21-Oct-2026: eMudhra Fallout, Fancy Bear, Qilin and Lazarus Cyberattacks

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Designed for CISOs, security leaders and executives, each episode explains the threats shaping business risk, resilience and decision-making. 1. **eMudhra certificate compromise:** Mozilla, Chrome and Apple are moving to distrust certificates from India’s eMudhra after eight intermediate private keys were reportedly compromised, including some dangerously weak keys. Organizations should identify and replace affected certificates to reduce the risk of forged HTTPS sites, impersonation and supply-chain disruption. 2. **APT28 targets European defense:** Russian military-linked hackers associated with APT28 compromised a NATO naval shipbuilder, aircraft-engine manufacturer and law enforcement agency. The campaign demonstrates continued espionage pressure on European defense and government organizations, with stolen credentials potentially enabling deeper access and intelligence collection. 3. **Qilin suspect arrested:** German authorities arrested a Russian suspect allegedly linked to the Qilin ransomware gang and are investigating possible connections to the 2024 Synnovis attack, which disrupted London healthcare and contributed to a patient’s death. The case underscores ransomware’s real-world consequences and the growing criminal-justice focus on cyberattacks that endanger lives. 4. **AI-scaled web attacks:** Autonomous AI agents probed more than 1,200 company websites and breached over 100, targeting online shops and payment systems. Low-cost, rapid attacks highlight the urgent need to secure exposed administration tools and strengthen web application defenses. 5. **Lazarus launches Operation FlashHole:** North Korea-linked Lazarus targeted South Korean organizations across software, construction and communications using tailored phishing and stealthy, modular malware. The campaign shows how the group is refining its tools, using AI-generated lures and expanding espionage risk across critical business sectors.