notes
1. Executive summary
Booz Allen Hamilton's OT lab ran two unnamed frontier AI models through eight autonomous attack scenarios against a multi-vendor industrial
notes
1. Executive summary
A ransomware group operating under the name "safepay" listed dwi-bau.de, a German construction-sector company specialising in metal roof
notes
1. Executive summary
At least three user accounts at Pays, a Funen-based IT company, were reportedly protected by the password "123456" when attackers
notes
1. Executive summary
On 2026-10-09 the ransomware.live leak site listed Bayer (DE) as a victim of a group calling itself "Black X&
notes
1. Executive summary
A ransomware group calling itself "thegentlemen" listed Refako Autodele (refako.dk), a Danish truck and trailer parts retailer based in Odense,
notes
1. Executive summary
A ransomware group tracked as "thegentlemen" listed SAS H2O MICHEL, a French commissaire de justice firm based in Tours and Chinon
notes
1. Executive summary
A ransomware group calling itself Black X listed lopay, a UK fintech that provides card and mobile payment acceptance and settlement services to
notes
1. Executive summary
Citrix has disclosed CVE-2026-107406, a memory overflow in NetScaler ADC and NetScaler Gateway that can lead to remote code execution or
notes
1. Executive summary
ASOS has confirmed that attackers accessed customer information after tricking an employee into handing over login credentials, and the stolen data is broader
notes
1. Executive summary
On 8 October 2026, attackers operating the GhostAction GitHub Actions credential-theft campaign compromised two high-profile open-source maintainer accounts and injected
notes
1. Executive summary
The FBI and US Department of Justice seized seven domains used to operate Microscan and FishHub, two intrusion tools attributed to China-based
notes
1. Executive summary
The FBI has arrested a further suspected co-conspirator of the ShinyHunters group, the third detention in roughly two weeks, following the group&