Archive
All articles, newest first. Page 1.
U.S. Offers $10 Million for Zhang Yu, Hafnium’s Manager
The State Department places a record bounty on Zhang Yu, director of Shanghai Firetech and Chinese APT operator. Xu Zewei’s extraditio…
Arizona Courts Hacked: 1.3 Million People's Data Stolen in Phishing Attack
A phishing attack on the Arizona judicial system exposed foster care records and protective orders. No ransomware was deployed, raisin…
Denmark: 8.8 Million CPR Records Exposed via Compromised Corporate Account
Unauthorized access to a private Danish company's legitimate credentials enabled the extraction of roughly four out of five records fr…
Ransomware Targets Backups: 94% of Attacks Now Aim at Recovery Infrastructure
Ransomware groups have turned backup destruction into standard operating procedure. Sophos confirms 94% targeting rate: the resilience…
PoeLLM: The Malware Hiding C2 Servers in a GitHub Poem
The PoeLLM botnet has compromised over 3,400 AI servers by exploiting CVE-2026-42271. Command-and-control addresses are concealed in a…
Southern Company Notifies 400,000 Customers of Portal Breach, Offers No Technical Details
Southern Company has notified roughly 400,000 customers of Georgia Power, Alabama Power, and Mississippi Power that an unauthorized th…
Qilin Member Extradited to Germany: Operations Continue Unabated
On October 2, 2026, Germany took custody of a 28-year-old Russian national linked to the Qilin ransomware group, arrested in Osaka in…
SonicWall SMA 1000 Critical SSRF Scores CVSS 10.0: Third Zero-Day in 2026
SonicWall patched CVE-2026-102255, a pre-authentication SSRF flaw in SMA 1000 appliances rated CVSS 10.0. It marks the third zero-day…
Advantest Confirms Personal Data Theft Eight Months After Ransomware Attack
Advantest Corporation confirmed on October 6, 2026 that a ransomware attack detected on February 15, 2026 resulted in the exfiltration…
The First Wave of Agentic Attacks Is Already Loud
"The age of AI agents executing cyber attacks is already here." With those words on October 7, 2026, Cisco Talos Intelligence opened a…
Termite Hits Aon: Cleo's 5.8.0.21 Patch Failed to Stop CVE-2024-50623
The Termite ransomware group breached Aon by exploiting CVE-2024-50623 in Cleo file-transfer software. The vendor's initial 5.8.0.21 p…
Android, October 2026: 25 Vulnerabilities Patched and a Return to a Single Patch Level
The October 2026 Android Security Bulletin fixes 25 vulnerabilities under a single patch level. A critical System component flaw allow…
X.Org Patches 12 CVEs: Nine Allow Arbitrary Code Execution
X.Org has released patches for 12 vulnerabilities in the X server and Xwayland, delivered in xorg-server 21.1.25 and xwayland 24.1.14.…
Engineer Sentenced to 32 Months for Locking Over 3,500 Devices on Employer Network
Daniel Rhyne, 57, a former core infrastructure engineer at a New Jersey-based industrial company, was sentenced on October 6, 2026, to…
FBI Removes Accenture Contractor After Missed PeopleSoft Patch Exposes Sensitive Employee Data
On October 6, 2026, the FBI terminated an Accenture contractor responsible for managing its Oracle PeopleSoft HR platform after a June…
FBI Arrests 'Prometheus': First Top 10 Cyber Fugitive Linked to Tren de Aragua
Anibal Canelon Aguirre, alleged creator of the Ploutus ATM malware, appeared in a Nebraska court on Oct. 2, 2026. For the first time,…
FortiBleed: FBI Alert on 86,000+ Breached Fortinet Devices Enabling Ransomware
The FBI and U.S. Secret Service confirm FortiBleed is an active threat. Attackers cracked legacy SHA-256 hashes at scale, locking admi…
Pwn2Own Ireland 2026: 32 Zero-Days, $388,500 on Day One
Researchers exploited 32 zero-day vulnerabilities for $388,500 in prizes on the opening day of Pwn2Own Ireland 2026. The Samsung Galax…
BigDiskBuster Blocks Defender Updates: Antivirus Stays Active but Useless
Abdelhamid Naceri's BigDiskBuster proof-of-concept blocks Microsoft Defender updates by exhausting disk space, leaving the antivirus r…
Ransomware Hits Osaka Metropolitan University: 500 Servers Offline, Backups Encrypted, 130,000 People Affected
Osaka Metropolitan University shut down roughly 500 servers on Oct. 2, 2026, after a suspected ransomware attack. A press conference o…
ASOS Hackers Weaponize Push Notifications as Public Extortion Tool
On October 6, 2026, ASOS customers received push notifications from the app bearing the signature 'xuanyewengateway' threatening to le…
MALFEX: Over 40,000 Malicious npm Downloads, Three Packages Still Active as of October 2026
The MALFEX campaign has distributed over 40,000 downloads of malicious npm packages. function-flag remains installable with over 37,00…
Blinder Tunnel: When a 'Coding Challenge' Becomes an APT's Front Door
Iranian-linked threat actor CL-STA-1178 targeted Iraqi critical infrastructure using weaponized .csproj files and GitHub API abuse. Th…
Azazel Betrays The Gentlemen: A RaaS Affiliate Builds Its Own Empire
Russian-speaking affiliate Azazel double-crossed The Gentlemen ransomware-as-a-service operation by launching an independent leak site…