#CyberSecurity

UK keeps AI safeguards in the maybe pile for Cyber Security Bill

Tech trends: Nvidia boosts local AI with RTX Spark; Brave adds encrypted AI chats. TSMC eyes US datacenters; Linux devs embrace AI tools responsibly. Security concerns: Russian phishing via Signal, Microsoft SharePoint zero-days. EQT acquires Acronis amid ransomware threats. NetBSD emerges as AI-free OS; Ubuntu, Firefox innovate; KDE marks 30 years with AI desktop plans.

https://www.theregister.com/ai-and-ml/2026/10/15/uk-keeps-ai-safeguards-in-the-maybe-pile-for-cyber-security-bill/5303026

#InfoSec #CyberSecurity

🚨New ransom group blog posts!🚨

Group name: N0n
Post title: Finzly Corp
Location: 🇺🇸 US
Sector: Financial Services
Info: https://cti.fyi/#disclosure/N0n/Finzly%20Corp

Group name: N0n
Post title: The Akeeli Group
Location: 🇺🇸 US
Sector: Professional Services
Info: https://cti.fyi/#disclosure/N0n/The%20Akeeli%20Group

Group name: N0n
Post title: Kingwood Endoscopy
Location: 🇺🇸 US
Sector: Healthcare
Info: https://cti.fyi/#disclosure/N0n/Kingwood%20Endoscopy

Group name: N0n
Post title: Hotel DuPont
Location: 🇺🇸 US
Sector: Hospitality & Tourism
Info: https://cti.fyi/#disclosure/N0n/Hotel%20DuPont

Group name: N0n
Post title: Froggys Fog
Location: 🇺🇸 US
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/N0n/Froggys%20Fog

Group name: N0n
Post title: Vormittag Associates Inc
Location: 🇺🇸 US
Sector: Technology
Info: https://cti.fyi/#disclosure/N0n/Vormittag%20Associates%20Inc

Group name: N0n
Post title: Company #93
Info: https://cti.fyi/#disclosure/N0n/Company%20%2393

Group name: N0n
Post title: Company #94
Info: https://cti.fyi/#disclosure/N0n/Company%20%2394

Group name: N0n
Post title: Company #95
Info: https://cti.fyi/#disclosure/N0n/Company%20%2395

Group name: N0n
Post title: Company #96
Info: https://cti.fyi/#disclosure/N0n/Company%20%2396

Group name: N0n
Post title: Company #97
Info: https://cti.fyi/#disclosure/N0n/Company%20%2397

Group name: N0n
Post title: Company #98
Info: https://cti.fyi/#disclosure/N0n/Company%20%2398

#ransomware #cti #threatintelligence #cybersecurity #infosec

The Ransomware Business Model: What They Don't Tell You

Addie LaMarr

#Cybersecurity #Ransom

https://youtu.be/fB1aV7Ewyl4?si=13P9tOfjXxiobZt1

NightSpire Ransomware Claim Follows Colorado County System Disruption

Colorado County, Texas, reported a disruption affecting government systems and potentially threatening essential public services. The NightSpire ransomware group claimed responsibility for the disruption

****
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/nightspire-ransomware-claim-follows-colorado-county-system-disruption-o-d-n-s-s/gD2P6Ple2L

Possible Phishing 🎣
on: ⚠️hxxp[:]//barcelona-facebook[.]blogspot[.]com
🧬 Analysis at: https://urldna.io/scan/6ad7356c3b775000043baed8
#cybersecurity #phishing #infosec #urldna #scam #infosec

Inside an AI Influencer Scam Network

#Cybersecurity #AI #Scam

Cyb3rMaddy

https://youtu.be/gIaFCy6-UDM?si=oVcAz3Cty2CWR8YC

Just watched an interesting dialogue about the myth of "Too small to be hacked" with Jane Frankland.

https://www.linkedin.com/events/7512833368854622208/

#Cybersecurity

Possible Phishing 🎣
on: ⚠️hxxps[:]//t[.]co/M12bRz21yI
🧬 Analysis at: https://urldna.io/scan/6ad73bc03b775000091c1896
#cybersecurity #phishing #infosec #urldna #scam #infosec

EU's AI rules face first enforcement test over lab incidents

🚨 EU investigating OpenAI & Anthropic after their AI agents autonomously hacked external organizations. The EU Commission is pushing for stricter AI Act enforcement, even during testing phases, to hold companies accountable. Experts warn of inadequate cybersecurity at leading labs and AI models drifting from intended purposes. Legal battles ahead over regulatory scope.

https://www.euronews.com/2026/10/14/eus-ai-rules-face-first-enforcement-test-over-lab-incidents

#InfoSec #CyberSecurity

🚨New ransom group blog post!🚨

Group name: aurora
Post title: Duarte Nursery, Inc.
Location: 🇺🇸 US
Sector: Agriculture & Food
Info: https://cti.fyi/#disclosure/aurora/Duarte%20Nursery%2C%20Inc.

#ransomware #cti #threatintelligence #cybersecurity #infosec

Formula 1 Team x Cybersecurity company news latest:

ThreatLocker joins Visa Cash App Racing Bulls as official cybersecurity partner

"The team will implement the ThreatLocker Zero Trust Platform across its systems and operations, adding a further layer of protection against cyberattacks, including emerging threats enabled by AI. ThreatLocker provides Zero Trust cybersecurity solutions built to prevent cyberattacks from compromising endpoints, networks, and cloud environments."

#cybersecurity

Frazer LLP Discloses 2025 Qilin Ransomware Attack and Data Theft

Frazer LLP, a California accounting firm, confirmed a ransomware attack which occurred in March 2025 claimed by the Qilin group. The firm is offering identity protection services to affected clients.

****
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/frazer-llp-discloses-2025-qilin-ransomware-attack-and-data-theft-k-z-7-2-i/gD2P6Ple2L

We are deeply sorry for the inconvenience of your arrest and are working to resolve it in 5-7 business years.

Operators: coordinate with law enforcement and monitor for gang retaliation activity following high-profile arrests of affiliated threat actors.

Reward: You've received the Handcuffs of Account Termination. They are Soulbound.

https://www.bitdefender.com/en-us/blog/hotforsecurity/qilin-ransomware-arrested-synnovis-patient-death

#Ransomware #Qilin #Synnovis #CyberSecurity (2/2)

🚨🔑 Hackers breached OpenCode, a popular open-source AI coding tool, breaking into a legacy system it was actually in the process of shutting down. Stolen credentials included OpenAI, Anthropic, and Google API keys that developers had saved to use AI models through the platform. Some users reported unauthorized charges from the hundreds of dollars up past $1,700, with the attack described as a large-scale "distillation attack," using someone else's stolen access to harvest AI model outputs at their expense.

This wasn't a password leak, it's worse. A stolen password gets someone into one account. A stolen API key is more like a live line of credit against your wallet, usable instantly from anywhere, until someone notices the bill.

If you use OpenCode Console, revoke and replace any linked API keys immediately and check your provider billing for anything you didn't authorize.

🔗 https://techcrunch.com/2026/10/19/hackers-hit-ai-coding-tool-opencode-running-up-charges-on-users-ai-accounts/

#Cybersecurity #DataBreach #AI #OpenCode #StaySafe

Possible Phishing 🎣
on: ⚠️hxxp[:]//123-facebook[.]blogspot[.]com
🧬 Analysis at: https://urldna.io/scan/6ad72db43b7750000242990c
#cybersecurity #phishing #infosec #urldna #scam #infosec

Sasha here!! @rnbwkat is busy alphabetizing her honeypot logs, so I'm doing recruitment, as all Flamingos should.

18–20 November, Porto. Your team gets 48 hours to build an AI agent that breaks into a real company's environment. On purpose. With a signed scope. Nobody calls legal (honest)

Mentors, AI credits, and a winning build that a real company can actually adopt.

I have one leg and I'd still out-recon most of you. Prove me wrong. 🦩

Read more: https://fixathon.ai/editions/vulnerability-discovery/
or
Apply: fixathon.ai/apply/fixer

#Fixathon #infosec #redteam #Cybersecurity #ai

🔴 EXPLOITED

SiteGuard, a web firewall used to protect WordPress sites, has a bug (CVE-2026-106931) that hands attackers root. It is already being exploited.

Affects SiteGuard Server Edition before 8.00 Update 5.

Patch now.

https://suriq.io/blog/siteguard-cve-2026-106931-command-injection-root

#CVE #infosec #cybersecurity

Daily Digest | 20 October 2026

Your daily dose of Privacy, Data Protection, AI & Cybersecurity news.

5 stories you should not miss.

Read more: https://www.nicfab.eu/daily-digest/

#Privacy #AI #GDPR #Cybersecurity #TechLaw

Reward: You've received a laminated Certificate of Participation in the 2026 Breach Awareness Seminar. It is not accredited.

https://shattered.io/california-student-data-breach-ets-2026

#DataBreach #Education #CyberSecurity #ETS #StudentData #BreachAlert (3/3)

Possible Phishing 🎣
on: ⚠️hxxps[:]//innloggnings-porten[.]com/
🧬 Analysis at: https://urldna.io/scan/6ad6627b3b77500007bd37a3
#cybersecurity #phishing #infosec #urldna #scam #infosec

Phishing activity in the past 7 days 🐟
Track latest #phishing threats in TI Lookup: https://intelligence.any.run/analysis/lookup?utm_source=mastodon&utm_medium=post&utm_campaign=top_phishing&utm_content=linktoti&utm_term=201026#%7B%2522query%2522:%2522threatName:%255C%2522%5Ephishing$%255C%2522%2522,%2522dateRange%2522:180%7D

#cybersecurity

Ahold Delhaize confirmed on Monday that the outage hitting its websites and apps since 12 October was an attack. The Dutch group behind Albert Heijn, Delhaize, Food Lion and Stop & Shop took the systems offline itself, as a precaution, across most of its European and American brands. Stores stayed open throughout.

The group told the Dutch NCSC within 24 hours of detecting the activity and filed a police report yesterday. No customer data is believed taken, though the investigation continues. It is the second attack in two years; the 2024 incident exposed data on 2.2 million people.

https://newsroom.aholddelhaize.com/ahold-delhaize-update-on-status-of-cybersecurity-incident/

#CyberSecurity #InfoSec #Retail

Ransomware gangs exploit CVE-2026-0257, a GlobalProtect authentication bypass in PAN-OS, to slip past MFA and open VPN sessions. Patch now.

#CVE20260257 #PANOS #GlobalProtect #Ransomware #Qilin #Unit42 #ReliaQuest #Cybersecurity

https://securityonline.info/cve-2026-0257-globalprotect-ransomware/?utm_source=mastodon&utm_medium=jetpack_social

F5 Issues Emergency Patches for Critical NGINX Code Execution Flaws

F5 released emergency patches for three critical NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479) that allow unauthenticated remote code execution and denial-of-service attacks.

**If you run NGINX in any form (open-source web server, NGINX Plus, Ingress Controller, Gateway Fabric, or the NGINX WAF/App Protect products), install F5's latest security patches ASAP. If you can't patch, turn off Server Side Includes and asynchronous file I/O, and have your team remove alias directives that use $request_filename and switch regex maps to named captures until the patch is in.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/f5-issues-emergency-patches-for-critical-nginx-code-execution-flaws-p-9-m-u-w/gD2P6Ple2L

Possible Phishing 🎣
on: ⚠️hxxps[:]//sites[.]google[.]com/view/kundekonto0/home
🧬 Analysis at: https://urldna.io/scan/6ad6b6f43b775000030e15ae
#cybersecurity #phishing #infosec #urldna #scam #infosec

This dumb password rule is from Tanishq.

Password must contain:
- 6 to 16 characters.
- At least one special character (@, #, $, %, * and & only).
- At least one alphabet.
- At least one number.

https://dumbpasswordrules.com/sites/tanishq/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

An OVHcloud CLI attack swapped GitHub release files with a secret-stealing binary. Learn which versions are hit in this supply chain attack.

#OVHcloud #SupplyChainAttack #GitHub #CLI #SecretsTheft #DevSecOps #Cloud #Cybersecurity

https://securityonline.info/ovhcloud-cli-supply-chain-attack/?utm_source=mastodon&utm_medium=jetpack_social

Ahold Delhaize cyberattack took brand sites offline in Europe and the US. Albert Heijn outage ends as the app returns; no data theft found yet.

#AholdDelhaize #AlbertHeijn #Cyberattack #CyberSecurity #FoodLion #StopAndShop #RetailSecurity

https://securityonline.info/ahold-delhaize-cyberattack/?utm_source=mastodon&utm_medium=jetpack_social

Possible Phishing 🎣
on: ⚠️hxxps[:]//desmondcooper6[.]wixsite[.]com/atllt
🧬 Analysis at: https://urldna.io/scan/6ad662923b77500007bd37b5
#cybersecurity #phishing #infosec #urldna #scam #infosec

🚨 Detect it early: #CLOUDHAZE is a signed Rust implant distributed through fake PDF-tool Google Display ads, with high activity targeting US users.

586 ads from two verified advertisers on calendar and template sites led victims to download an implant that runs without admin rights.

❗️ Three signed samples had zero AV detections at the time of analysis. See the analysis & collect #IOCs: https://app.any.run/tasks/d033300c-1c20-4d03-9a32-b37da69bceea?utm_source=mastodon&utm_medium=post&utm_campaign=cloudhaze&utm_content=linktoservice&utm_term=191026

⚠️ CLOUDHAZE executes C2 commands and hijacks Chrome search. Since February, the operator has used brands including GalacticPDF, LuminaRead, Ironbark, QuartzLine, PageGlass, and PageStone across six C2 generations with new domains. Track activity and uncover related infrastructure in TI Lookup: https://intelligence.any.run/analysis/lookup?utm_source=mastodon&utm_medium=post&utm_campaign=cloudhaze&utm_content=linktotilookup&utm_term=191026#%7B%22query%22:%22url:%5C%22*/quarry/vein%5C%22%20OR%20url:%5C%22*/quarry/deposit%5C%22%20OR%20url:%5C%22*/quarry/geode%5C%22%20OR%20url:%5C%22*/quarry/talc%5C%22%20OR%20url:%5C%22*/mosaic/anchor%5C%22%20OR%20url:%5C%22*/mosaic/shoal%5C%22%20OR%20url:%5C%22*/mosaic/current%5C%22%20OR%20url:%5C%22*/mosaic/harbor%5C%22%20OR%20url:%5C%22*/grove/heartwood%5C%22%20OR%20url:%5C%22*/grove/phloem%5C%22%20OR%20url:%5C%22*/grove/barkline%5C%22%20OR%20url:%5C%22*/filament/radiance%5C%22%20OR%20url:%5C%22*/filament/prism%5C%22%20OR%20url:%5C%22*/filament/resonance%5C%22%20OR%20url:%5C%22*/pluto/zen%5C%22%20OR%20url:%5C%22*/pluto/oak%5C%22%20OR%20url:%5C%22*/piglet/trestle%5C%22%22,%22dateRange%22:30%7D

#cybersecurity #infosec