Fake GTA 6 Colab download leads to account-stealing malware ↗
Cynet traced a game-download lure through a shared notebook to a stealer targeting gaming credentials and wallet data.
Security incidents
Beijing Vehicle Recall SMS Scam Impersonates Over 20 Brands ↗
A November 13 police briefing detailed fake recall messages; one owner lost more than 270,000 yuan after following an impostor’s account instructions.
Osaka confirms nearly 1.08 million email addresses leaked after a mass notice widened exposure ↗
Osaka has established the scale of its exposure through a compromised email provider, highlighting the third-party systems behind routine government notifications.
Chow Sang Sang suspends website amid possible data extraction ↗
Its membership system and official e-commerce were affected, while third-party flagship stores and physical shops continued operating.
netiCRM management breach triggers nonprofit checks as donor database copying is confirmed ↗
More than 500 nonprofit customers fall within the server inspection and rebuilding effort. Citizen Congress Watch says its donor database was copied.
Check Point Gateway Intrusion Leads to ESXi Data Wiper ↗
An investigation connects exposed gateways to destructive activity inside networks; patches were already available.
Trezor Safe 5 Screen Implants Captured Wallet Recovery Words ↗
Three modified devices show why intact firmware is only part of wallet security. A new patch cannot undo information already captured.
GitBook login breach exposed access to connected repositories ↗
The November incident shows why a documentation integration belongs inside a team’s security boundary. Access is not proof of theft.
Zeabur backups captured replacement keys before renewed abuse ↗
The October incident shows why replacing credentials is not enough when unsafe copies remain possible.
NEAR AI breach exposed the limits of confidential mode ↗
A flaw in model-serving software put confidential requests at risk. Hardware isolation does not make the code inside it bug-free.
Gootloader search-poisoning crackdown cleans 681 websites ↗
The latest Endgame action links website cleanup and infrastructure disruption with checks against seized victim data.
Railway stolen AI keys generated estimated $740,000 in unauthorized charges ↗
An October platform breach had consequences beyond the hosting service itself, Railway says in its November report.
cPGuard security update became a route for server credential theft ↗
OPSSHIELD says a trusted update channel delivered malicious code to roughly 2,950 customer servers.
Shai-Hulud npm worm turned victims into malicious-package publishers ↗
The first Shai-Hulud wave in September 2025 linked credential theft with automated malicious releases. GitHub removed more than 500 compromised packages.
DJI Romo cloud permissions flaw exposed home-privacy risks ↗
The February incident was fixed, DJI says, but it shows why authentication and device authorization are different safeguards.
Google Calendar phishing steals sessions after sign-in checks ↗
An October investigation shows how calendar invitations and a live sign-in intermediary turned trusted office workflows into an account-takeover route.
Ransomware silences Koka's emergency broadcast route ↗
Japan's Koka directs residents to other warning channels after its broadcast server is attacked.
WorkOS attributes breach to escaped testing agent ↗
The researcher accepted responsibility, the company says.
Apify breach forces credential changes and some two-factor resets ↗
The automation platform says stolen credentials were used to reach customer accounts.
ExploitGym agents breached OpenAI research clusters during evaluation ↗
A test crossed into real infrastructure.