Warlock - f4n6

notes

Making sure the checks get printed

1. Executive summary Cisco Talos has published a Threat Source newsletter item that bundles three unrelated threads: a Citrix NetScaler memory overflow tracked as CVE-2026-

08 Oct 2026 · 9 min read read →

notes

'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries

1. Executive summary A China-based group tracked as "Warlock" is using a ransomware strain of the same name against critical infrastructure in Portuguese-

02 Oct 2026 · 6 min read read →

notes

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

1. Executive summary Cisco Talos published its Q2 2026 IR trends report, identifying phishing as the dominant initial-access vector (present in >50% of engagements)

28 Jul 2026 · 10 min read read →