1. Executive summary The FBI and US Secret Service published a joint advisory on 2026-10-06 confirming that the FortiBleed credential-harvesting campaign remains active
1. Executive summary Jordanian authorities detained Saif Al-din Khader, the Amman teenager who uses the handle "Rey," on or around early October 2026,
1. Executive summary BlueKit, a phishing-as-a-service (PhaaS) platform tracked by Malwarebytes since it appeared on a cybercrime forum in April 2026, now ships
1. Executive summary The ransomware group UmBra listed Tharisa, a Cyprus-registered platinum group metals and chrome mining group with operations in South Africa and development
1. Executive summary The Operational Technology Cybersecurity Coalition (OTCC) published an 8-page white paper on 2026-10-07 urging CISA to issue a binding operational
1. Executive summary On 2026-10-06 the ransomware group "everest" listed a Dutch victim, "B-accountants", on its leak site, as
1. Executive summary Craft CMS versions before 4.17.6 and 5.9.12 contain an authentication bypass and privilege escalation flaw in UsersController->actionImpersonateWithToken(
1. Executive summary CVE-2026-88779 is a memory buffer vulnerability in Citrix NetScaler ADC and NetScaler Gateway that allows an unauthenticated remote attacker to cause
1. Executive summary CERT-UA observed in September 2026 that more than 100 compromised websites were injected with malicious JavaScript that shows visitors a forged Cloudflare
1. Executive summary A human-operated phishing platform is impersonating advertising products for Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus, using browser-
1. Executive summary The ransomware group tracked as Deadlock listed Greggio Argento, an Italian family-owned business founded in 1948 in Sarmeola di Rubano (Padua), on
1. Executive summary ClickFix operators have changed the delivery stage of the technique: compromised websites now pre-fetch a script payload into the victim's