Live and recent posts from across the Fediverse tagged #cybersecurity, aggregated by home.social.
Per my last email, have you considered simply not being locked out?
Your account lockouts are a known issue. The fix is to review your firewall access logs for suspicious authentication attempts and credential compromise indicators. I'm marking this ticket Resolved.
Reward: You've received a Closed Ticket notification. The problem remains open.
https://www.cybersecuritydive.com/news/fbi-fortibleed-credential-harvesting-attacks/832366
Hackers earned $1.26 million for 98 zero-days at Pwn2Own Ireland 2026. Ikotas Labs won by successfully exploiting Google, Samsung, and Oracle flaws.
#Pwn2Own #ZeroDay #Cybersecurity #IkotasLabs #GooglePixel #SamsungGalaxy
🚨New ransom group blog post!🚨
Group name: qilin
Post title: Confipetrol
Sector: Services
Info: https://cti.fyi/#disclosure/qilin/Confipetrol
#ransomware #cti #threatintelligence #cybersecurity #infosec
Experts warn that AI-driven ransomware could produce mass outages across critical infrastructure if defenders fail to keep pace. Strengthen your endpoint detection and response capabilities now, before the autonomous thing on the other end of your network does it for you.
Reward: Error 404 — Comfort not found.
https://www.forbes.com/sites/ariredbord/2026/10/07/ransomwares-terminator-moment
#Ransomware #CyberSecurity #AI #CriticalInfrastructure #InfoSec #TerminatorMoment (2/2)
#LLRX #CyberSecurity @bespacific
Pete Recommends – Weekly highlights on cyber security issues, October 10, 2026
Five highlights from this week: Mac vs. PC: Which is better for #Privacy Google #SynthID Site Spots #AI Fakes for Free; #FBI Uncovers Source of Its Jobs Site Hack; Some Cheap Android Phones Are Shipping with Pre-Installed #malware and FBI Uncovers Source of Its Jobs Site Hack.
Posted in: AI, #cybercrime Cybersecurity, Government Resources, Privacy, Technology Trends
🚨New ransom group blog post!🚨
Group name: incransom
Post title: hsc.mb.ca
Organization: Health Sciences Centre
Location: 🇨🇦 CA
Sector: Healthcare
Info: https://cti.fyi/#disclosure/incransom/hsc.mb.ca
#ransomware #cti #threatintelligence #cybersecurity #infosec
Dear any firms who got breached/hacked, if you say "Our investigation is ongoing."
Shut the fuck up, don't add anything that gonna slap in the wrist afterwards like "We have not detected impact or access to customer data or inference traffic".
Security Tip: Implement Image Signing in your container workflow. 🛡️
A secure registry is only part of the solution. By signing your images and enforcing verification via admission controllers, you prevent tampered images from reaching production. If the signature doesn't match, the pod doesn't start. This is a vital step for supply chain integrity.
Track the latest container vulnerabilities at https://cvedatabase.com
🚨New ransom group blog post!🚨
Group name: dragonforce
Post title: TEXMA International Co., Ltd
Location: 🇹🇼 TW
Sector: Real Estate
Info: https://cti.fyi/#disclosure/dragonforce/TEXMA%20International%20Co.%2C%20Ltd
#ransomware #cti #threatintelligence #cybersecurity #infosec
They exploited the Replication Receiver API like it was a skippable mechanic. IT IS NOT A SKIPPABLE MECHANIC. Restrict API access to trusted networks and monitor for webshells and suspicious process execution until a patch drops — or so help me I am leaving this guild.
Reward: You've received a Webshell Souvenir. It came free with your backup software.
https://www.securityweek.com/unpatched-ahsaycbs-vulnerabilities-exploited-in-the-wild/amp/
Cyber incident closes offices, disrupts North Platte and Lincoln County phones in Nebraska #CyberIncident #Nebraska #PhoneOutage #NebraskaNationalGuard #Breach #cybersecurity https://dysruptionhub.com/north-platte-nebraska-cyber-phone-outage/
Weekendowa Lektura: odcinek 697 [2026-10-10]. Bierzcie i czytajcie
🇵🇱 https://zaufanatrzeciastrona.pl/post/weekendowa-lektura-odcinek-697-2026-10-10-bierzcie-i-czytajcie/
🇬🇧 https://badcyber.com/it-security-weekend-catch-up-october-10-2026/
Linków jest dużo, a czasu mało, materiały są jak zwykle całkiem ciekawe, nie będziemy więc tracić czasu na wprowadzenie, tylko od razu bierzcie się do czytania. Miłego klikania!
Age verification, digital ID, and data retention are sold as cybersecurity wins. A technical look at who gets monitored, and who simply routes around the rules. https://hackernoon.com/the-safer-internet-lie-why-more-surveillance-isnt-making-anyone-safer #cybersecurity
In which state government employees browsing porn fell into a #cybersecurity extortion scam: https://cromwell-intl.com/cybersecurity/extortion.html?s=mb
Reward: You've received a slightly damp Certificate of Trust in Vendors — non-refundable, warranty void upon breach, which started Tuesday.
https://tech-insider.org/ransomware-recovery-scam-11m-ai-bank-hacks-2026
#Ransomware #CyberSecurity #BankSecurity #AIThreats #Fraud #TrustBroken (3/3)
Daiichikosho Customer and Employee Data Potentially Exposed in Third-Party Malware Incident
Daiichikosho is investigating a potential data breach after malware infected a computer at contractor Nippon Columbia Group that temporarily stored customer and employee information. Approximately 8.72 million records may have been affected, although no external data leak or misuse has been confirmed.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/daiichikosho-customer-and-employee-data-potentially-exposed-in-third-party-malware-incident-3-i-4-4-u/gD2P6Ple2L
🚨New ransom group blog post!🚨
Group name: Redact
Post title: DexCom
Location: 🇺🇸 US
Sector: Healthcare
Info: https://cti.fyi/#disclosure/Redact/DexCom
#ransomware #cti #threatintelligence #cybersecurity #infosec
Bookoff Group Data Breach Affects Up to 6.43 Million Membership Records
Bookoff Group Holdings disclosed a data breach after an unauthorized third party accessed a subsidiary-operated membership management system. The incident potentially affected up to 6.43 million membership records containing personal information, including names, contact details, membership identifiers, and hashed passwords.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/bookoff-group-data-breach-affects-up-to-6-43-million-membership-records-2-n-v-g-a/gD2P6Ple2L
"Cyber exec arrested in case allegedly tied to ShinyHunters hackers"
"[...] Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI's ongoing crackdown on the ShinyHunters hacking group."
🚨New ransom group blog posts!🚨
Group name: qilin
Post title: Secretaría de Modernización e Innovación del Municipio
Location: 🇲🇽 MX
Sector: Government
Info: https://cti.fyi/#disclosure/qilin/Secretar%C3%ADa%20de%20Modernizaci%C3%B3n%20e%20Innovaci%C3%B3n%20del%20Municipio
Group name: qilin
Post title: ACI Proyectos SAS
Location: 🇨🇴 CO
Sector: Construction
Info: https://cti.fyi/#disclosure/qilin/ACI%20Proyectos%20SAS
Group name: qilin
Post title: LD Constructora
Location: 🇲🇽 MX
Sector: Construction
Info: https://cti.fyi/#disclosure/qilin/LD%20Constructora
Group name: qilin
Post title: Glenhardie Country Club
Location: 🇺🇸 US
Sector: Services
Info: https://cti.fyi/#disclosure/qilin/Glenhardie%20Country%20Club
#ransomware #cti #threatintelligence #cybersecurity #infosec
Peach Aviation Email Services Disrupted by IDC Frontier Ransomware Attack
Peach Aviation experienced an email service disruption after its cloud provider, IDC Frontier, was hit by ransomware. The affected system contained approximately 1.89 million reservation-related records, although Peach said no external leak of personal information has been confirmed and restored email delivery using alternative servers.
****
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/peach-aviation-email-services-disrupted-by-idc-frontier-ransomware-attack-1-z-n-s-9/gD2P6Ple2L
🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ What We Missed: FBI Strikes Back at ShinyHunters
🔗 https://www.darkreading.com/identity-access-management-security/fbi-shinyhunters-claims-hack
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run data center.
CVE Alert: CVE-2026-96667 - rameez_iqbal - Real Estate Manager – Property Listing and Agent Management - https://www.redpacketsecurity.com/cve-alert-cve-2026-96667-rameez-iqbal-real-estate-manager-property-listing-and-agent-management/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-96667 #rameez-iqbal #real-estate-manager-property-listing-and-agent-management
It is wild that a pop song caused a Rhythm Nation laptop crash. Janet Jackson's song crashed laptops because its bass hit the resonant frequency of 5400 RPM hard drives. This shows why older mechanical drives were so sensitive to vibration. I wrote a post about this hardware history here: https://gwizit.com/go/opxNtJT
CVE Alert: CVE-2026-104899 - paoltaia - GeoDirectory – WP Business Directory Plugin and Classified Listings Directory - https://www.redpacketsecurity.com/cve-alert-cve-2026-104899-paoltaia-geodirectory-wp-business-directory-plugin-and-classified-listings-directory/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-104899 #paoltaia #geodirectory-wp-business-directory-plugin-and-classified-listings-directory
CVE Alert: CVE-2026-77183 - foosales - FooSales – Point of Sale (POS) for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-77183-foosales-foosales-point-of-sale-pos-for-woocommerce/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-77183 #foosales #foosales-point-of-sale-pos-for-woocommerce
CVE Alert: CVE-2026-92975 - trainingbusinesspros - Groundhogg — CRM, Newsletters, and Marketing Automation - https://www.redpacketsecurity.com/cve-alert-cve-2026-92975-trainingbusinesspros-groundhogg-crm-newsletters-and-marketing-automation/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-92975 #trainingbusinesspros #groundhogg-crm-newsletters-and-marketing-automation
CVE Alert: CVE-2026-93775 - eteubert - Podlove Podcast Publisher - https://www.redpacketsecurity.com/cve-alert-cve-2026-93775-eteubert-podlove-podcast-publisher/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-93775 #eteubert #podlove-podcast-publisher
CVE Alert: CVE-2026-83526 - foliovision - FV Player 8 - https://www.redpacketsecurity.com/cve-alert-cve-2026-83526-foliovision-fv-player-8/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-83526 #foliovision #fv-player-8
CVE Alert: CVE-2026-14335 - smub - Easy Digital Downloads – eCommerce Payments and Subscriptions made easy - https://www.redpacketsecurity.com/cve-alert-cve-2026-14335-smub-easy-digital-downloads-ecommerce-payments-and-subscriptions-made-easy/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-14335 #smub #easy-digital-downloads-ecommerce-payments-and-subscriptions-made-easy
CVE Alert: CVE-2026-104021 - hostspa - Fastcache by Host.it - https://www.redpacketsecurity.com/cve-alert-cve-2026-104021-hostspa-fastcache-by-host-it/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-104021 #hostspa #fastcache-by-host-it
CVE Alert: CVE-2026-89301 - rtcamp - rtMedia for WordPress, BuddyPress and bbPress - https://www.redpacketsecurity.com/cve-alert-cve-2026-89301-rtcamp-rtmedia-for-wordpress-buddypress-and-bbpress/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-89301 #rtcamp #rtmedia-for-wordpress-buddypress-and-bbpress
CVE Alert: CVE-2026-104797 - nasirahmed - Advanced Form Integration — Connect Forms to 300+ Apps - https://www.redpacketsecurity.com/cve-alert-cve-2026-104797-nasirahmed-advanced-form-integration-connect-forms-to-300-apps/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-104797 #nasirahmed #advanced-form-integration-connect-forms-to-300-apps
CVE Alert: CVE-2026-104766 - latepoint - Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress - https://www.redpacketsecurity.com/cve-alert-cve-2026-104766-latepoint-appointment-booking-plugin-latepoint-calendar-scheduling-for-wordpress/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-104766 #latepoint #appointment-booking-plugin-latepoint-calendar-and-scheduling-for-wordpress
CVE Alert: CVE-2026-104725 - trainingbusinesspros - Groundhogg — CRM, Newsletters, and Marketing Automation - https://www.redpacketsecurity.com/cve-alert-cve-2026-104725-trainingbusinesspros-groundhogg-crm-newsletters-and-marketing-automation/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-104725 #trainingbusinesspros #groundhogg-crm-newsletters-and-marketing-automation
CVE Alert: CVE-2026-104723 - lifterlms - LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - https://www.redpacketsecurity.com/cve-alert-cve-2026-104723-lifterlms-lifterlms-wp-lms-for-elearning-online-courses-quizzes/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-104723 #lifterlms #lifterlms-wp-lms-for-elearning-online-courses-and-quizzes
Japan reagiert auf Welle von Cyberangriffen
Etliche wichtige Unternehmen in Japan meldeten zuletzt Cyberangriffe. Japans Digitalminister spricht von einem Notstand.
#Cyberangriff #Cybersecurity #Datenleck #Datenschutz #IT #Security #Netzpolitik #news
Everest Ransomware Claims 4.36 GB Data Theft from Flydubai
The Everest ransomware group claims to have stolen 4.36 GB of data from Flydubai, including employee information and proprietary Boeing material associated with its Performance Engineers Tool. The claims remain unverified, and neither Flydubai nor Boeing has publicly confirmed the alleged data theft.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/everest-ransomware-claims-4-36-gb-data-theft-from-flydubai-6-u-o-7-p/gD2P6Ple2L
AWS AgentCore security undone by prompt requesting credentials
TechCrunch: Anthropic can’t reliably control its AI agents. It’s cutting off its internal evals from the live internet instead. “Anthropic said its models exploited websites on the internet, including some run by U.S. government agencies, and it will turn off live internet access for all of its internal evaluations until the frontier lab is sure it can monitor and control its AI agents.”
https://rbfirehose.com/2026/10/10/techcrunch-anthropic-cant-reliably-control-its-ai-agents-its-cutting-off-its-internal-evals-from-the-live-internet-instead/
HYBRID 13-14 OCT 10:00 WAT / 09:00 UTC: 14th AfICTA Summit
AfICTA and HTCNWY convene in Abuja and online on security, digital skills and indigenous content for inclusive growth. Keynote Jimson Olufuye; panels on digital infrastructure security, homegrown tech, data protection, WSIS/GDC/AfCFTA and SMEs.
More Japanese companies have revealed that they have experienced major customer data breaches due to cyberattacks. https://www.japantimes.co.jp/business/2026/10/10/tech/japanese-firms-data-breaches/?utm_medium=Social&utm_source=mastodon #business #tech #hacking #computers #ai #cybersecurity #tech
🚨New ransom group blog posts!🚨
Group name: exitium
Post title: KOIKE Sanso Kogoyo Co. Ltd.
Location: 🇯🇵 JP
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/exitium/KOIKE%20Sanso%20Kogoyo%20Co.%20Ltd.
Group name: rhysida
Post title: Gress Clark Young & Schoepper
Location: 🇺🇸 US
Sector: Legal
Info: https://cti.fyi/#disclosure/rhysida/Gress%20Clark%20Young%20%26%20Schoepper
Group name: Deadlock
Post title: UNION FA
Sector: Unknown
Info: https://cti.fyi/#disclosure/Deadlock/UNION%20FA
#ransomware #cti #threatintelligence #cybersecurity #infosec
Morgan Services Data Breach Exposes Social Security Numbers Following AILock Claim
Morgan Services disclosed a data breach potentially exposing names and Social Security numbers, with at least 213 Massachusetts residents affected. The AILock ransomware group claims to have stolen approximately 477 GB of data, although Morgan Services has not confirmed the group's involvement, and the company is offering 24 months of credit monitoring to affected individuals.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/morgan-services-data-breach-exposes-social-security-numbers-following-ailock-claim-6-7-3-g-r/gD2P6Ple2L
Online dating: gamification, addiction, and the morale economy #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/online-dating-gamification-addiction-and-the-morale-economy/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog
Gavias, a Vietnam-based WordPress theme maker, has 11 CVEs all rated high severity, avg CVSS 8.01, and 100 percent remain unpatched. Trust score D. If you run Gavias themes, treat them as exposed. https://www.valtersit.com/vendors/gavias/ #cybersecurity #infosec #WordPress
