💥 BREACHES & INCIDENTS
- Hacker claims SBI data breach exposing 3.75 lakh customer records
A threat actor named Siriusim has claimed an SBI data breach involving 375,000 customer records, but the claim remains unverified.- Affects State Bank of India customers; the claim is unverified and SBI had not commented as of October 19, 2026.
- Threat actor 'Siriusim' posted the claim on BreachForums with four sample customer records.
- Claimed dataset includes 375,000 CSV rows and 2,722 PDF files: personal information, loan applications, account-opening forms, KYC records, Aadhaar numbers and addresses.
- Row counts do not establish 3.75 lakh unique victims; the source of the data and how it was obtained remain unknown and may be recycled from earlier leaks.
- If genuine, the data could enable identity theft, loan fraud and targeted phishing.
Sources 📄 Source: indiatoday.in · 📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News, cryptika.com (discovered)
🕵️ RESEARCH & DEEP DIVES
- Fake Google Meet pages on two domains steal Google credentials and phish 2FA codes
Researchers identified two websites hosting fake Google Meet pages designed to steal Google account credentials and phish two-factor authentication codes.- Targets Google account users via lookalike Google Meet sign-in pages that request passwords and 2FA verification codes
- Domains hosting the fake pages: meet-google[.]cyou and qooglo[.]com
- An exposed /install page on the phishing sites leaks database configuration details and a prefilled database password
- Associated web paths for log hunting: /meet, /assets/js/demo.js, /api/demo/sessions, /api/demo/sessions/{token}, /api/demo/sessions/{token}/resend
- Campaign was identified by researcher Anurag (@Malwarehunterr) in an October 19, 2026 post
📋 ADVISORIES
- 📄 Source for Hacker uses AI agents to breach 100+ company websites for about $5,000 in tokens — norforge.com
🔓 CVEs & KEV
CVE-2026-77936 — letta-ai letta — CVSS 9.3 — Letta Unauthenticated RCE and OS Command Injection via Insecure Defaults
CVE-2026-113386 — Roundcube Webmail — CVSS 7.1 — Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP c...