Latest news

Vulnerabilities

CISA Adds ProFTPD, Struts, BIND, ONLYOFFICE and Strapi Flaws to KEV Over Flax Typhoon Abuse

CISA added ProFTPD, Struts, BIND, ONLYOFFICE and Strapi flaws to KEV following reported Flax Typhoon exploitation and joint advisory.

Oct 9, 202614:21 4 min readRead →

Data Breaches

Guilty plea in US court from a manager of YMCO, a money mule network said to have used 15,000 recruits

Oleg Korniev pleaded guilty in the US over reported YMCO money mule operation said to use 15,000 recruits to launder stolen funds.

Oct 9, 202613:03 5 min readRead →

Malware

Midnight Mimosa Turns Budget Android Devices Into Pre-Compromised Ad-Fraud Nodes

Bitdefender-reported Midnight Mimosa firmware malware in budget Android uses system privileges for ad-fraud payloads and reportedly evading Play Protect.

Oct 9, 202611:49 6 min readRead →

Vulnerabilities

NetScaler SAML Deployments Face RCE and Crash Risk From CVE-2026-107406

Reported CVE-2026-107406 memory overflow in SAML-configured NetScaler ADC and Gateway may allow RCE or crashes, varying by build and IdP/SP role.

Oct 9, 202610:15 5 min readRead →

APT

FBI Seizes Seven Domains Supporting Flax Typhoon Scanning and Malware Operations

FBI seized domains allegedly supporting MicroScan and FishHub scanning and malware platforms attributed to China-linked Flax Typhoon operators.

Oct 8, 202623:05 6 min readRead →

Ransomware

IDCF Cloud Ransomware Attack Disrupts 495 Organizations in Eastern Japan

IDC Frontier shut down IDCF Cloud East Japan Region 1 after ransomware disrupted 495 organizations, suspending consoles amid unverified attacker claims.

Oct 8, 202621:50 6 min readRead →

APT

MatchBoil’s Two-Minute Check-Ins Expand Access Risks for Ukrainian Infrastructure

ESET reports UAC-0099 uses phishing-delivered MatchBoil to deploy MatchWok backdoor in Ukraine transport, manufacturing and energy sectors.

Oct 8, 202619:24 6 min readRead →

Vulnerabilities

Critical NX-OS Validation Flaws Expose Some Nexus Switches to Root-Level Attacks

Cisco disclosed five critical, configuration-dependent NX-OS flaws that could allow remote code execution as root or disrupt some Nexus switches.

Oct 8, 202618:08 6 min readRead →

Vulnerabilities

Cisco Fixes 35 Flaws, Including Root-Level Attack Paths in NX-OS

Cisco issued updates for 35 flaws across NX-OS, APIC, License On-Prem, Meraki and Finesse, including root execution and reload risks.

Oct 8, 202616:58 5 min readRead →