blockchain investigators estimated that $92.9 million was drained from 311 wallets across five networks.

CryptoBilis has reportedly suspended sales of all hardware wallets, including Ledger, Trezor, Tangem and SafePal, while the investigation continues. Ledger says there is no indication its own systems were compromised.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇨BREAKING: $92.9 MILLION LOST IN LEDGER WALLET SUPPLY-CHAIN ATTACK

Ledger confirmed that an affected device purchased through its reseller CryptoBilis contained an unauthorized hardware implant, as investigators traced approximately $92.9 million in suspected crypto theft across 311 wallets. The losses span five blockchain networks.

The implant may have captured users’ recovery phrases during setup, potentially allowing attackers to drain their funds. Ledger has asked CryptoBilis to halt sales while the investigation continues. The company has not confirmed the final loss total or established the full attack mechanism.

CryptoBilis has also reportedly stopped selling hardware wallets from other brands, including Trezor, Tangem and SafePal.

⚡️ Join: @comnotify | @star2ad #1 OTC