#CyberSecurity

Formula 1 Team x Cybersecurity company news latest:

ThreatLocker joins Visa Cash App Racing Bulls as official cybersecurity partner

"The team will implement the ThreatLocker Zero Trust Platform across its systems and operations, adding a further layer of protection against cyberattacks, including emerging threats enabled by AI. ThreatLocker provides Zero Trust cybersecurity solutions built to prevent cyberattacks from compromising endpoints, networks, and cloud environments."

#cybersecurity

Frazer LLP Discloses 2025 Qilin Ransomware Attack and Data Theft

Frazer LLP, a California accounting firm, confirmed a ransomware attack which occurred in March 2025 claimed by the Qilin group. The firm is offering identity protection services to affected clients.

****
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/frazer-llp-discloses-2025-qilin-ransomware-attack-and-data-theft-k-z-7-2-i/gD2P6Ple2L

We are deeply sorry for the inconvenience of your arrest and are working to resolve it in 5-7 business years.

Operators: coordinate with law enforcement and monitor for gang retaliation activity following high-profile arrests of affiliated threat actors.

Reward: You've received the Handcuffs of Account Termination. They are Soulbound.

https://www.bitdefender.com/en-us/blog/hotforsecurity/qilin-ransomware-arrested-synnovis-patient-death

#Ransomware #Qilin #Synnovis #CyberSecurity (2/2)

🚨🔑 Hackers breached OpenCode, a popular open-source AI coding tool, breaking into a legacy system it was actually in the process of shutting down. Stolen credentials included OpenAI, Anthropic, and Google API keys that developers had saved to use AI models through the platform. Some users reported unauthorized charges from the hundreds of dollars up past $1,700, with the attack described as a large-scale "distillation attack," using someone else's stolen access to harvest AI model outputs at their expense.

This wasn't a password leak, it's worse. A stolen password gets someone into one account. A stolen API key is more like a live line of credit against your wallet, usable instantly from anywhere, until someone notices the bill.

If you use OpenCode Console, revoke and replace any linked API keys immediately and check your provider billing for anything you didn't authorize.

🔗 https://techcrunch.com/2026/10/19/hackers-hit-ai-coding-tool-opencode-running-up-charges-on-users-ai-accounts/

#Cybersecurity #DataBreach #AI #OpenCode #StaySafe

Possible Phishing 🎣
on: ⚠️hxxp[:]//123-facebook[.]blogspot[.]com
🧬 Analysis at: https://urldna.io/scan/6ad72db43b7750000242990c
#cybersecurity #phishing #infosec #urldna #scam #infosec

Sasha here!! @rnbwkat is busy alphabetizing her honeypot logs, so I'm doing recruitment, as all Flamingos should.

18–20 November, Porto. Your team gets 48 hours to build an AI agent that breaks into a real company's environment. On purpose. With a signed scope. Nobody calls legal (honest)

Mentors, AI credits, and a winning build that a real company can actually adopt.

I have one leg and I'd still out-recon most of you. Prove me wrong. 🦩

Read more: https://fixathon.ai/editions/vulnerability-discovery/
or
Apply: fixathon.ai/apply/fixer

#Fixathon #infosec #redteam #Cybersecurity #ai

🔴 EXPLOITED

SiteGuard, a web firewall used to protect WordPress sites, has a bug (CVE-2026-106931) that hands attackers root. It is already being exploited.

Affects SiteGuard Server Edition before 8.00 Update 5.

Patch now.

https://suriq.io/blog/siteguard-cve-2026-106931-command-injection-root

#CVE #infosec #cybersecurity

Daily Digest | 20 October 2026

Your daily dose of Privacy, Data Protection, AI & Cybersecurity news.

5 stories you should not miss.

Read more: https://www.nicfab.eu/daily-digest/

#Privacy #AI #GDPR #Cybersecurity #TechLaw

Reward: You've received a laminated Certificate of Participation in the 2026 Breach Awareness Seminar. It is not accredited.

https://shattered.io/california-student-data-breach-ets-2026

#DataBreach #Education #CyberSecurity #ETS #StudentData #BreachAlert (3/3)

Possible Phishing 🎣
on: ⚠️hxxps[:]//innloggnings-porten[.]com/
🧬 Analysis at: https://urldna.io/scan/6ad6627b3b77500007bd37a3
#cybersecurity #phishing #infosec #urldna #scam #infosec

Phishing activity in the past 7 days 🐟
Track latest #phishing threats in TI Lookup: https://intelligence.any.run/analysis/lookup?utm_source=mastodon&utm_medium=post&utm_campaign=top_phishing&utm_content=linktoti&utm_term=201026#%7B%2522query%2522:%2522threatName:%255C%2522%5Ephishing$%255C%2522%2522,%2522dateRange%2522:180%7D

#cybersecurity

Ahold Delhaize confirmed on Monday that the outage hitting its websites and apps since 12 October was an attack. The Dutch group behind Albert Heijn, Delhaize, Food Lion and Stop & Shop took the systems offline itself, as a precaution, across most of its European and American brands. Stores stayed open throughout.

The group told the Dutch NCSC within 24 hours of detecting the activity and filed a police report yesterday. No customer data is believed taken, though the investigation continues. It is the second attack in two years; the 2024 incident exposed data on 2.2 million people.

https://newsroom.aholddelhaize.com/ahold-delhaize-update-on-status-of-cybersecurity-incident/

#CyberSecurity #InfoSec #Retail

Ransomware gangs exploit CVE-2026-0257, a GlobalProtect authentication bypass in PAN-OS, to slip past MFA and open VPN sessions. Patch now.

#CVE20260257 #PANOS #GlobalProtect #Ransomware #Qilin #Unit42 #ReliaQuest #Cybersecurity

https://securityonline.info/cve-2026-0257-globalprotect-ransomware/?utm_source=mastodon&utm_medium=jetpack_social

F5 Issues Emergency Patches for Critical NGINX Code Execution Flaws

F5 released emergency patches for three critical NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479) that allow unauthenticated remote code execution and denial-of-service attacks.

**If you run NGINX in any form (open-source web server, NGINX Plus, Ingress Controller, Gateway Fabric, or the NGINX WAF/App Protect products), install F5's latest security patches ASAP. If you can't patch, turn off Server Side Includes and asynchronous file I/O, and have your team remove alias directives that use $request_filename and switch regex maps to named captures until the patch is in.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/f5-issues-emergency-patches-for-critical-nginx-code-execution-flaws-p-9-m-u-w/gD2P6Ple2L

Possible Phishing 🎣
on: ⚠️hxxps[:]//sites[.]google[.]com/view/kundekonto0/home
🧬 Analysis at: https://urldna.io/scan/6ad6b6f43b775000030e15ae
#cybersecurity #phishing #infosec #urldna #scam #infosec

This dumb password rule is from Tanishq.

Password must contain:
- 6 to 16 characters.
- At least one special character (@, #, $, %, * and & only).
- At least one alphabet.
- At least one number.

https://dumbpasswordrules.com/sites/tanishq/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

An OVHcloud CLI attack swapped GitHub release files with a secret-stealing binary. Learn which versions are hit in this supply chain attack.

#OVHcloud #SupplyChainAttack #GitHub #CLI #SecretsTheft #DevSecOps #Cloud #Cybersecurity

https://securityonline.info/ovhcloud-cli-supply-chain-attack/?utm_source=mastodon&utm_medium=jetpack_social

Ahold Delhaize cyberattack took brand sites offline in Europe and the US. Albert Heijn outage ends as the app returns; no data theft found yet.

#AholdDelhaize #AlbertHeijn #Cyberattack #CyberSecurity #FoodLion #StopAndShop #RetailSecurity

https://securityonline.info/ahold-delhaize-cyberattack/?utm_source=mastodon&utm_medium=jetpack_social

Possible Phishing 🎣
on: ⚠️hxxps[:]//desmondcooper6[.]wixsite[.]com/atllt
🧬 Analysis at: https://urldna.io/scan/6ad662923b77500007bd37b5
#cybersecurity #phishing #infosec #urldna #scam #infosec

🚨 Detect it early: #CLOUDHAZE is a signed Rust implant distributed through fake PDF-tool Google Display ads, with high activity targeting US users.

586 ads from two verified advertisers on calendar and template sites led victims to download an implant that runs without admin rights.

❗️ Three signed samples had zero AV detections at the time of analysis. See the analysis & collect #IOCs: https://app.any.run/tasks/d033300c-1c20-4d03-9a32-b37da69bceea?utm_source=mastodon&utm_medium=post&utm_campaign=cloudhaze&utm_content=linktoservice&utm_term=191026

⚠️ CLOUDHAZE executes C2 commands and hijacks Chrome search. Since February, the operator has used brands including GalacticPDF, LuminaRead, Ironbark, QuartzLine, PageGlass, and PageStone across six C2 generations with new domains. Track activity and uncover related infrastructure in TI Lookup: https://intelligence.any.run/analysis/lookup?utm_source=mastodon&utm_medium=post&utm_campaign=cloudhaze&utm_content=linktotilookup&utm_term=191026#%7B%22query%22:%22url:%5C%22*/quarry/vein%5C%22%20OR%20url:%5C%22*/quarry/deposit%5C%22%20OR%20url:%5C%22*/quarry/geode%5C%22%20OR%20url:%5C%22*/quarry/talc%5C%22%20OR%20url:%5C%22*/mosaic/anchor%5C%22%20OR%20url:%5C%22*/mosaic/shoal%5C%22%20OR%20url:%5C%22*/mosaic/current%5C%22%20OR%20url:%5C%22*/mosaic/harbor%5C%22%20OR%20url:%5C%22*/grove/heartwood%5C%22%20OR%20url:%5C%22*/grove/phloem%5C%22%20OR%20url:%5C%22*/grove/barkline%5C%22%20OR%20url:%5C%22*/filament/radiance%5C%22%20OR%20url:%5C%22*/filament/prism%5C%22%20OR%20url:%5C%22*/filament/resonance%5C%22%20OR%20url:%5C%22*/pluto/zen%5C%22%20OR%20url:%5C%22*/pluto/oak%5C%22%20OR%20url:%5C%22*/piglet/trestle%5C%22%22,%22dateRange%22:30%7D

#cybersecurity #infosec

A massive Sourcenext data breach exposed up to 22.5 million customer records via abused member APIs, prompting emergency company-wide password resets.

#Sourcenext #DataBreach #Cybersecurity #APISecurity #InfoSec

https://securityonline.info/sourcenext-data-breach-api-leak/?utm_source=mastodon&utm_medium=jetpack_social

🔄 208 ENTRY CHANGES 🔄

💻 macOS Golden Gate 27 - 34 added, 17 updated
https://support.apple.com/en-us/149035
📱 iOS and iPadOS 27 - 20 added, 10 updated
https://support.apple.com/en-us/149034
💻 macOS Tahoe 26.7 - 20 added, 8 updated
https://support.apple.com/en-us/149042
💻 macOS Sequoia 15.8 - 19 added, 9 updated
https://support.apple.com/en-us/149043
🥽 visionOS 27 - 14 added, 8 updated
https://support.apple.com/en-us/149038
⌚ watchOS 27 - 7 added, 9 updated
https://support.apple.com/en-us/149037
📺 tvOS 27 - 8 added, 5 updated
https://support.apple.com/en-us/149036
📱 iOS and iPadOS 26.7 - 9 added, 4 updated
https://support.apple.com/en-us/149041
🔨 Xcode 27 - 4 added
https://support.apple.com/en-us/149040
🌐 Safari 27 - 2 added, 1 updated
https://support.apple.com/en-us/149039

#apple #cybersecurity #infosec #security #ios

Possible Phishing 🎣
on: ⚠️hxxps[:]//ionos[.]serve-lad[.]eu/Kundenkonto[.]html
🧬 Analysis at: https://urldna.io/scan/6ad6d30a3b77500009c354b5
#cybersecurity #phishing #infosec #urldna #scam #infosec

US moves to staff leaders for industry-partnered offensive cyber program

The U.S. is recruiting private companies for offensive cyber operations against foreign criminals. While the August program shows promise, key details remain murky: payment structures, liability protections, and target identification are unresolved. Experts support the collaboration but stress need for clear guidelines on legal responsibility and international coordination to avoid unintended harm.

https://www.nextgov.com/cybersecurity/2026/10/us-moves-staff-leaders-industry-partnered-offensive-cyber-program/416613/

#InfoSec #CyberSecurity

⚠️ #IronChain uses elevated privileges & kernel-level components to weaken security controls before encrypting files. It can disrupt Windows systems and leave organizations facing data loss and extended downtime.

👨‍💻 How to detect it before damage occurs: https://any.run/malware-trends/ironchain/?utm_source=mastodon&utm_medium=post&utm_campaign=ironchain_mtt&utm_term=191026&utm_content=linktomtt

#cybersecurity #infosec

Log monitoring is for losers.
Automating your SOC is stupid.
Smart people - winners - take sensitive information off the Internet and connect their locations with private circuits.
Instead of watching the breach happen, put the data where it can't be breached.

#cybersecurity #soc #business

📬 NicFab Newsletter #43 | October 20, 2026

Privacy, Data Protection, AI & Cybersecurity — weekly review.

👉 Read the full issue: https://www.nicfab.eu/en/newsletter-issues/2026-10-20-issue-43/?utm_source=mastodon&utm_medium=organic-social&utm_campaign=issue-43

📩 Subscribe: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now

#Privacy #GDPR #DataProtection #AI #AIAct #Cybersecurity #InfoSec

Possible Phishing 🎣
on: ⚠️hxxps[:]//prontonllkio[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6ad6ef273b77500009c3572a
#cybersecurity #phishing #infosec #urldna #scam #infosec

⌛Just one week left until it-sa 2026!⌛

Our highlights:
🔹 Migration to BlueSpice: Discover how to successfully transition from existing knowledge platforms – including our exclusive migration kit.
🔹 BlueSpice Galaxy: The next generation of knowledge management live in a demo.

📅 October 27–29, 2026
📍 Messe Nürnberg | Hall 7, Booth 352

👉 Free ticket: https://bluespice.com/bluespice-at-it-sa/

#itsa2026 #BlueSpice #Cybersecurity #KnowledgeManagement #DataSovereignty #OpenSource

Possible Phishing 🎣
on: ⚠️hxxps[:]//facebook-mx[.]blogspot[.]com/?m=1
🧬 Analysis at: https://urldna.io/scan/6ad64cc03b77500007bd3557
#cybersecurity #phishing #infosec #urldna #scam #infosec