breach1 source
Ransomware Affiliate Betrays Partners, Absconds with Profits
A ransomware affiliate has reportedly double-crossed his own gang, stealing profits and publishing victim data on a private leak site.
Oct 8, 2026
Stories
Every story we’ve synthesized.
Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,482 stories synthesized.
research2 sources
OpenAI Disrupts Russian and Iranian Influence Operations Using AI-Generated Personas
OpenAI has shut down sophisticated influence operations from Russia and Iran that leveraged AI tools like ChatGPT to create fake journalists and think tanks, successfully planting narratives in mainstream media.
Oct 8, 2026 · updated Oct 9, 2026
breach1 source
Cybersecurity Consultant Convicted in $54 Million Uranium Finance Hack
A US federal jury convicted Maryland cybersecurity consultant Jonathan Spalletta for stealing over $54 million from cryptocurrency exchange Uranium Finance through two sophisticated smart contract exploits.
Oct 8, 2026
breach1 source
Shai-Hulud Worm Targets AI Infrastructure, Compromising Tensorlake SDK
The Shai-Hulud worm has infiltrated Tensorlake's npm SDK, a platform for AI agents, stealing credentials and cloud secrets, and posing a risk to thousands of weekly downloads.
Oct 8, 2026
research1 source
New Scripts Aid Forensic Analysis of AI Coding Assistant Activity
Two Python scripts, opencode-chat-replay.py and hermes_forensic_extract.py, have been released to help investigators reconstruct activity logs from popular AI coding assistants.
Oct 8, 2026
advisory1 source
CISA Warns of Critical Vulnerabilities in Grid Protection Alliance Software
CISA has issued an advisory detailing multiple critical vulnerabilities in Grid Protection Alliance's openPDC and openHistorian software, potentially allowing unauthenticated remote code execution.
Oct 8, 2026
advisory1 source
CISA Warns of Multiple Vulnerabilities in Satel Netco Design
CISA has issued an advisory detailing three critical vulnerabilities in Satel Netco Design, versions prior to v2.1.7, including cross-site scripting, denial of service, and path traversal flaws.
Oct 8, 2026
advisory1 source
CISA Warns of Multiple Vulnerabilities in Red Lion Controls N-Tron 700 Series
CISA has issued an advisory for Red Lion Controls N-Tron 700 Series devices, detailing multiple vulnerabilities that could allow unauthorized administrative access and device reboots.
Oct 8, 2026
breach1 source
Crypto Thief Sentenced for $260K SIM-Swapping Heist
A 25-year-old man has received a two-and-a-half-year prison sentence in London for his role in a cryptocurrency theft scheme that pilfered nearly $260,000.
Oct 8, 2026
research1 source · 1 CVE
Hikvision Camera Vulnerability Targeted in Exploitation Attempts
GreyNoise observed a surge in exploitation attempts against CVE-2021-36260, a critical command injection vulnerability in Hikvision products, targeting devices in Ukraine.
Oct 8, 2026
patch1 source · 17 CVEs
Cisco Addresses Dozens of Critical Vulnerabilities Across Multiple Product Lines
Cisco has released patches for 35 vulnerabilities, including over a dozen critical flaws affecting its Meraki, License On-Prem, NX-OS, and APIC products.
Oct 8, 2026
research1 source
UAC-0099 Deploys ASHVEIN RAT to Target Ukrainian Government Personnel
Russia-aligned threat actor UAC-0099, also known as Earth Sirrush, is using a new .NET infostealer and RAT called ASHVEIN to target Ukrainian government employees, with commands cleverly hidden within HTML files.
Oct 8, 2026
advisory1 source · 21 CVEs
IBM DataPower Gateway: 25 Coordinated Vulnerabilities Disclosed, Posing Critical Risks
Key findings • 25 vulnerabilities disclosed for IBM DataPower Gateway on October 8, 2026. • Critical vulnerabilities include remote code execution via buffer overflows (CVE-2026-14269, CVE-20…
Oct 8, 2026 · updated Oct 9, 2026
advisory1 source · 18 CVEs
hMailServer: 18 Vulnerabilities Disclosed Together, Exploiting DoS and Privilege Escalation Flaws
Key findings • 18 vulnerabilities disclosed for hMailServer on October 8, 2026, affecting versions 6.0.0 through 6.3.5. • Multiple denial-of-service vulnerabilities exist due to inefficient a…
Oct 8, 2026 · updated Oct 9, 2026
1 source
Hmailserver: 22 Vulnerabilities Disclosed in Single Batch, Many Causing DoS
Key findings • 22 vulnerabilities disclosed for Hmailserver on October 8, 2026, affecting versions 6.0.0 through 6.3.5. • Multiple denial-of-service vulnerabilities exist due to inefficient a…
Oct 8, 2026 · updated Oct 9, 2026
advisory1 source · 21 CVEs
ImageMagick: 25 Vulnerabilities Disclosed, Affecting Multiple Image Formats
Key findings • 25 medium-severity vulnerabilities disclosed for ImageMagick between Oct 7-8, 2026. • Issues span multiple decoders (CALS, MAT, MVG, RSVG) and encoders (CUT, PostScript). •…
Oct 8, 2026 · updated Oct 9, 2026
advisory1 source
Microsoft Teams to Integrate Third-Party Deepfake Detection
Microsoft Teams will soon allow certified third-party providers to detect synthetic audio and video, aiming to combat deepfake attacks within meetings.
Oct 8, 2026
trend2 sources
Generative AI Fuels Sophisticated Phishing Attacks, Forcing Defense Evolution
Generative AI is transforming phishing attacks into highly personalized, sophisticated threats that bypass traditional defenses, prompting the development of AI-driven counter-measures.
Oct 8, 2026 · updated Oct 21, 2026
advisory1 source
Critical Sungrow Inverter Vulnerability Allowed Passwordless Access to Solar Plant Management
A critical business-logic flaw in Sungrow's iSolarCloud platform enabled attackers to bypass password authentication and gain unauthorized access to solar plant management systems.
Oct 8, 2026
advisory1 source
Insignary Clarity AIR Targets Undeclared Open-Source and AI-Generated Code
Insignary has released Clarity AIR, a new tool designed to scan source code directly and identify open-source and AI-generated code that developers may not have declared in manifests or SBOMs.
Oct 8, 2026
breach1 source
Russian Extortion Gang Recruited 'Agents' to Infiltrate US Law Firms
Leaked chats reveal a Russian-based extortion group, linked to Silent Ransom Group, plotted to send operatives into US law firms to steal data and extort victims.
Oct 8, 2026
research1 source
Hackers Use Fake Hotel Reviews to Deliver Blockchain-Hidden Malware
Threat actors are targeting hotels with phishing emails containing fake negative reviews, leading staff to download malware that uses public blockchains for command and control.
Oct 8, 2026
breach1 source
Hackers Allegedly Selling Stolen VirusTotal API Keys on Dark Web
A dark web seller is reportedly offering a VirusTotal Enterprise API key for $350, sparking concerns about potential misuse of threat intelligence data.
Oct 8, 2026
research1 source
Hackers Use Blockchain for Resilient Command-and-Control in Supply Chain Attacks
Threat actors are leveraging public blockchain networks as a resilient command-and-control (C2) layer for supply chain malware, evading traditional defenses and enabling dynamic infrastructure rotation.
Oct 8, 2026