1. Executive summary MetaMask disclosed on 2026-10-01 that it is responding to an "ongoing security incident" affecting part of its infrastructure, and
1. Executive summary SANS ISC reported a phishing email linking to a legitimate, ConnectWise-signed ScreenConnect client preconfigured for an account operated by the attacker. The
1. Executive summary CVE-2026-73570 is an unauthenticated OS command injection flaw in the Zimbra Collaboration Suite SNMP notification path, rated CVSS 8.9 HIGH
1. Executive summary Microsoft Threat Intelligence observed phishing campaigns in July 2026 that delivered a legitimate, digitally signed MSP360 RMM installer (v2.5.0.67) under
1. Executive summary A ransomware group calling itself lamashtu listed PROJAHN, a German manufacturer and distributor of precision and hand tools, on its leak site on
1. Executive summary A ransomware group calling itself lamashtu listed Altmannshofer Sicherheits-Videotechnik OHG, a German installer of CCTV, burglar alarm (EMA), access control and electronic
1. Executive summary The Play ransomware group listed Titus, a German victim, on its leak site on 2026-09-30. The only substantive data point in
1. Executive summary OpenAI has disclosed an adversarial distillation campaign that ran from 1 July 2026, peaked on 24 and 25 July with 16,000 extraction-
1. Executive summary Cisco published an advisory on 2026-09-30 for CVE-2026-76504, an unauthenticated remote API authentication bypass in Cisco Catalyst SD-WAN
1. Executive summary Northeastern University academics and the nonprofit Consumer Reports published a study finding that 19 of 21 major automakers collect and broadly disseminate connected-
1. Executive summary A ransomware leak-site listing posted on 2026-09-30 names Wilhelm Kühne, a German facility services company (cleaning and building maintenance, founded
1. Executive summary The Play ransomware group listed Orth Automobile, a German automotive business (www.orth-automobile[.]de), on its leak site on 2026-09-30.