Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
FBI Arrests 'Prometheus': First Top 10 Cyber Fugitive Linked to Tren de Aragua
Anibal Canelon Aguirre, alleged creator of the Ploutus ATM malware, appeared in a Nebraska court on Oct. 2, 2026. For the first time,…
FortiBleed: FBI Alert on 86,000+ Breached Fortinet Devices Enabling Ransomware
The FBI and U.S. Secret Service confirm FortiBleed is an active threat. Attackers cracked legacy SHA-256 hashes at scale, locking admi…
Pwn2Own Ireland 2026: 32 Zero-Days, $388,500 on Day One
Researchers exploited 32 zero-day vulnerabilities for $388,500 in prizes on the opening day of Pwn2Own Ireland 2026. The Samsung Galax…
BigDiskBuster Blocks Defender Updates: Antivirus Stays Active but Useless
Abdelhamid Naceri's BigDiskBuster proof-of-concept blocks Microsoft Defender updates by exhausting disk space, leaving the antivirus r…
ASOS Hackers Weaponize Push Notifications as Public Extortion Tool
On October 6, 2026, ASOS customers received push notifications from the app bearing the signature 'xuanyewengateway' threatening to le…
Blinder Tunnel: When a 'Coding Challenge' Becomes an APT's Front Door
Iranian-linked threat actor CL-STA-1178 targeted Iraqi critical infrastructure using weaponized .csproj files and GitHub API abuse. Th…
Cling Botnet Turns STUN into Covert C2 Tunnel on IoT Devices
Threat actors are exploiting CVE-2021-35394 in the Realtek Jungle SDK to deploy the Cling botnet, which hides command-and-control traf…
South Korea Orders Presidential Probe After Seven Banks Breached; AI Offensive Tools Suspected
On October 4, 2026, South Korea's Financial Services Commission convened an emergency meeting after seven financial institutions confi…
Cisco SD-WAN: Exploit in 24 Hours, Scheduled Patching No Longer Cuts It
CVE-2026-76504 carries a CVSS 9.8 and is under active exploitation with no workaround. CISA imposed a three-day remediation deadline,…
U.S. Senate Unanimously Passes Health Care Cybersecurity Act
The U.S. Senate approved the Health Care Cybersecurity and Resiliency Act on October 1, 2026. The bipartisan bill now moves to the Hou…
16-Year-Old Behind ShinyHunters Detained in Jordan, Cooperating With FBI
Jordanian teenager Saif al-Din Khader, known as "Rey," was detained in Jordan on September 28–29, 2026, and is cooperating with the FB…
Denmark: CPR Register Data Breach Exposes 8.8 Million Citizens
On October 2, 2026, the Danish government disclosed a national-scale breach of the CPR population register. Attackers abused the legit…