🇹🇬BREAKING: FBI Arrests Suspect in ShinyHunters Data Breach

The FBI has arrested a Canadian citizen in Pennsylvania suspected of being a key co-conspirator in the ShinyHunters-linked breach of FBI agents’ data, according to The New York Times.

Investigators say the breach involved a contractor who allegedly failed to apply a critical security patch. The investigation is ongoing.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: MUSK STEPS UP ATTACK ON AMBANI, SHARES REPORTS ON BJP LINKS

Elon Musk escalated his public feud with Mukesh Ambani on October 10, sharing media reports alleging that a Reliance-funded firm helped boost BJP campaigns on Facebook and that Reliance-linked Qwik Supply made major political donations.

According to the reports, Qwik Supply donated ₹385 crore to the BJP and ₹25 crore to Shiv Sena through electoral bonds. Musk’s posts come amid his accusations that business interests are delaying Starlink’s entry into India to protect existing telecom operators.

The government has rejected claims of unfair treatment, saying licensed satellite operators must meet security requirements before launching services. Reliance has not publicly responded to Musk’s latest allegations.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: $92.9M LOST IN LEDGER WALLET SUPPLY-CHAIN ATTACK

Ledger confirmed an unauthorized hardware implant in a device linked to reseller CryptoBilis, as blockchain investigators estimated that $92.9 million was drained from 311 wallets across five networks.

CryptoBilis has reportedly suspended sales of all hardware wallets, including Ledger, Trezor, Tangem and SafePal, while the investigation continues. Ledger says there is no indication its own systems were compromised.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇨BREAKING: $92.9 MILLION LOST IN LEDGER WALLET SUPPLY-CHAIN ATTACK

Ledger confirmed that an affected device purchased through its reseller CryptoBilis contained an unauthorized hardware implant, as investigators traced approximately $92.9 million in suspected crypto theft across 311 wallets. The losses span five blockchain networks.

The implant may have captured users’ recovery phrases during setup, potentially allowing attackers to drain their funds. Ledger has asked CryptoBilis to halt sales while the investigation continues. The company has not confirmed the final loss total or established the full attack mechanism.

CryptoBilis has also reportedly stopped selling hardware wallets from other brands, including Trezor, Tangem and SafePal.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇨BREAKING: MEDIAMARKT PULLS ALL LEDGER WALLETS AMID TAMPERING REPORTS

European electronics retailer MediaMarkt has removed all Ledger products from its stores and website after customers reported suspected hardware tampering in Ledger Nano X wallets purchased at separate locations.

The devices allegedly contained hidden LTE modules capable of transmitting recovery phrases to attackers. Ledger has confirmed implants in devices linked to reseller CryptoBilis in Southeast Asia, but the reports involving European retailers remain under investigation.

Ledger says confirmed cases so far are linked to CryptoBilis, so the wider claims should not be treated as proof that all Ledger devices are compromised.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇨BREAKING: TELEGRAM CHANNEL CLAIMS TO LEAK NETANYAHU’S PRIVATE PHOTOS AND VIDEOS

A Telegram channel is publishing videos and photos allegedly showing Israeli Prime Minister Benjamin Netanyahu aboard a military helicopter and inside the official Wing of Zion aircraft.

The channel claims hackers accessed the phones of Sara Netanyahu and Israeli diplomat Yossi Shelley. It is reportedly demanding $1,011 in Bitcoin for its first batch of files.

However, the alleged phone hacks and authenticity of the leaked material have not been independently verified, and Israeli authorities have not publicly confirmed the claims.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: SUSPECTED CHINESE SPIES HACK BEYONDTRUST SERVERS USING ZERO-DAY

A suspected China-linked espionage group exploited a zero-day vulnerability, CVE-2026-102764, in BeyondTrust Remote Support appliances, gaining access to sensitive credentials and potentially taking control of affected systems.

BeyondTrust confirmed that attackers compromised one company-hosted and one self-hosted appliance in August. The company said its security sensors raised alerts in real time, but an automated third-party triage tool incorrectly closed them as false positives.

The critical flaw has since been patched, but organisations using self-hosted systems are urged to apply the update and check for signs of compromise.

⚡️ Join: @comnotify | @star2ad #1 OTC

🇹🇬BREAKING: 19-YEAR-OLD SUSPECT CAUGHT AFTER LEAVING IP TRAIL IN DODO PIZZA HACK

A 19-year-old suspected member of the hacking group DataSuckers was reportedly tracked through his home IP address after accessing stolen data from Dodo Pizza’s systems, according to Russian media.

Investigators say the group allegedly gained access using company credentials exposed on GitHub, then reached internal systems and databases. The breach reportedly exposed customer details and order histories.

The suspect has been placed under house arrest, while two other alleged members have also been detained. One suspect reportedly remains at large.

⚡️ Join: @comnotify | @star2ad #1 OTC

⚠️BREAKING: TELEGRAM SHARES USER DATA WITH U.S. AUTHORITIES

Newly reported court records reveal that Telegram provided a user's phone number, user ID, and IP address to U.S. authorities in a case involving a man accused of participating in the October 7 attacks.

Telegram reportedly said it shared the data voluntarily, while U.S. authorities claimed they acted under a court order.

According to the report, Telegram had shared data relating to 2,253 users as of January 2026.

🔔Subscribe: @comnotify

⚠️JUST IN: TELEGRAM RENAMES ANONYMOUS NUMBERS TO COLLECTIBLE NUMBERS

Telegram has begun updating its app interface to rename Anonymous Numbers to Collectible Numbers.

The terminology is now appearing across mobile and desktop translation strings, following a similar change on Fragment earlier in 2026. These blockchain-linked +888 numbers let users create Telegram accounts without a traditional SIM card.

🔔Subscribe — @comnotify

⚠️BREAKING: TRUMP LAUNCHES $25 MILLION FRAUD WHISTLEBLOWER PROGRAM

US President Donald Trump and Vice President JD Vance have announced a new program offering rewards to people who report fraud involving US government funds.

Under the Fraud Whistleblower Incentive Program (WHIP), eligible tipsters can receive up to $30,000, with rewards calculated at 1% of the fraud uncovered. Tips must lead to a fraud conviction or significant federal enforcement action.

The US Department of Justice will administer the $25 million initiative, with reports submitted through fraud.gov.

🔔Subscribe — @comnotify

⚠️BREAKING: DRIFT HACKERS MOVE $61.6 MILLION IN ETH TO TORNADO CASH

Wallets linked to the $295 million Drift Protocol hack have transferred approximately 25,700 ETH worth $61.6 million to Tornado Cash within two hours, according to blockchain tracking reports.

The wallets had reportedly remained inactive for around two months. Investigators at Mandiant previously linked the April attack to a North Korean hacking group.

After the latest transfers, the attackers reportedly still held around $195 million in ETH. Tornado Cash can make cryptocurrency transactions harder to trace.

🔔Subscribe — @comnotify

⚠️BREAKING: WORKING EXPLOIT EMERGES FOR CRITICAL PHP ZERO-DAYS BEFORE PATCH

Security firm Calif reportedly demonstrated a working exploit for two critical PHP vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, ahead of the scheduled security patch.

A briefly published video showed commands being executed on a WordPress site running PHP 8.5.4. Security researcher Kevin Beaumont reportedly confirmed the screenshot was genuine, while a separate public proof-of-concept remains unreliable.

The flaws could enable remote code execution without authentication, potentially putting websites and applications built on PHP at risk. The official patch was scheduled for 14:00 UTC on October 21.

PHP core developers have warned that temporary configuration changes are not a reliable substitute for upgrading. Administrators should prepare to install the official fix immediately upon release.

🔔— @comnotify

⚠️BREAKING: INDIA WARNS OF AI DEEPFAKE SCAMS USING MODI AND NIRMALA SITHARAMAN

India’s cybercrime agency has warned about fraudulent Facebook and Instagram ads using AI-generated deepfakes of Prime Minister Narendra Modi and Finance Minister Nirmala Sitharaman to promote fake welfare schemes.

Victims are reportedly asked to pay successive charges, including taxes, processing fees and verification fees, to access promised benefits. Some callers reportedly use +92 numbers, Pakistan’s country code.

Authorities urge people to verify government schemes through official channels and never pay upfront fees based on social media advertisements.

🔔Subscribe — @comnotify