Cloud & Enterprise
Cloud and enterprise IT covers identity, access, SaaS, hybrid infrastructure and corporate attack surfaces. The analysis helps readers follow risks, incidents and architectural decisions relevant to complex environments.
Unit 42 Uncovers Blockchain-Based C2: Smart Contracts Become Botnet Backbone
Palo Alto Networks Unit 42 has documented two campaigns — ChainDrop and PolinRider — that use Ethereum and multi-chain TRON, Aptos, an…
From Endpoints to Smart Contracts: How Botnets Are Upgrading C2
Unit 42 documents real-world campaigns using blockchain smart contracts for command-and-control, bypassing traditional detection on op…
Southern Company Notifies 400,000 Customers of Portal Breach, Offers No Technical Details
Southern Company has notified roughly 400,000 customers of Georgia Power, Alabama Power, and Mississippi Power that an unauthorized th…
Advantest Confirms Personal Data Theft Eight Months After Ransomware Attack
Advantest Corporation confirmed on October 6, 2026 that a ransomware attack detected on February 15, 2026 resulted in the exfiltration…
FBI Removes Accenture Contractor After Missed PeopleSoft Patch Exposes Sensitive Employee Data
On October 6, 2026, the FBI terminated an Accenture contractor responsible for managing its Oracle PeopleSoft HR platform after a June…
FortiBleed: FBI Alert on 86,000+ Breached Fortinet Devices Enabling Ransomware
The FBI and U.S. Secret Service confirm FortiBleed is an active threat. Attackers cracked legacy SHA-256 hashes at scale, locking admi…
Ransomware Hits Osaka Metropolitan University: 500 Servers Offline, Backups Encrypted, 130,000 People Affected
Osaka Metropolitan University shut down roughly 500 servers on Oct. 2, 2026, after a suspected ransomware attack. A press conference o…
Atlassian Patches CVE-2026-21589: Path Traversal Hits 8 Data Center Products at CVSS 9.3
Atlassian released fixes on October 5, 2026 for a critical path traversal flaw affecting eight Data Center products. The vulnerability…
Cisco SD-WAN: Exploit in 24 Hours, Scheduled Patching No Longer Cuts It
CVE-2026-76504 carries a CVSS 9.8 and is under active exploitation with no workaround. CISA imposed a three-day remediation deadline,…
VM Escape Zero-Day in KVM: Vercel Confirms and Pays $50,000 Bounty
Vercel has confirmed a zero-day vulnerability in Linux KVM that allows a full guest-to-host escape with root privileges. The company p…
Booba Ransomware Hits UIC College of Medicine: 344 GB Claimed
The University of Illinois Chicago confirmed on Oct. 5, 2026, that its College of Medicine suffered a ransomware attack limiting acces…
Dell System Update Critical 9.6 Bug Opens PowerEdge Servers to Remote Root
A path traversal vulnerability in Dell System Update allows unauthenticated remote code execution with root privileges. Version 2.3.0.…