2026-10-05 13:57 UTC
Other
Check Point Research · urias@checkpoint.com · indexed 2026-10-05 14:15 UTC
For the latest discoveries in cyber research for the week of 5th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Arizona’s state court system has suffered a phishing-led cyberattack after an employee clicked a malicious link. Attackers copied backup files containing protective-order records and more than 150,000 Foster Care Review Board reports […] The post 5th October – Threat Intelligence Report appeared first on Check Point Research.
P0
2026-10-05 13:55 UTC
Security Journalism
The Record · indexed 2026-10-05 14:15 UTC
Russian cybersecurity researchers attributed a quiet two-year espionage campaign to the Belarusian Cyber Partisans, a group better known for public attacks against governments and infrastructure.
P0
2026-10-05 13:49 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-05 14:55 UTC
Hackers accessed names, addresses and CPR numbers of 8.8 million people in Denmark through a third-party company with legal registry access. A hacker broke into the database that holds basically every identifying detail on every person connected to Denmark, living, dead, or long since moved away. Denmark’s digital affairs minister announced it Monday and didn’t […]
P0
2026-10-05 13:33 UTC
Security Journalism
BleepingComputer · Sponsored by tenfold Software · indexed 2026-10-05 13:45 UTC
tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with under 150 users. The new features help teams manage Microsoft 365 sharing and investigate suspicious identity activity. [...]
P0
2026-10-05 13:15 UTC
Security Journalism
The Record · indexed 2026-10-05 13:30 UTC
The Japanese media giant Nikkei disclosed a cyber incident involving an employee email account that may have compromised journalistic sources.
P0
2026-10-05 13:10 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-05 13:55 UTC
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Citrix NetScaler flaw tracked as CVE-2026-88779 (CVSS score of 8.7), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-88779 is a memory overflow vulnerability in Citrix NetScaler ADC and Gateway […]
P35
2026-10-05 13:01 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-10-05 13:05 UTC
The U.S. Department of Justice has announced the arrest of the alleged developer of Ploutus malware, used to steal millions of dollars in ATM jackpotting attacks across the United States. [...]
P0
2026-10-05 13:00 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-10-05 13:15 UTC
ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation. The post Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws appeared first on SecurityWeek.
P0
2026-10-05 13:00 UTC
Security Journalism
Dark Reading · Rob Wright · indexed 2026-10-05 13:00 UTC
AI-powered attacks are fast, relentless, and automated. How security teams can keep up is top of mind, according to the latest Dark Reading reader poll.
P0
2026-10-05 12:35 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-10-05 12:55 UTC
Hackers stole patient information from Clover Health Investments and AngMar Management Services in July. The post 250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms appeared first on SecurityWeek.
P0
2026-10-05 12:00 UTC
Government
NIST Cybersecurity Insights · Daniel Eliot · indexed 2026-10-05 13:15 UTC
For small businesses who are often confronted with limited resources, knowing how to get started and where to find support with planning, implementing, or evaluating a cybersecurity risk management strategy can be challenging — sometimes making cybersecurity feel like an insurmountable hurdle. However, there is good news. Many non-profit organizations across the United States have created programs for their local small business communities (in addition to local schools, municipal governments, a…
P0
2026-10-05 12:00 UTC
Security Journalism
The Record · indexed 2026-10-05 12:15 UTC
Denmark is investigating a data breach affecting approximately 8.8 million people after unauthorized users gained access to its national population register.
P0
2026-10-05 11:55 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-05 13:20 UTC
Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through three connected capabilities: Detect, Remediate, and Prevent. The journey starts with detection, because organizations first need to understand what credentials exist, where they live, and what they
P0
2026-10-05 11:46 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-05 13:20 UTC
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling. "Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinary STUN behavior into a practical command-and-control channel," Nozomi Networks said in a report
P0
2026-10-05 11:00 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-10-05 11:00 UTC
CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI appeared first on SecurityWeek.
P5
2026-10-05 10:42 UTC
Security Journalism
Security Week · Kevin Townsend · indexed 2026-10-05 11:00 UTC
More than 730 cyber breaches affected over 270 million Americans last year, costing an average of $10 million per breach. The post Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity appeared first on SecurityWeek.
P0
2026-10-05 10:38 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-05 11:30 UTC
Apple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificial intelligence (AI) agents. "Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history – without users' full knowledge
P0
2026-10-05 10:28 UTC
Security Journalism
BleepingComputer · Mayank Parmar · indexed 2026-10-05 10:40 UTC
OpenAI is expanding ads in ChatGPT, and one of the first new formats will show visual ads while you're generating images. [...]
P0
2026-10-05 09:37 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-10-05 09:45 UTC
Microsoft confirmed over the weekend that some games and applications using AC-3 (Dolby Digital) audio decoding will crash after installing the September 2026 KB5124010 Windows 11 preview update. [...]
P0
2026-10-05 09:12 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-05 09:20 UTC
MI5 warns UK universities that over 100 academics may have unknowingly worked on research funded by a Chinese institute linked to the MSS. On September 30, MI5 published a formal warning naming the China General Technology Research Institute, CGTRI, also called CAGT in some translations, as an outfit with very strong ties to China’s Ministry […]
P0
2026-10-05 08:33 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-05 09:20 UTC
Iranian hacker Amir Barati faces extradition to the US over an alleged Iranian campaign that stole 31TB of data from universities. Amir Barati spent June 25 getting arrested in Montenegro, and this week a Montenegrin court signed off on sending him to the United States. He’s a dual Turkish and Iranian citizen, 40 years old, […]
P0
2026-10-05 08:27 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-10-05 08:30 UTC
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. [...]
P0
2026-10-05 08:09 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-05 09:30 UTC
A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then use to gain unauthorized access and
P20
2026-10-05 07:30 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-05 08:25 UTC
OpenAI safety veteran David Robinson resigns, warning that the company’s culture and fast AI development model could create bigger risks. OpenAI safety veteran David Robinson knows how his resignation looks. He starts his essay by calling himself “something of a cliché”: an AI company employee who quits and then raises concerns about the company. But […]
P0
2026-10-05 07:16 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-10-05 07:30 UTC
Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group. The post Alleged ShinyHunters Leader Arrested in Jordan appeared first on SecurityWeek.
P0
2026-10-05 06:40 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-05 08:00 UTC
Citrix has released security updates for a high-severity security flaw in NetScaler ADC and NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779, carries a CVSS score of 8.7 out of 10.0. "CVE-2026-88779 is a memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway that can lead to
P30
2026-10-05 05:14 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-10-05 05:30 UTC
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched. The post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier appeared first on SecurityWeek.
P30
2026-10-05 02:00 UTC
Community
SANS Internet Storm Center · indexed 2026-10-05 02:15 UTC
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
P0
2026-10-05 00:15 UTC
Community
SANS Internet Storm Center · indexed 2026-10-05 00:25 UTC
For an experiment, I created a script [1] that parses and send the TTY logs collected from actors or bots activity that run various commands after they successfully login the DShield sensor. Those TTY logs are sent daily at the end of each day to the DShield SIEM [2] to be correlated with all the data. 
P0
2026-10-04 21:58 UTC
Security Journalism
BleepingComputer · Lawrence Abrams · indexed 2026-10-04 22:00 UTC
Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]
P65
