Cybersecurity news
that matters to your business.

Uber is notifying thousands of drivers that their personal details and driver's licence information were stolen from a technology vendor. TechCrunch identified the vendor as Fireworks AI. Uber says its vendor first notified it on October 9, 2026. State filings list 2,567 Massachusetts, 3,430 South Carolina and 1,873 Rhode Island residents, with other totals still pending. No group has claimed the theft.

Police in Navi Mumbai have registered a case over an alleged cyberattack on a nationalised bank's data centre in CBD Belapur. According to the FIR, data for about 4,280 customers, including loan applications and account-opening forms, was taken between October 9 and 15, 2026. Some material has allegedly appeared on the dark web. The bank has not been named, and it says it is still assessing the breach.

AI infrastructure company Fireworks AI says attackers stole account and billing information from an October 2026 breach, and secrets, datasets and some incomplete model weights for a limited set of accounts. A second intrusion through a third-party cloud provider followed on October 24. Fireworks says card numbers were not stored or affected. It has engaged Palo Alto Networks Unit 42 and revoked credentials.

A Bengaluru digital financial services company has reported unauthorized debits of about ₹31.43 crore from its escrow account at a private bank. A complaint says the bank flagged suspicious transfers on November 4, 2026, and the company's internal investigation the next day found 301 debits. The transfers went to 127 beneficiary accounts, and about ₹68.48 lakh has been credited back. Whitefield police have registered a case under the IT Act and Bharatiya Nyaya Sanhita. The company's identity and the attack method are not reported.

Expedia Group says attackers reached its systems through a compromised third-party data platform provider. The company has not named the vendor or said what data may have been exposed. An extortion group called n0n claims it stole Expedia data, and Expedia has not confirmed the scope. Researchers linked a separate October campaign to Qubole, a cloud data vendor, but Expedia has not said whether it is connected.

eMudhra, a digital trust provider with services in India, revoked eight intermediate certificate authorities in its Global TLS business after a researcher found their private keys were weak. The keys were created in an April 2025 ceremony, and a flaw in one key-handling step produced a weak set alongside strong keys. eMudhra says no certificates were issued from the revoked intermediates and no data was breached. Google Chrome and Mozilla have blocked the affected keys in their browsers.

Trezor warned that a third-party email-provider breach was being used to send fraudulent security alerts to customers, according to BleepingComputer. The company said the messages were phishing attempts and that it was investigating. The messages' claimed wallet vulnerability is part of the lure, not a verified finding.

GreyNoise reports that attackers used two WordPress vulnerabilities against at least 49 organizations and stole more than 18,000 records from an unnamed Western government. It also reports exploitation and data extraction from 996 Zyxel GS1900 switches in 48 countries. The observations come from the firm's sensors and attacker infrastructure; the government victim remains unnamed and state sponsorship is not established.