<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>FarolCyber | Your lighthouse in cybersecurity</title><description>Cybersecurity news explained in plain language, with practical tips to keep you safe.</description><link>https://farolcyber.com/</link><item><title>23andMe successor pays California $6 million over DNA data breach</title><link>https://farolcyber.com/en/23andme-california-settlement-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/23andme-california-settlement-2026/</guid><description>The deal settles the state&apos;s claim over the 2023 breach that exposed data of nearly 7 million people. Here is what to do with your genetic data.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Ahold Delhaize confirms hack and takes online grocery shopping offline across chains</title><link>https://farolcyber.com/en/ahold-delhaize-attack-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/ahold-delhaize-attack-2026/</guid><description>Malicious activity took down systems at brands such as Food Lion, Stop &amp; Shop and Albert Heijn. Physical stores stayed open, and no data theft is evident for now.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>BlackX: bootkit bypasses Windows Secure Boot even on updated PCs</title><link>https://farolcyber.com/en/blackx-bootkit-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/blackx-bootkit-2026/</guid><description>A new firmware-level malware exploits an old flaw that the update alone does not close. Why the manual revocation matters.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Capcom confirms breach of 11.7 million emails; 196 accounts had their password changed</title><link>https://farolcyber.com/en/capcom-id-breach-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/capcom-id-breach-2026/</guid><description>Attackers got into CAPCOM ID, the account used for games like Resident Evil and Street Fighter. Capcom says passwords did not leak; here is what to do.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Google policy change: Gmail and Photos data may personalize ads</title><link>https://farolcyber.com/en/google-ai-ads-gmail-photos-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/google-ai-ads-gmail-photos-2026/</guid><description>If you connect Gmail or Google Photos to Google&apos;s AI, that content can help pick the ads you see. Here is what changed and how to switch it off.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Heartbreaker ransomware recompiles itself to dodge antivirus on Mac</title><link>https://farolcyber.com/en/heartbreaker-macos-ransomware-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/heartbreaker-macos-ransomware-2026/</guid><description>A sample analyzed by a researcher encrypts the Downloads folder and changes its own signature. The risk is low for now, and files can be recovered.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Interpol operation arrests 1,462 and recovers $105 million from scams</title><link>https://farolcyber.com/en/interpol-serengeti-scams-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/interpol-serengeti-scams-2026/</guid><description>Serengeti III, across Africa, took down online fraud, ransomware and investment scam networks. Here are the scams it hit and how to avoid them.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Hacker exploits firewalls and VPNs, gathering over 70,000 credentials; Latin America is 32% of victims</title><link>https://farolcyber.com/en/k0t-firewalls-vpn-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/k0t-firewalls-vpn-2026/</guid><description>Researchers link the actor k0t to ransomware groups. Nearly a third of victims are in Latin America, and the way in is exposed devices.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Meta fined $25 billion over Cambridge Analytica case; company will appeal</title><link>https://farolcyber.com/en/meta-cambridge-analytica-fine-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/meta-cambridge-analytica-fine-2026/</guid><description>A New Mexico judge ordered Meta to pay $25 billion for misleading users about their data. The company says it will appeal.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Microsoft takes down network behind more than 1 billion phishing messages</title><link>https://farolcyber.com/en/microsoft-phishing-takedown-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/microsoft-phishing-takedown-2026/</guid><description>Three services sold scam kits, with 2,300 templates imitating banks and government agencies in over 150 countries. What changed and how to defend yourself.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Two critical PHP flaws threaten millions of sites, including WordPress; update now</title><link>https://farolcyber.com/en/php-flaws-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/php-flaws-2026/</guid><description>The flaws let attackers run code on servers running PHP and are already being exploited. Who is at risk and which versions carry the fix.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Pix: window to contest a refund grows from 30 to 80 days, hitting the double-refund scam</title><link>https://farolcyber.com/en/pix-med-80-days-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/pix-med-80-days-2026/</guid><description>Brazil&apos;s central bank extended the time a Pix recipient has to contest a refund made through MED. How the mechanism works and what it does not cover.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Abandoned Popcorn Time put millions of PCs at risk; researchers switched it off</title><link>https://farolcyber.com/en/popcorn-time-updater-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/popcorn-time-updater-2026/</guid><description>A forgotten Popcorn Time updater would accept code from anyone. A security firm disabled it on millions of computers. Here is what to do.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Quest Diagnostics takes lab ordering system offline after intrusion; patient data may have been accessed</title><link>https://farolcyber.com/en/quest-diagnostics-intrusion-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/quest-diagnostics-intrusion-2026/</guid><description>The largest US lab network says it believes some data was accessed but does not yet know which. The case and what to do about health data.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Ransomware crew used AI to hit 62 companies, then left its tools exposed online</title><link>https://farolcyber.com/en/ransomware-ai-agents-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/ransomware-ai-agents-2026/</guid><description>Researchers found the control panel of a group using AI agents in attacks. The most common way in was the usual one: reused passwords.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>FBI probes ransom negotiator tied to ShinyHunters extortion site</title><link>https://farolcyber.com/en/shinyhunters-negotiator-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/shinyhunters-negotiator-2026/</guid><description>Arrests in the Netherlands and the US raise suspicions about firms that negotiate ransomware payments. Much of it is still allegation, not conviction.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Signal flaw could keep your microphone on after you hung up a call</title><link>https://farolcyber.com/en/signal-hangup-flaw-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/signal-hangup-flaw-2026/</guid><description>A serious bug in Signal&apos;s calling library let an attacker stop a call from ending. The fix is out; here is how to update.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>A tenth of Tor&apos;s exit capacity was hijacked to steal SSH passwords</title><link>https://farolcyber.com/en/tor-relays-ssh-2026/</link><guid isPermaLink="true">https://farolcyber.com/en/tor-relays-ssh-2026/</guid><description>A researcher showed that 333 exit relays redirected SSH connections to criminal servers. The Tor Project removed the relays within three days.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Two-factor authentication: the extra lock that stops most account takeovers</title><link>https://farolcyber.com/en/two-factor-authentication/</link><guid isPermaLink="true">https://farolcyber.com/en/two-factor-authentication/</guid><description>What two-factor authentication is, why it stops someone who stole your password, and how to turn it on for WhatsApp, Instagram and Google.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Microsoft fixes a record number of Windows flaws, one already used by criminals</title><link>https://farolcyber.com/en/windows-october-2026-update/</link><guid isPermaLink="true">https://farolcyber.com/en/windows-october-2026-update/</guid><description>Microsoft&apos;s October update fixes more than 1,400 flaws, including one already exploited in attacks. Here is how to check that your PC is protected.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item></channel></rss>