The Signal
Must Know
Incident · Malwarebytes Labs
What happened
A March breach at P3 Global Intel, a Navigate360-owned tip-management platform used by Crime Stoppers programs, exposed Canadian tip data spanning 25 years. [4]
More than 1.5 million tips were exposed, including over 850,000 containing personal information such as addresses, phone numbers, email addresses and some reward-related banking details. [4]
Why it matters
The organization said the exposure could create risks of retaliation, intimidation or extortion, and that scammers could use genuine tip details to make impersonation attempts more convincing. [4]
Research · Cyberscoop
What happened
The Citizen Lab and Confiant reported that targeted ads delivered zero-click mercenary spyware through a technique called AdFection. [3]
Ads from Discover-Tech, the company most linked to AdFection, received impressions on government networks. [3]
Why it matters
The Citizen Lab report characterized the advertising industry as showing a dangerous lack of due diligence and called for stronger threat-data sharing, partner vetting, vendor-registry audits and default bans in permissive jurisdictions. [3]
Identity · Securityaffairs
What happened
Capcom disclosed unauthorized access to its CAPCOM ID online membership service, which provides access to online services and games. [1]
As of October 22, the breach exposed 11,774,247 email addresses and system-specific identification information worldwide, plus account details such as creation dates, last login dates, login counts, and latest-login IP addresses. [1]
Why it matters
Capcom said services using CAPCOM ID remained operational while it activated incident-response procedures, investigated the breach, notified relevant authorities, and began contacting affected customers through a dedicated support channel. [1]
Research · The Hacker News
What happened
Between November 2025 and March 2026, Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater belonging to Time4Popcorn, an abandoned Popcorn Time copy. [2]
Eye Security said the updater could have allowed an outsider to take over the machine. [2]
Why it matters
Time4Popcorn was associated with a free application that streamed pirated films and television over BitTorrent. [2]
The account suggests that abandonment does not by itself remove the security relevance of a background updater. [2]
Also Worth Knowing
AI & Agents · The Hacker News
What happened
Google updated its privacy policy to state that using personalized AI features in Search or Gemini may allow targeted advertising based on activity on other connected Google services. [5]
The relevant practitioner question is which cross-service access choices enable this linkage, rather than viewing AI personalization and advertising as separate settings. [5]
Vulnerability · The Hacker News
What happened
Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in its built-in Onigmo regular-expression engine. [6]
The branch-specific releases show that the security-relevant maintenance question is not limited to a single runtime line. [6]
Security · Arstechnica Security
What happened
The New York Knicks organization reportedly sent employees a phishing-test email offering free championship rings to assess whether staff could detect scams. [7]
The exercise illustrates how a familiar organizational theme can be used to test recognition of fraudulent messages. [7]