🔴 enTouch Administrator Access Offered for Sale for $90
An actor is selling administrator access to enTouch, a Japanese healthcare technology company that connects pharmaceutical and medical device companies with healthcare professionals.
The seller claims access to 45,572 doctor records, 6,003 user accounts, and 33,010 online meeting records, including attendee passwords.
The database also reportedly contains 18,714 survey responses and 15,801 medical representative activity reports.
🔴 US Disrupts Chinese State-Sponsored Hacking Tools
The United States on Thursday announced the disruption of two hacking tools used by Chinese state-sponsored threat actors in attacks against US and foreign critical infrastructure.
Built by Integrity Technology Group (Integrity Tech), MicroScan has been used for vulnerability scanning, while FishHub has enabled network intrusions via spear phishing.
Integrity Tech, the US says, used a Mirai malware variant to build an IoT botnet that facilitated MicroScan’s use for reconnaissance against victims’ networks, including a US power company, NGOs, Japanese and Polish airports, and Taiwanese critical infrastructure entities and universities.
🔴 AI-Driven tool ARTEX used in attacks against South Korean Banks
CrowdStrike analyzes open directories left by an attacker who used the ARTEX AI pentest tool and LLMs to breach South Korean financial firms.
CrowdStrike published a research on a campaign against South Korean financial organizations that ran from late September to early October 2026 and ended with stolen data. The attacker left their working notes where anyone could read them.
Open directories on servers controlled by the attacker exposed Claude Code session histories, ARTEX configuration files, and Claude memory files. Researchers could see how the operator worked, prompt by prompt. That is rare, and it makes this report particularly interesting.
🔴 UNITED STATES: ORLANDO PSYCHIATRIC NURSE PRACTITIONER PRACTICE PATIENT RECORDS LEAKED
A threat actor on an underground forum claims to have compromised the EHR platform of an Orlando, Florida psychiatric nurse practitioner (Snehal Kadia, PMHNP) and leaked "all client data".
The leak includes:
* 181 client contacts (names, dates of birth, emails, phone numbers) * Full medical records for 95 clients (940 PDFs): intake and GAD-7/PHQ-9 questionnaires, diagnoses and treatment plans, progress notes, medication lists, mental status exams * 40 driver's license photos, 112 insurance cards and 700 billing documents * 62 therapist-client messages and practice paperwork
🔴 Let's all get hacked for the sake of OpenAI! This is Sam Altman's perverse message.
Sam Altman, CEO of OpenAI, said in an interview with Politico that to benefit from artificial intelligence, the world will also have to accept its negative effects. Dario Amodei, CEO of OpenAI's competitor, Anthropic, advocated a more cautious approach.
On October 5, 2026, Sam Altman, CEO of OpenAI, stated in an interview with Politico that society will have to accept some negative effects of AI development in order to benefit from the technology. He argued that it is impossible to make AI widely available while also guaranteeing the complete absence of hacking, fraud, and other abuse. However, the benefits of AI, Altman believes, significantly outweigh the potential harm.
🔴 Anthropic is committed to model well-being. If you insult or mistreat Claude, you'll be banned!
Anthropic has updated the rules for using its AI models and, for the first time, explicitly banned users from systematically insulting or abusing the bot. If it goes too far, Claude will simply end the conversation. At the same time, the company has tightened restrictions on the use of AI for surveillance, weapons development, and election interference.
Last August, the company announced it would allow Claude to stop communicating with users who demonstrate "persistent harmful or offensive behavior," as part of a study into "model well-being" issues. The updated rules state that stopping communication remains "the primary response mechanism."
🔴 FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions
The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon.
To that end, the agencies seized several domains and blocked access to platforms that were used to scan, and in some cases infiltrate, U.S. critical infrastructure. The list of seized domains is as follows -
🔴 Russia in chaos: banks, newspapers, Telegram, and websites all crash.
On October 8, a massive outage occurred in Russia, affecting the websites of major news outlets, banks, and popular internet services. Simultaneously, reports of problems emerged at Qrator Labs, a major DDoS protection provider. The cause of the widespread outages has not yet been fully determined.
Users have experienced problems accessing the websites of RBC, Vedomosti, RIA Novosti, Kommersant, Vesti, and Interfax. Some publications' pages are not loading or are opening with significant delays. The issues have affected several major news organizations, so these may not be isolated editorial issues, but rather issues with the overall network infrastructure.
🔴 Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own
Pwn2Own Ireland 2026 has come to an end, and participants earned more than $1.2 million for exploits targeting phones, printers, smart speakers, smart home hubs, a wellness device, AI infrastructure and coding tools, and cloud databases.
The highest rewards were paid out for Google Pixel 10 exploits, which were demonstrated by three teams. They collectively earned more than $560,000 for their work.
The Ikotas Labs team earned the full $300,000 payout by chaining multiple bugs to remotely hack a Pixel phone.
Tim Becker and Yves Bieri received $150,000 for their Pixel exploit — they did not get the full payout because their exploit involved a previously known flaw.
The third Pixel hack was demonstrated by Dimitrios Valsamaras and Ken Gannon, who earned $112,500 for an exploit that chained a zero-day with a previously known vulnerability.
Last year, Valsamaras and Gannon earned $50,000 for hacking a Samsung Galaxy S25 device. They later showed how they exploited vulnerabilities in Samsung software, including the virtual assistant Bixby, to hack mobile devices.
🔴 Formula Predicts When AI Chatbots Are at Risk of Turning Bad
Researchers from George Washington University have published a paper examining whether the time and cause of AI going rogue can be predicted; and if predicted, prevented.
Since 50% of the world’s population carry devices that can run personal AI companions with no internet connection and limited security, they focused their research here. The lack of cloud-based safety filters, real-time telemetry, live monitoring, or the ability to patch weights once deployed provides a good test bed for analyzing AI’s chat-style transformer behavior when left to its own devices.
America's Digital Defenses Face a Critical Deadline as Next-Generation Computing Advances
The United States faces mounting pressure to accelerate its transition to post-quantum cryptography as advances in quantum computing raise concerns about the long-term security of sensitive communications, financial systems, and national security infrastructure.
🔴 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys.
"The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to attacker-controlled Cloudflare Workers," Socket researcher Joseph Edwards said in an analysis.
The owner of a US company was charged with defrauding clients through a ransomware remediation scheme.
Zohar Pinhasi, 50, the owner of MonsterCloud, a US and Israeli national also known as ‘Zack Silver’ and ‘Zack Green’, appeared in a New York court to face wire fraud charges.
According to the indictment, Pinhasi claimed that MonsterCloud could help organizations that fell victim to ransomware to recover their data without paying the attackers.
While cautioning ransomware victims not to pay the attackers, Pinhasi falsely claimed his company could decrypt ransomware.
Software Supply Chains Gain Deeper Visibility Into Hidden Dependencies and AI Authorship
Cybersecurity company Insignary has introduced Clarity AIR, a source-code analysis platform designed to identify undeclared third-party components, estimate AI-generated code contributions, and strengthen software supply-chain transparency.
