Ransomware: safepay named bwi-bau.de (DE)
1. Executive summary On 2026-10-05 the ransomware leak site index ransomware.live recorded a victim posting by a group calling itself "safepay"
06 Oct 2026 · 5 min read
read →
// author
Jeff Davies
Ransomware: safepay named halservice.it (IT)
1. Executive summary The ransomware group tracked as "safepay" listed halservice.it, an Italian system-integration and telecommunications provider established in 1990, on its
06 Oct 2026 · 6 min read
read →
vm2: Sandbox Escape (NodeVM)
1. Executive summary A sandbox escape in the vm2 Node.js library allows code running inside a NodeVM instance to reach the host __proto__ getter and
06 Oct 2026 · 7 min read
read →
FASTJSON Includes Functionality from Untrusted Control Sphere
1. Executive summary Fastjson before 1.2.48 mishandles its autoType feature: when a JSON document contains an @type key whose value names a Java class,
05 Oct 2026 · 6 min read
read →
Apache Camel has an incomplete fix for CVE-2025-27636
1. Executive summary Apache Camel's fix for CVE-2025-27636 added case-insensitive header filtering to HttpHeaderFilterStrategy but left five non-HTTP HeaderFilterStrategy implementations
05 Oct 2026 · 8 min read
read →
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
1. Executive summary Microsoft released out-of-band updates on 2 October 2026 for CVE-2026-96940, a weak authorization flaw in on-premises Exchange Server
05 Oct 2026 · 7 min read
read →
LiteLLM has SQL Injection in Proxy API key verification
1. Executive summary LiteLLM's proxy contains a SQL injection in the API key verification path, tracked as CVE-2026-42208. An unauthenticated attacker sends
05 Oct 2026 · 8 min read
read →
Checkpoint Threat Intelligence Report
1. Executive summary Check Point's weekly bulletin for the week of 5th October 2026 covers four actively exploited vulnerabilities, three of which are in
05 Oct 2026 · 11 min read
read →
How Huntress Detects and Responds to a ClickFix Attack
1. Executive summary Huntress has published a vendor position paper on ClickFix, a delivery technique in which a victim is shown a fake CAPTCHA, instructed to
05 Oct 2026 · 8 min read
read →
Data breach at Denmark’s national population register exposes 8.8 million people
1. Executive summary Unauthorised users accessed Denmark's Central Person Register (CPR) during September 2026, exposing names, addresses and CPR numbers for approximately 8.8
05 Oct 2026 · 7 min read
read →
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws
1. Executive summary FortiGuard Labs has documented a Linux backdoor, ClingSTUN, that turns infected hosts into back-connect proxies tunnelled over the legitimate STUN protocol and
05 Oct 2026 · 8 min read
read →
Ransomware group threatens to leak customer data from top insurance companies in South Africa
1. Executive summary The ransomware-as-a-service group calling itself The Gentlemen has threatened to leak customer data belonging to two South African insurance firms,
05 Oct 2026 · 6 min read
read →