Cyber Attacks
F5 Labs Study Reveals CDN Drives Most Web Post-Quantum Adoption
Over half of top sites support post-quantum key exchange, but research shows this edge protection masks deeper enterprise infrastructure gaps.
Threat Times Intrusion Desk
Cyber Attacks
Italy’s Foreign Ministry defends website against cyberattack, reviews embassy sites
Italian officials report mitigation of an ongoing attack on ministry systems while coordinating with EU partners to identify the responsible threat actors.
Cyber Attacks
FBI Seizes Flax Typhoon Hacking Tools Linked to Chinese Contractor
Federal authorities disrupted scanning and spear-phishing infrastructure used by the China-linked Flax Typhoon threat group, according to a report by Hackread.
Cyber Attacks
Yandex Says Drone Attack on Sasovo Data Center May Be Unrecoverable
Russian tech giant Yandex warns that its ru-central1-b cloud zone may not be restorable in the near future after a drone strike halted operations.
Cyber Attacks
FBI and Secret Service warn of ongoing FortiBleed attacks targeting critical infrastructure
Federal agencies urge operators to secure Fortinet gateways as a credential-compromise campaign continues to harvest data from SSL VPN appliances globally.
Threat Intelligence
Palo Alto Unit 42 Links Blinder Tunnel Campaign to Iranian Actor Targeting Iraqi Critical Infrastructure
Researchers identify a state-aligned Iranian group using fake recruitment portals and custom malware to compromise aviation and telecom sectors in the Middle East.
Cyber Attacks
FBI Warns FortiBleed Campaign Targets Over 86,000 Fortinet FortiGate Devices Globally
The FBI warns that the FortiBleed attack campaign remains active, with SOCRadar reporting more than 86,644 compromised Fortinet FortiGate devices across 194 countries.
Cyber Attacks
US Seizes Microscan and FishHub Tools Linked to China’s Integrity Tech
The Justice Department and FBI seized two hacking tools used by a Beijing-based firm to scan and breach critical infrastructure globally.
Cyber Attacks
Nvidia patches unauthenticated DoS flaw in DCGM Exporter GPU monitoring tool
A high-severity vulnerability in Nvidia’s DCGM Exporter allows remote attackers to crash monitoring services and disrupt AI workloads.
Cyber Attacks
Danish authorities confirm breach of 8.8 million records via misused access
The Danish government reported that attackers exploited legitimate access to the Central Person Register to steal sensitive personal data from millions of citizens.
Cyber Attacks
US offers $10 million for Chinese national linked to Hafnium hacker group
The US State Department is seeking information on Zhang Yu, a director at Shanghai Firetech accused of leading the 2021 Microsoft Exchange Server attacks.
Malware & Ransomware
CastleStealer malware adds browser bypass and remote shell capabilities
Flashpoint analysis reveals CastleStealer can now bypass Chromium encryption and execute remote commands on compromised Windows systems.
Cyber Attacks
GhostAction Attack Compromises 346 GitHub Repos via Hijacked Maintainer Accounts
Threat actors used stolen maintainer credentials to inject malicious workflows into hundreds of repositories, stealing secrets and cloud keys.
Cyber Attacks
AnyDesk Linux 8.0.2 Vulnerability Allows Unauthenticated Root Code Execution
A zero-click flaw in AnyDesk Linux 8.0.2 enables remote attackers to execute commands as root without user approval or authentication credentials.
Cyber Attacks
DOJ Accuses MonsterCloud CEO of Paying Hackers While Charging Victims
The Department of Justice accuses Zohar Pinhasi of secretly funding ransomware gangs for decryption keys while billing victims for recovery services.
Cyber Attacks
Researchers Detail AgentCorruption Attack Chain in AWS Bedrock AgentCore
A new attack chain dubbed AgentCorruption allows attackers to hijack AI agents via a single prompt, leading to credential theft and lateral movement within AWS accounts.
Cyber Attacks
DarkBlinders Hackers Deploy Fake Meeting App to Steal Government Data in Israel and Iraq
Researchers link a fake video conferencing tool and abused GitHub repositories to a cyberespionage campaign targeting government entities in Israel and the Kurdistan Region of Iraq.
Threat Intelligence
Iranian Infrastructure Generates 40 Billion DNS Observations During Conflict
A surge in suspected Iranian VPN-over-DNS activity produced 40 billion passive DNS observations across 100 domains, according to a report published October 9, 2026.
Cyber Attacks
GhostAction Hackers Compromise 500+ GitHub Accounts to Steal API Credentials
A new campaign by GhostAction has expanded to over 500 compromised accounts, injecting malicious workflows into tens of thousands of repositories since October 2026.
Cyber Attacks
Attackers Use Cyrillic-Latin Typosquatting to Impersonate Sites in Chromium Browsers
Cybercriminals are exploiting visual similarities between rare Cyrillic and Latin characters to create deceptive URLs in Chromium-based browsers, according to a report by The Register.
Malware & Ransomware
Bitdefender Discovers Midnight Mimosa Malware Preinstalled on MediaTek Android Phones
Researchers identify a firmware-level Android malware campaign that fakes ad clicks and builds a proxy botnet across 150 countries.
Malware & Ransomware
PoeLLM Cryptominer Hits 3,400 Servers Using GitHub Poem for C2 Communication
Lumen researchers report that the PoeLLM malware has infected over 3,400 servers, primarily targeting exposed AI inference tools like LiteLLM and Ollama.
Threat Intelligence
Ukrainian drone strikes cripple Yandex data centers, eliminating Russian bot traffic overnight
Ukraine’s drone attacks on Yandex facilities caused a dramatic drop in Russian bot activity, disrupting infrastructure linked to disinformation campaigns.
Malware & Ransomware
Nippon Columbia Malware Breach Exposes 8.7 Million Records for Daiichi Kosho
A malware infection at contractor Nippon Columbia compromised personal data for millions of users and employees of Japanese entertainment firm Daiichi Kosho.