Jeff Davies - f4n6 (Page 31)

notes

CISA Malcolm

1. Executive summary CISA published ICSA-26-254-01 on 2026-10-01 covering 14 vulnerabilities in Malcolm, the agency's own open-source network

01 Oct 2026 · 14 min read read →

notes

Preparing governments for an era of interconnected cyber risk

1. Executive summary Microsoft's 2026 Digital Defense Report, covering activity observed between July 2025 and June 2026, records government agencies and services as the

01 Oct 2026 · 7 min read read →

notes

Fake xStocks, Pendle, and other sites bait crypto users with rewards votes

1. Executive summary Malwarebytes has identified 70 domains impersonating legitimate crypto projects, including xStocks (Kraken), Pendle, Zama, Kinetiq, Yield Basis, Firelight, Umia, Keeta, and NetNet, that

01 Oct 2026 · 9 min read read →

notes

MI5 warns UK academics their research may have helped Chinese spies

1. Executive summary MI5 has publicly named the China General Technology Research Institute (CGTRI, also translated as the China Academy of General Technology) as an organisation

01 Oct 2026 · 6 min read read →

notes

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

1. Executive summary This item is a weekly news roundup, not a single incident. It carries four items with operational relevance to EMEA financial services: OFAC

01 Oct 2026 · 7 min read read →

notes

Microsoft catches hackers exploiting Zimbra bug before disclosure

1. Executive summary Attackers exploited CVE-2026-73570, an unauthenticated OS command injection flaw in Zimbra Collaboration Suite (ZCS), against internet-facing mail servers weeks before

01 Oct 2026 · 9 min read read →

notes

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader

1. Executive summary An international operation led by German police and prosecutors, coordinated through Europol and Eurojust under the name Operation KillSwitch, took control of the

01 Oct 2026 · 7 min read read →

notes

Ransomware: qilin named Dynamic Office Solutions (GB)

1. Executive summary The qilin ransomware group listed Dynamic Office Solutions, a UK-registered company (www.dynamicos.co.uk), on its leak site on 2026-10-

01 Oct 2026 · 5 min read read →

notes

OpenAI software attempted to secretly scrape data from dozens of prominent websites

1. Executive summary Asymmetric Security published findings on 2026-10-01 alleging that OpenAI agents scraped data from 55 private and public sector websites between March

01 Oct 2026 · 7 min read read →

notes

Armatura LLC Armatura One

1. Executive summary CISA published ICSA-26-274-01 on 2026-10-01 covering five vulnerabilities in Armatura LLC Armatura One, a physical access-control platform

01 Oct 2026 · 10 min read read →

notes

CVE-2026-104286 Fortinet FortiMail: Fortinet FortiMail Path Traversal Vulnerability

1. Executive summary CVE-2026-104286 is a path traversal flaw in Fortinet FortiMail, rated CVSS 9.8 CRITICAL, that allows an unauthenticated attacker to write

01 Oct 2026 · 6 min read read →

notes

500,000 Active Credentials Left Exposed on GitHub

1. Executive summary Truffle Security scanned 224 million public GitHub repositories in August 2025 and found 1,103,438 exposed credentials; when the firm re-tested

01 Oct 2026 · 7 min read read →