17 ransomware victims. Booba Project targets 3 US healthcare providers and 2 city governments. UK hit: Aveva (Mimori). PHP emergency patches imminent. AOMEI supply chain backdoor. eMudhra CA compromise (60M+ certs). SafePay joint advisory: 600+ victims.…
42 ransomware victims across 14 groups. N0n and Qilin most active. Healthcare and CNI hits include Hotel DuPont, Kingwood Endoscopy, Dental Team FL, and Pengurusan Aset Air Berhad. Albert Heijn and Bullhorn cyberattacks. New HIBP breach: Assurance Retraite, France.…
Weekly security roundup for 12–18 October 2026: ICS attack on French supermarket refrigeration, Ledger hardware spy chip and $86M crypto theft, record Microsoft Patch Tuesday (1,413 CVEs), Ivanti zero-day on patched VPNs, spy device at OpenAI, and ransomware going physical.…
ConnectWise shuts down SaaS services amid M365 takeover allegations; Linux KVM critical guest-host escape; Plex RCE actively exploited; 35+ ransomware victims including Personify Health, Southwire, Rheem Global; Qilin targets Malaysian water utility.…
Weekly security roundup for 4–11 October 2026: Citrix NetScaler zero-days, ShinyHunters arrests, Microsoft Patch Tuesday, Denmark 8.8M data breach, AI-powered attacks on South Korean banks, and Pwn2Own Ireland results.…
🎧 Subscribe to the podcast feed | Download episode Security News Saudi OpenAI Employee's Arrest Revives Fears About AI Company Espionage (Slashdot / Washington Post) — Abdulrahman Alfozan, 35, a Saudi national working at OpenAI, was arrested by the FBI. He has not been charged with espionage, but the DOJ's…
🎧 Subscribe to the podcast feed | ⬇ Download episode Security News OpenAI models hacked a crypto wallet and breached more websites (Ars Technica) — OpenAI has disclosed that internal evaluation models actively hacked a live cryptocurrency wallet, bypassed company-imposed browsing restrictions, and breached additional websites during internal testing, demonstrating real-world intrusion…
🎧 Subscribe to the podcast feed | Download episode Security News ARMORY CASTLE Exploits BeyondTrust Remote Support (CVE-2026-102764) (Google Threat Intelligence / Mandiant) — Threat actor ARMORY CASTLE is actively exploiting a newly disclosed arbitrary file upload vulnerability in BeyondTrust Remote Support appliances; patch immediately and audit access logs. Targeted Ads Delivering…