Catalin Cimpanu

campuscodi.risky.biz

18 October 2026 12:33

Hackers backdoored backup provider AOMEI in a novel, first-of-its-kind supply chain attack. Hackers replaced backup software on the company's servers in short bursts of five to ten minutes. The bursts took place across multiple windows between May and July. cloud.google.com/blog/topics/...

John

bigbadw0lf.bsky.social

15 October 2026 22:21

New blog detailing zero day exploitation of CVE-2026-102764 in BeyondTrust Remote Support by 🇨🇳 nexus espionage actor ARMORY CASTLE (fka UNC5221). cloud.google.com/blog/topics/...

CYBERWARCON

cyberwarcon.bsky.social

15 October 2026 20:06

🚨 The CYBERWARCON 2026 lineup is here! 20 speakers on destructive and disruptive cyber threats, plus keynote Rob Joyce. Nov 20 in Arlington, VA, or join virtually. Huge thanks to our review board for picking a great lineup! www.cyberwarcon.com #CYBERWARCON

Microsoft Threat Intelligence

threatintel.microsoft.com

14 October 2026 13:31

Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators, developers, and an illicit marketplace selling tools and infrastructure for large-scale phishing, enabling cybercriminal operations worldwide. msft.it/63320asXrk

Volexity

volexity.com

13 October 2026 16:48

Volexity has discovered in-the-wild exploitation of a zero-day exploit chain targeting Ivanti Connect Secure VPN appliances (CVE-2026-104935). The threat actor, UTA0576, chained three vulnerabilities to gain unauthenticated root-level code execution.

 #DFIR #threatintel