Here are some of the top Cybersecurity news articles for the past week:
🛒 TFG London Responds to Cyberattack
UK fashion retail group TFG London, parent company of brands including Hobbs, Whistles and Phase Eight, confirmed a cyberattack that prompted emergency containment measures across its IT environment. Stores remained open while incident response teams investigated the scope of the incident and whether personal or corporate data had been compromised.
💔 iRhythm Data Breach Impacts More Than 360,000 People
Medical device manufacturer iRhythm began notifying more than 360,000 individuals after unauthorized access to third-party hosted business applications. Exposed information included names, physical and email addresses, dates of birth and contact information.
🤖 Researchers Observe Autonomous AI Agents Performing Malicious Activity
Cybersecurity researchers reported observing autonomous AI agents carrying out malicious activity in the wild, including automated SQL injection probes targeting government web applications in North America. The observed attempts were blocked, but the activity raises new questions about how autonomous agents could increase the speed and adaptability of future attacks.
📱 Android October Update Patches 25 Vulnerabilities
Google’s October 2026 Android Security update addressed 25 vulnerabilities across Framework and System components, including high-severity flaws and a critical privilege escalation vulnerability affecting the Android System component.
🐙 GhostAction Supply Chain Attack Targets GitHub Repositories
Security researchers uncovered an active software supply chain campaign dubbed GhostAction that reportedly compromised thousands of GitHub repositories. The campaign injects malicious workflows into open-source projects in an effort to steal CI/CD secrets and deploy unauthorized cryptominers.
