• This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Oct. 16, 2026

    – Read the Full Story in The Morning

    Global cybercrime expenses are expected to increase from $11 trillion USD by 2027 to $12.2 trillion by 2031, according to Cybersecurity Ventures.

    Despite the fact that cybercrime has no geographical boundaries, most legal systems are still designed to operate within national borders. As a result, investigating, prosecuting, and holding offenders accountable become much more difficult.

    It is possible for a phishing scheme that targets bank customers in Sri Lanka to be developed in Eastern Europe, hosted on servers in South-East Asia, and funded via cryptocurrency wallets that are registered in offshore jurisdictions.

    The Morning reports that Sri Lanka became the first country in South Asia to join the Budapest Convention on Cybercrime in 2015, marking an important step towards strengthening its legal framework for tackling cybercrime and improving international cooperation. However, despite this commitment, responding quickly to cybercrimes that cross national borders remains a challenge due to differences in legal systems and investigative procedures.

    Cyberattacks can be carried out within seconds, but investigating them often takes much longer. When attacks involve multiple countries, law enforcement agencies must work across different legal systems and procedures. Limited resources, delays in sharing digital evidence, and slow international cooperation can all make it difficult to identify offenders and bring them to justice.

    Looking ahead, Sri Lanka must adopt a proactive and resilience-driven approach to cybersecurity rather than relying primarily on reactive responses after incidents occur.

    Sri Lanka is one of the most populated islands in the world with around 22 million people. But with an estimated 63 percent unfilled cybersecurity roles with necessary skills worldwide, the nation must make significant and immediate investments to develop talent domestically rather than just importing it.

    Read the Full Story



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Fighting Cybercrime in Sri Lanka: A Resilience-Driven Approach To Cybersecurity appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google has released Chrome 155 to the Stable channel with 10 security fixes. One is rated Critical: a use-after-free in Prerender, tracked as CVE-2026-110922. The update was published on October 15, 2026. The Stable channel moves to version 155.0.8059.84/.85 for Windows and Mac, and 155.0.8059.84 for Linux. Google says the rollout will take place “over […]

    The post Google Chrome 155 Patches Critical Use-After-Free Flaw and Nine Additional Security Bugs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman’s fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cribl published cribl-decision, an open LoRA adapter you can run locally. Others, like Laya, are

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A cybersecurity incident at defense contractor BAE Systems has taken offline the systems that send bankruptcy notices for every federal bankruptcy court in the U.S. The Administrative Office of the U.S. Courts disclosed the disruption on October 15, 2026. BAE Systems IT and websites that support the Bankruptcy Noticing Center (BNC) were hit by the […]

    The post BAE Systems Cybersecurity Incident Disrupts Bankruptcy Court Operations Across the U.S. appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • WASHINGTON—A surge in Russia’s use of jet-powered Shahed drones in Ukraine has spurred the need for super fast interceptors to defeat them. And it’s a problem U.S.-based dronemaker Powerus hopes to solve. 

    “We constantly need to move ahead of the threat. The next threat that we see to get in front of is the jet-powered Shahed drones,” Brett Velicovich, cofounder and president of the dronemaker Powerus, told Defense One. “Jet-powered Shaheds are very difficult to defeat because of how fast they are, and so to defeat those, we need jet-powered interceptors. So that is one of the things that we're looking at…to be able to fly an interceptor at 600 kilometers per hour, 700 kilometers per hour. That's going to require a lot more automation. It's going to require a lot more R&D.”

    Newer versions of Shahed drones propelled by jet engines have increasingly been appearing on the Russian-Ukrainian battlefield in recent months, pushing Ukraine to fortify its air defenses. Those fast flying Shaheds require interceptors that can match those speeds—around 370 mph, or 600 kilometers per hour. Other versions of the Shahed fly just over 100 mph. There’s also concern that other security risks could crop up as other nations adopt the newer Shaheds. 

    Powerus is just about a year old and has former Pentagon and first Trump administration officials on its board.

    Velicovich doesn’t have a target date for developing its rocket or jet-powered interceptor, but the goal is to move quickly. 

    “I spend a lot of time in Ukraine. There's a good chance that by the end of this year, the majority of Russian drones that are sent into downtown Kyiv will be jet-powered,” he said, “so we really need to move at that timeline.”

    But churning out rocket- or jet-propelled interceptors at the same rate as the upgraded Shahed drones can be costly and difficult. 

    “They can build these things for $20,000-$30,000, and they can turn them out in massive, massive quantities. And so, to do that in an interceptor is very difficult,” Velicovich said. “But the technology is getting cheaper and cheaper, so we'll find a solution for that I think pretty soon. The entire industry is racing to figure that out.” 

    Powerus, which recently went public, has been busy in recent months.

    The Rock Hill, S.C.-based company unveiled its fully autonomous interceptor, Guardian 3, during the Association of the U.S. Army’s annual conference here. The anti-drone tech is the latest addition to a family of interceptors, including the semiautonomous Guardian 2 and remotely piloted Guardian 1.

    “Guardian 3 takes that final terminal phase of a manual operator out of the loop, and it is fully automated, similar to how you might fire a Patriot missile. The difference between us and the Patriot missiles is that…you can build these Guardian 3 systems in the thousands very easily,” Velicovich said. 

    The company aims to produce 5,000 interceptors per month by November, with an ultimate goal of being able to deliver 10 times that. 

    “We want to get to that point where it's just massive, massive scale because these things are a lot like artillery rounds, and we need to build them like artillery rounds. So we need more companies out there that have the industrial capacity…to turn these things out,” he said. 

    Also at the conference, Powerus signed a deal with Parsons on the showroom floor to pair its radar systems with Guardian interceptors to detect oncoming drone threats. 

    Earlier this year, the Air Force tapped Powerus in an $82 million deal for counterdrone systems, which includes the Guardian family of interceptors. The company has also branched out to international buyers, striking an unspecified deal with the Pakistan army for unmanned aerial systems.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google says its Android scam-detection capabilities now flag more than 5 million suspected scam calls and text messages each month, as mobile fraud operators increasingly use caller-ID spoofing, fake banking alerts, conversational phishing, and AI-enabled voice impersonation techniques. The company cited a YouGov survey of 4,500 smartphone users across the United States, Canada, and Australia, […]

    The post Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Burger King Japan data breach occurred between October 2 and 7, exposing emails, birth dates and other…

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • More than 20,000 malicious Cloudflare Pages subdomains used by Help TDS, a longstanding traffic distribution system that funnels victims into fraudulent technical support call centers. Researchers assess with high confidence that Hotejka, a Russian-language affiliate program, operates Help TDS and represents a rebrand of ROI777. Historical DNS records, shared infrastructure, persistent affiliate identifiers, and consistent […]

    The post Researchers Uncover 20,000 Malicious Cloudflare Pages Domains Used in Tech Support Scams appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A suspected China-nexus espionage group exploited a critical zero-day in BeyondTrust Remote Support, tracked as CVE-2026-102764. It then deleted logs to hide its activity. BeyondTrust patched the flaw in advisory BT26-05 and disclosed it on October 15, 2026, alongside a Mandiant analysis. BeyondTrust zero-day According to research published by BeyondTrust, the actor exploited the vulnerability […]

    The post Hackers Exploit BeyondTrust Zero-Day and Erase Security Logs to Hide Their Tracks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical unauthenticated OS command injection flaw in Collabora Online’s built-in CODE Server app for Nextcloud lets remote attackers run commands as the web server user. The advisory rates it 9.2 on CVSS v4. Collabora Online vulnerability According to the security advisory published by Collabora Online on GitHub, the vulnerability is tracked as CVE-2026-110447 and […]

    The post Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶