⚠️BREAKING: TRUMP LAUNCHES $25 MILLION FRAUD WHISTLEBLOWER PROGRAM

US President Donald Trump and Vice President JD Vance have announced a new program offering rewards to people who report fraud involving US government funds.

Under the Fraud Whistleblower Incentive Program (WHIP), eligible tipsters can receive up to $30,000, with rewards calculated at 1% of the fraud uncovered. Tips must lead to a fraud conviction or significant federal enforcement action.

The US Department of Justice will administer the $25 million initiative, with reports submitted through fraud.gov.

🔔Subscribe — @comnotify

⚠️BREAKING: DRIFT HACKERS MOVE $61.6 MILLION IN ETH TO TORNADO CASH

Wallets linked to the $295 million Drift Protocol hack have transferred approximately 25,700 ETH worth $61.6 million to Tornado Cash within two hours, according to blockchain tracking reports.

The wallets had reportedly remained inactive for around two months. Investigators at Mandiant previously linked the April attack to a North Korean hacking group.

After the latest transfers, the attackers reportedly still held around $195 million in ETH. Tornado Cash can make cryptocurrency transactions harder to trace.

🔔Subscribe — @comnotify

⚠️BREAKING: WORKING EXPLOIT EMERGES FOR CRITICAL PHP ZERO-DAYS BEFORE PATCH

Security firm Calif reportedly demonstrated a working exploit for two critical PHP vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, ahead of the scheduled security patch.

A briefly published video showed commands being executed on a WordPress site running PHP 8.5.4. Security researcher Kevin Beaumont reportedly confirmed the screenshot was genuine, while a separate public proof-of-concept remains unreliable.

The flaws could enable remote code execution without authentication, potentially putting websites and applications built on PHP at risk. The official patch was scheduled for 14:00 UTC on October 21.

PHP core developers have warned that temporary configuration changes are not a reliable substitute for upgrading. Administrators should prepare to install the official fix immediately upon release.

🔔— @comnotify

⚠️BREAKING: INDIA WARNS OF AI DEEPFAKE SCAMS USING MODI AND NIRMALA SITHARAMAN

India’s cybercrime agency has warned about fraudulent Facebook and Instagram ads using AI-generated deepfakes of Prime Minister Narendra Modi and Finance Minister Nirmala Sitharaman to promote fake welfare schemes.

Victims are reportedly asked to pay successive charges, including taxes, processing fees and verification fees, to access promised benefits. Some callers reportedly use +92 numbers, Pakistan’s country code.

Authorities urge people to verify government schemes through official channels and never pay upfront fees based on social media advertisements.

🔔Subscribe — @comnotify

⚠️BREAKING: GODADDY TO REVOKE 404,607 TLS CERTIFICATES

GoDaddy is revoking 404,607 TLS certificates after a third party discovered that their certificate policy information did not comply with the company’s published rules.

The issue affects certificates issued under GoDaddy and Starfield, its certificate authority brand. GoDaddy has corrected the documentation and resumed certificate issuance, while coordinating replacements with affected customers.

Website owners using affected certificates must reissue and reinstall them to avoid potential HTTPS disruptions. GoDaddy says the issue concerns certificate compliance, not evidence that the certificates were compromised.

🔔Subscribe — @comnotify

💬 @CHATED

Over 1,500+ members have now been unmuted and unbanned.

🔔Reminder: Promo selling is not allowed.

⚠️BREAKING: UNIVERSITY HACK EXPOSES 525,000 PEOPLE’S DATA

Hackers accessed a University of Copenhagen test database containing names, Danish national ID numbers, phone numbers and personal email addresses of around 525,000 people.

The university has blocked access and launched an investigation. It remains unclear whose data was affected or whether it was copied.

🔔Subscribe — @comnotify

⚠️BREAKING: Magecart Hack Targets Dozens of Brazilian Fashion Stores

Sansec reports that a Brazilian Magecart gang injected a credit-card skimmer into Convertr’s Plausible analytics script, potentially exposing shoppers’ card details, CVVs and tax IDs during checkout.

Sansec said Convertr was still serving the malicious script on October 26, despite being notified.

🔔JOIN — @comnotify

⚠️BREAKING: WARHORSE STUDIOS HACKED

Warhorse Studios, developer of Kingdom Come: Deliverance, has confirmed a cyberattack in which attackers accessed company systems and data.

CEO Martin Frývaldský called it a serious incident. The studio is investigating, but has not revealed what data was accessed or whether its upcoming Lord of the Rings RPG was affected.

🔔Subscribe — @comnotify

⚠️BREAKING: US ELECTION WATCHDOG SHUTS DOWN SERVICES AFTER HACKING ATTEMPT

The US Federal Election Commission (FEC) took its online filing system offline after a reported hacking attempt, disrupting campaign finance disclosures ahead of the November 3 midterm elections.

The outage blocks mandatory 24-hour and 48-hour spending reports, limiting public visibility into campaign spending. The FEC says IT teams are working to restore service, while voting itself is not expected to be affected.

🔔Subscribe — @comnotify

⚠️JUST IN: $50,000 LOST IN ETHEREUM ADDRESS POISONING ATTACK

A crypto user reportedly lost $50,000 in USDT after sending funds to a fake wallet address designed to resemble the real one.

The scam exploits matching starting and ending characters to trick victims into copying the wrong address.

Always verify the entire wallet address and never copy it from transaction history.

🔔Subscribe — @comnotify