The weekly
10 October 2026
10 stories. Each headline opens the story page; the source line links to the original.
Protect my money and accounts
- Arizona courts say hackers copied backup files covering about 1.3 million people, including Social Security numbers
Old files kept for decades were the target; affected people are urged to place holds on their credit.
- ASOS says its breach began when an employee was tricked into giving up login details
Names and contact details were exposed (not cards or passwords); expect follow-on scam calls and texts pretending to be ASOS.
- Bitdefender finds budget Android phones shipping with built-in malware that runs ad fraud and turns them into proxies
Cheap unbranded phones can arrive already infected, and a factory reset may not remove it; buy from known sellers and check for firmware updates.
- Fake Hulu email claims your subscription was cancelled after a failed payment
The "update payment details" button leads to a phishing site that captures card and personal details.
- Fake NatWest email asks you to "update your account information" via a link to a copycat site
The link leads to a fake NatWest login that steals your details; go to your bank through its app or the number on your card instead.
- FakeGit campaign returns with 17,610 fake GitHub repositories spreading the SmartLoader/StealC malware
Free tools and 'AI' add-ons from look-alike code pages can steal logins; only download from the vendor's official page.
- Microsoft: Windows devices that miss updates will lose access to Windows Update when certificates expire in 2027
Windows PCs that are not kept up to date will stop receiving security updates in 2027; installing the latest updates now avoids being locked out.
Keep the kids and the household safe
- Arizona courts say hackers copied backup files covering about 1.3 million people, including Social Security numbers
Old files kept for decades were the target; affected people are urged to place holds on their credit.
- Bitdefender finds budget Android phones shipping with built-in malware that runs ad fraud and turns them into proxies
Cheap unbranded phones can arrive already infected, and a factory reset may not remove it; buy from known sellers and check for firmware updates.
- Fake Hulu email claims your subscription was cancelled after a failed payment
The "update payment details" button leads to a phishing site that captures card and personal details.
- Fake NatWest email asks you to "update your account information" via a link to a copycat site
The link leads to a fake NatWest login that steals your details; go to your bank through its app or the number on your card instead.
- Microsoft: Windows devices that miss updates will lose access to Windows Update when certificates expire in 2027
Windows PCs that are not kept up to date will stop receiving security updates in 2027; installing the latest updates now avoids being locked out.
Keep my shop trading
- ASOS says its breach began when an employee was tricked into giving up login details
Names and contact details were exposed (not cards or passwords); expect follow-on scam calls and texts pretending to be ASOS.
- Bitdefender finds budget Android phones shipping with built-in malware that runs ad fraud and turns them into proxies
Cheap unbranded phones can arrive already infected, and a factory reset may not remove it; buy from known sellers and check for firmware updates.
- Citrix urges immediate patching of a new NetScaler remote-code-execution flaw (CVE-2026-107406)
Another NetScaler flaw on top of this month's exploited ones; any business running these appliances should update at once.
- FakeGit campaign returns with 17,610 fake GitHub repositories spreading the SmartLoader/StealC malware
Free tools and 'AI' add-ons from look-alike code pages can steal logins; only download from the vendor's official page.
- FBI seizes domains behind Chinese state-linked Flax Typhoon scanning and phishing tools
The tools relied on hijacked internet-connected devices; update or replace old routers and cameras.
- Microsoft Teams to flag impersonators and plug in third-party deepfake detection
Fake-boss video calls are a growing fraud route; Teams warnings help, but a call-back check on payment requests still matters.
- Microsoft: Windows devices that miss updates will lose access to Windows Update when certificates expire in 2027
Windows PCs that are not kept up to date will stop receiving security updates in 2027; installing the latest updates now avoids being locked out.