Alex Rudolph

cyberincontext.ca

22 October 2026 18:53

Canada's Chief Information Officer releases a statement about the PHP vulnerabilities affecting Government of Canada websites and infrastructure. No new information other than that they're patching and some things will be offline until the work is completed. www.canada.ca/en/treasury-...

ESET Research

esetresearch.bsky.social

22 October 2026 17:42

IoCs are available in our GitHub repo: github.com/eset/malware... 6/6

ESET Research

esetresearch.bsky.social

22 October 2026 17:41

Two months later, on September 17th, 2025, #Sandworm wiped data across the company’s network using SDelete deployed via Active Directory Group Policy. We assess with high confidence that UAC 0099 handed off access to Sandworm during the intrusion. 5/6

ESET Research

esetresearch.bsky.social

22 October 2026 17:41

Yggdrasil is not designed for anonymity, so we generated a map of the network’s spanning tree to locate the C&C server. It sits near the center of the tree, making it easily reachable from other peers. 4/6

ESET Research

esetresearch.bsky.social

22 October 2026 17:41

#Yggdrasil is a decentralized, end-to-end-encrypted IPv6 mesh network. Nodes are addressed by their public keys, and no central server runs the mesh – making it hard to disrupt. To our knowledge, this is the first documented abuse of Yggdrasil by a state-aligned threat actor. 3/6