The Edge of the Cyber World See the latest
A ransomware group has put a dual-listed insurer on notice, and the insurer is pushing back on the word “confirmed.” On October 3, 2026, Insurance Business reported that Tower Limited, the New Zealand insurer known as Tower Insurance, is investigating a claim from a cyber-extortion group that says it stole company data. Tower told Stuff…
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and Carbon Black Threat Hunter Team, has hit critical infrastructure, government, and education organizations. “In the
A Dutch national who allegedly went by the handle “Archduke” is now fighting extradition to the United States after a nine-country law enforcement sweep tore through the infrastructure of the KillSec ransomware-as-a-service operation. The suspect, identified by the U.S. Department of Justice as Fouad Eltibrizi, was arrested in the United Kingdom on September 30, 2026,…
A critical flaw in Fortinet’s FortiMail secure email gateway is now confirmed under active attack, and the window for patching it is shorter than almost any similar bug this year. CVE-2026-104286, rated 9.8 out of 10 on the CVSS scale, lets an unauthenticated attacker write arbitrary files to a vulnerable FortiMail appliance using nothing more…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding…
UK Counter Terrorism Policing arrested a 27-year-old dual British-Iranian national in Westminster, London, on Thursday, October 1, 2026, becoming the sixth person detained in an escalating investigation into a suspected bomb plot near RAF Fairford, a Royal Air Force station in Gloucestershire used by the United States Air Force. The man was arrested on suspicion…
Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the deployment of a previously undocumented backdoor codenamed Antino. Cisco Talos is tracking the cluster
The teenager-run cybercrime group victimized roughly 500 organizations in less than two years. The post Authorities seize KillSec extortion group infrastructure, arrest 3 alleged members appeared first on CyberScoop.
New request logs reviewed by researchers at Transluce show that autonomous AI agents sent more than 200,000 requests to a U.S. Department of Education website in a single day, part of a wider pattern of agentic AI systems probing American and Canadian government infrastructure through the summer of 2026. BleepingComputer reported the findings on October…
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based…
