Hirudo Android Trojan uses fake updates and patched bank apps

Hirudo Android banking Trojan diagram with fake-update lure, second APK, patched Indonesian banking apps, credential and SMS theft; briefing badge reads 15 Oct 2026, 11:07 PM SGT.

BRIEFED · 15 OCT 2026 · 11:07 PM SGT — ThreatFabric reports Hirudo, an Android banking RAT that uses fake updates and can target selected banking apps with patched copies. Users and banks should treat unexpected app replacement and permission prompts as warning signs.

Cisco email gateway flaw under active exploitation

Cyber Signals infographic: Cisco Secure Email Gateway CVE-2026-76519 can allow unauthenticated root-level command execution under specific configuration; briefed 15 October 2026 at 11:03 AM SGT.

15 OCT 2026 · 11:08 AM SGT — Cisco confirms active exploitation of a critical Secure Email Gateway flaw. Check exposure, install a fixed release, and preserve evidence if compromise is suspected.