Android’s ‘SMS of Death’ Can Silence Calls
Android’s “SMS of Death” flaw (CVE-2026-58882) can silently drop active cellular connections—including emergency calls—without a single tap. A researcher’s public proof of concept demonstrates how these invisible texts crash calling services; repeated processing can trigger reboot loops. The malicious payload never even hits your inbox, denying you the simple satisfaction of deleting it.
Install the latest security update on your smartphone and restart if prompted. While October’s fix covers Android 14–17—even though Google quietly kept it off the security bulletin until November—manufacturer rollouts vary wildly. Still on Android 12 or 13? Check with your manufacturer about patch support; unsupported devices may remain exposed and ready to hang up on 911 for you.
Apparently, “don’t click suspicious texts” now needs a software update.
319 Chrome Extensions Took Searches on a Detour
Socket discovered that 319 Chrome extensions—boasting 13.4 million reported installs over the last decade—have been quietly chauffeuring your search queries through sketchy third-party servers to skim referral revenue. The kicker? They barely needed any code to pull it off, simply abusing Chrome’s built-in search settings to do the heavy lifting.
Masquerading as helpful PDF converters and safe-search utilities, these add-ons largely stayed unlisted in Google’s web store to dodge scrutiny. While this gave operators a front-row seat to your private queries, the shady setup thankfully hasn’t resulted in observed malware redirects just yet. Still, getting standard Bing or Yahoo results doesn’t mean your data wasn’t intercepted along the way.
Pop open chrome://extensions, cross-reference your add-ons against Socket’s list, trash any matches, restore your default search engine, and run a thorough antivirus scan.
Turns out your “free PDF converter” had a side hustle.
Pentagon Investigates Freezer Failures at Six Military Bases
The Pentagon is investigating whether cyberattacks caused refrigeration failures that spoiled food at at least six U.S. military commissaries.
While the cause remains unconfirmed, the incidents highlight the importance of protecting equipment that keeps essential supplies usable.
I’d ask facilities who would detect an unexpected refrigeration settings change. Then I’d confirm who checks whether it was authorized and who can override it.
Assign a response owner and test alerts for unauthorized equipment settings changes.
Amadeus Hack Exposes 53,000 Cathay Pacific Bookings
An unauthorized party accessed about 53,000 Cathay Pacific bookings using Amadeus system-account credentials.
The exposed travel details could make phishing messages more convincing, although no misuse has been confirmed.
I’d be asking how many customer records a single supplier account can retrieve before anyone intervenes.
Limit supplier accounts to necessary records and test alerts for unusually large data retrievals.
Linux Flaw Gives Attackers Root on Palo Alto Firewalls
Researchers reported that threat actors compromised 25 firewall and management servers.
The attacks chained PAN-OS management vulnerabilities with Fragnesia, a Linux privilege escalation flaw.
I’d extend your investigation to any credentials stored on or used through the compromised firewall.
Investigate unexplained outbound tunnels, rotate exposed credentials, and check related accounts for suspicious logins.
Cloudflare Blocks 18.2 Million DDoS Attacks in Three Months
Cloudflare reported mitigating 18.2 million network-layer DDoS attacks in the third quarter of 2026.
Of those attacks, 96% lasted less than 10 minutes, leaving little time for security teams to respond.
I’d check whether essential tasks still worked during each attack. Uptime reports can miss failed logins or stalled transactions.
Test automatic DDoS mitigation and confirm essential services remain usable during short attacks.
AI Speeds SOC Investigations but Runs Up the Bill
Anthropic’s CLUE demonstration showed how an LLM could reduce hours of security investigation to minutes.
However, investigating hundreds of thousands of alerts could become too costly, forcing teams to prioritize which ones get reviewed.
I’d measure how many missed threats automation uncovers for the budget available.
Test automation on past alerts and compare threats detected with total investigation costs.
How Ready Are You for DDoS Attacks?
DDoS attacks can knock services offline before security teams can react, making automated protection essential to keeping those services available.
How to strengthen your DDoS protection:
- Use DDoS protection solutions that automatically detect attacks and filter malicious traffic.
- Coordinate filtering with your ISP and use a content delivery network with rate limits to reduce server load.
- Monitor for other suspicious activity during attacks and verify that legitimate users can still access services.
Report DDoS-related downtime and its business cost to the board, including how quickly critical services were restored.