Archive
All articles, newest first. Page 8.
Qilin Member Extradited to Germany: Operations Continue Unabated
On October 2, 2026, Germany took custody of a 28-year-old Russian national linked to the Qilin ransomware group, arrested in Osaka in…
SonicWall SMA 1000 Critical SSRF Scores CVSS 10.0: Third Zero-Day in 2026
SonicWall patched CVE-2026-102255, a pre-authentication SSRF flaw in SMA 1000 appliances rated CVSS 10.0. It marks the third zero-day…
Advantest Confirms Personal Data Theft Eight Months After Ransomware Attack
Advantest Corporation confirmed on October 6, 2026 that a ransomware attack detected on February 15, 2026 resulted in the exfiltration…
The First Wave of Agentic Attacks Is Already Loud
"The age of AI agents executing cyber attacks is already here." With those words on October 7, 2026, Cisco Talos Intelligence opened a…
Termite Hits Aon: Cleo's 5.8.0.21 Patch Failed to Stop CVE-2024-50623
The Termite ransomware group breached Aon by exploiting CVE-2024-50623 in Cleo file-transfer software. The vendor's initial 5.8.0.21 p…
Android, October 2026: 25 Vulnerabilities Patched and a Return to a Single Patch Level
The October 2026 Android Security Bulletin fixes 25 vulnerabilities under a single patch level. A critical System component flaw allow…
X.Org Patches 12 CVEs: Nine Allow Arbitrary Code Execution
X.Org has released patches for 12 vulnerabilities in the X server and Xwayland, delivered in xorg-server 21.1.25 and xwayland 24.1.14.…
Engineer Sentenced to 32 Months for Locking Over 3,500 Devices on Employer Network
Daniel Rhyne, 57, a former core infrastructure engineer at a New Jersey-based industrial company, was sentenced on October 6, 2026, to…
FBI Removes Accenture Contractor After Missed PeopleSoft Patch Exposes Sensitive Employee Data
On October 6, 2026, the FBI terminated an Accenture contractor responsible for managing its Oracle PeopleSoft HR platform after a June…
FBI Arrests 'Prometheus': First Top 10 Cyber Fugitive Linked to Tren de Aragua
Anibal Canelon Aguirre, alleged creator of the Ploutus ATM malware, appeared in a Nebraska court on Oct. 2, 2026. For the first time,…
FortiBleed: FBI Alert on 86,000+ Breached Fortinet Devices Enabling Ransomware
The FBI and U.S. Secret Service confirm FortiBleed is an active threat. Attackers cracked legacy SHA-256 hashes at scale, locking admi…
Pwn2Own Ireland 2026: 32 Zero-Days, $388,500 on Day One
Researchers exploited 32 zero-day vulnerabilities for $388,500 in prizes on the opening day of Pwn2Own Ireland 2026. The Samsung Galax…
BigDiskBuster Blocks Defender Updates: Antivirus Stays Active but Useless
Abdelhamid Naceri's BigDiskBuster proof-of-concept blocks Microsoft Defender updates by exhausting disk space, leaving the antivirus r…
Ransomware Hits Osaka Metropolitan University: 500 Servers Offline, Backups Encrypted, 130,000 People Affected
Osaka Metropolitan University shut down roughly 500 servers on Oct. 2, 2026, after a suspected ransomware attack. A press conference o…
ASOS Hackers Weaponize Push Notifications as Public Extortion Tool
On October 6, 2026, ASOS customers received push notifications from the app bearing the signature 'xuanyewengateway' threatening to le…
MALFEX: Over 40,000 Malicious npm Downloads, Three Packages Still Active as of October 2026
The MALFEX campaign has distributed over 40,000 downloads of malicious npm packages. function-flag remains installable with over 37,00…
Blinder Tunnel: When a 'Coding Challenge' Becomes an APT's Front Door
Iranian-linked threat actor CL-STA-1178 targeted Iraqi critical infrastructure using weaponized .csproj files and GitHub API abuse. Th…
Azazel Betrays The Gentlemen: A RaaS Affiliate Builds Its Own Empire
Russian-speaking affiliate Azazel double-crossed The Gentlemen ransomware-as-a-service operation by launching an independent leak site…
Atlassian Patches CVE-2026-21589: Path Traversal Hits 8 Data Center Products at CVSS 9.3
Atlassian released fixes on October 5, 2026 for a critical path traversal flaw affecting eight Data Center products. The vulnerability…
Cling Botnet Turns STUN into Covert C2 Tunnel on IoT Devices
Threat actors are exploiting CVE-2021-35394 in the Realtek Jungle SDK to deploy the Cling botnet, which hides command-and-control traf…
South Korea Orders Presidential Probe After Seven Banks Breached; AI Offensive Tools Suspected
On October 4, 2026, South Korea's Financial Services Commission convened an emergency meeting after seven financial institutions confi…
Cisco SD-WAN: Exploit in 24 Hours, Scheduled Patching No Longer Cuts It
CVE-2026-76504 carries a CVSS 9.8 and is under active exploitation with no workaround. CISA imposed a three-day remediation deadline,…
VM Escape Zero-Day in KVM: Vercel Confirms and Pays $50,000 Bounty
Vercel has confirmed a zero-day vulnerability in Linux KVM that allows a full guest-to-host escape with root privileges. The company p…
Wikimedia: OpenAI Agents Overloaded APIs and Public Tools
The Wikimedia Foundation confirmed that AI agents operated by OpenAI made millions of unauthorized requests and edits to its systems,…