Security roundup: Predator spyware, Ukraine cyberattacks, and ShinyHunters’ Odido claim
Summary
This roundup covers Predator spyware suppressing iOS recording indicators, Russian cyber operations supporting missile targeting in Ukraine, a ShinyHunters claim against Odido, AI security initiatives and threat trends, and new MITRE and OpenAI actions.
Key points
- Predator spyware reportedly suppresses iOS camera and microphone indicators using a kernel-level hook; the technique requires prior full device compromise and does not rely on a new iOS vulnerability.
- Ukrainian officials say Russian cyberattacks on energy infrastructure increasingly gather intelligence to help direct missile strikes and assess damage and repairs.
- ShinyHunters claims it stole nearly 21 million Odido customer records. Odido had disclosed exposure affecting about 6.2 million customers and denied that passwords or billing details were compromised.
- CrowdStrike’s 2026 Global Threat Report says AI-enabled attacks rose 89% in 2025 and average breakout time was 29 minutes; it also highlights malware-free detections and attacks on trusted access paths.
- A new Android RAT, Oblivion, is reportedly sold for about $300 and claims to evade device protections and steal data.
- The US Treasury announced a public-private initiative to develop resources for cybersecurity and risk management in financial-sector AI.
- MITRE formed an advisory council for the ATT&CK framework; OpenAI says it disrupted malicious AI use by banning accounts, removing content, and sharing indicators.
Article Details
- Event Type
- Weekly cybersecurity news roundup covering spyware capabilities, cyberattacks, data-breach claims, threat research, and cybersecurity initiatives.
- Impact
- The roundup reports that Predator spyware can suppress iOS camera and microphone indicators after a device is fully compromised. Ukrainian officials said Russian cyberattacks against energy infrastructure are gathering intelligence to support missile strikes. ShinyHunters claimed to have stolen nearly 21 million Odido records; Odido confirmed exposure of personal data for about 6.2 million customers and denied compromise of passwords and billing details. Oblivion RAT is reportedly marketed for about $300 and claims persistent access and data-theft capabilities. The roundup also describes AI-related threat activity and mitigation efforts, and new public-private cybersecurity initiatives.
Threat Actors
Malware
Vendors
ApplePredator spyware bypasses Apple’s recording indicators on iOS by installing a single hook to intercept and silently discard sensor activity updates before they trigger the orange or green status bar dots.CrowdStrikeCrowdStrike report warns of AI-fueled evasive cyber threatsOdidoShinyHunters claims massive breach at Dutch telecom OdidoOpenAIOpenAI disrupts malicious AI use with proactive takedowns
Products
Countries
Industries
CybersecuritySecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader threat landscape.EnergyRussian cyberattacks on Ukraine energy infrastructure aid in directing missile strikesFinancial ServicesThe US Department of the Treasury announced a collaborative public-private initiative to improve cybersecurity and risk management for AI in the financial services sector.TelecommunicationsShinyHunters has claimed responsibility for hacking Dutch telecommunications provider Odido, alleging they stole nearly 21 million records containing personal customer information.