Public posts with this hashtag.
In Japan, the ransomware name everyone knows is Qilin, thanks to the Asahi attack.
On the leak sites, 2026 belongs to The Gentlemen: 23 Japanese organizations listed this year (ransomware.live), vs 15 for Qilin. Group-IB says it grew out of a Qilin affiliate team, and it hands affiliates compromised FortiGates.
The brand changes; the way in doesn't.
https://japancyberwatch.com/articles/japan-ransomware-groups-2026-the-gentlemen-qilin
🚨New ransom group blog post!🚨
Group name: qilin
Post title: GardaWorld
Location: 🇨🇦 CA
Sector: Professional Services
Info: https://cti.fyi/#disclosure/qilin/GardaWorld
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
Possible Phishing 🎣
on: ⚠️hxxps[:]//us02webzoomus[.]com/invite[.]php
🧬 Analysis at: https://urldna.io/scan/6ad5ea403b77500004c2bc66
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
ASN: AS265919
Location: Cotia, BR
Added: 2026-10-17T12:05
CVE-2026-112302 is a path traversal vulnerability in the ZIP extraction function of the kiwilan php-archive PHP library. Versions up to 2.3.02 are affected.
A public exploit is circulating per VulDB. No vendor fix is available, and kiwilan has not responded to the disclosure.
Cybersecurity is a leadership problem: Why the management model needs to catch up
Cybersecurity fails when treated as just a tech problem. The real issue? Leadership. CISOs can't do it alone—organizations need clear accountability, cross-level collaboration, and board involvement. Better tools mean nothing without proper governance and sustained management discipline. It's time to break the cycle.
CSO OnlineCybersecurity is a leadership problem: Why the management model needs to catch upWe keep buying better security tech, but the real gaps are ownership and follow-through, so cybersecurity can’t stay the CISO’s problem alone.
Possible Phishing 🎣
on: ⚠️hxxps[:]//bradesco-validacao[.]digital
🧬 Analysis at: https://urldna.io/scan/6ad64cb13b77500009d2816d
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
ASN: AS7506
Location: Tokyo, JP
Added: 2026-10-17T11:51
🛡 THREAT INTEL | Patriot Maritime
🟢 Actor "Storm" claims Undisclosed
Allegedly exposed
• Contracts
• Employee data
⚠️ Unverified claim
https://www.yazoul.net/intel/claim/2026-10-19-patriot-maritime-ransomware-claim-by-storm-oct-2026
by Yazoul AI
Yazoul SecurityPatriot Maritime Ransomware Claim by Storm (Oct 2026)Storm ransomware group allegedly claims Patriot Maritime as a victim, threatening sensitive maritime contractor data. Read our unverified threat intel analysis now.
⚠️ New security advisory:
CVE-2026-80344 affects multiple systems.
• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-80344-apache-camel-as2-ssrf-enables-internal-network-access-poc
by Yazoul AI
Yazoul SecurityApache Camel AS2 SSRF enables internal network access (CVE-2026-80344) [PoC]CVE-2026-80344: Apache Camel AS2 SSRF (CVSS 8.2) lets remote senders pick the MDN destination host and leak credentials. Update to 4.23.0, 4.18.5, or 4.22.1.
🧪 NEW BETA RELEASES 🧪
📱 iOS 27.2 RC (24B115)
📱 iPadOS 27.2 RC (24B115)
💻 macOS 27.2 RC (26B118)
📺 tvOS 27.2 RC (24K120)
🥽 visionOS 27.2 RC (24N118)
⌚ watchOS 27.2 RC (24S116)
🔨 Xcode 27.2 RC (27B48)
Tech took a beating this past week. It was the main target for attackers (ranking #2 out of 12 sectors) with 193 stories hitting the wire.
Possible Phishing 🎣
on: ⚠️hxxps[:]//sites[.]google[.]com/view/webmaillogin09/home
🧬 Analysis at: https://urldna.io/scan/6ad5d5cb3b77500008d7e84e
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
The 7 biggest issues CISOs and security teams face today
Security leaders face mounting pressure as AI-driven cyberattacks surge. 68% of CISOs report increased stress, with 73% unprepared for major breaches. The shift from prevention to resilience is critical—78% view generative AI as a security risk. Key priorities: close the 95% skills gap, strengthen AI infrastructure security, align programs with org needs, and maintain foundational practices.
CSO OnlineThe 7 biggest issues CISOs and security teams face todayFrom escalating AI-enabled threats to persistent skills gaps, security leaders are reshaping their agendas to address several key long-standing and emerging concerns.
This dumb password rule is from Crédit Agricole Centre-Est.
You have to enter your 6-digit password using this Frenchy keypad.
https://dumbpasswordrules.com/sites/credit-agricole-centre-est/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
dumbpasswordrules.comCrédit Agricole Centre-Est - Dumb Password RulesYou have to enter your 6-digit password using this Frenchy keypad.
ASN: AS3462
Location: Taipei, TW
Added: 2026-10-17T12:02
Possible Phishing 🎣
on: ⚠️hxxp[:]//dempiremanagement[.]com/owa[.]auth[.]logo[.]aspx
🧬 Analysis at: https://urldna.io/scan/6ad63eb33b77500002f4d892
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
🛡️ Manager, MDR & Threat Hunting at Zscaler
📍 Remote (US)
💰 $144k–$205k/yr
Apply: https://blueteamjobs.com/job/manager-mdr-and-threat-hunting-zscaler-x1fw4e/
#BlueTeam #InfoSec #CyberSecurityJobs #SecurityOperationsLeadership
BlueTeamJobsManager, MDR & Threat Hunting at Zscaler | BlueTeamJobsZscaler is hiring a Manager, MDR & Threat Hunting, Remote (US). Pay: $144k–$205k a year. Zscaler (NASDAQ: ZS) accelerates digital transformation so…
Possible Phishing 🎣
on: ⚠️hxxps[:]//facebookloginnew[.]blogspot[.]com/?m=1
🧬 Analysis at: https://urldna.io/scan/6ad64cd03b775000039b25ca
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
🤖 Plex2Shell: a 4-vuln chain in Plex Media Server is now exploited in the wild, one day after public PoC. Attackers chain the flaws to deploy crypto miners and a Linux reverse-proxy backdoor on internet-facing servers.
🔗 https://thehackernews.com/2026/10/hackers-exploit-plex2shell-flaws-to.html
#Exploit #InfoSec #Malware #CyberSec
The Hacker NewsHackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy BackdoorAttackers exploit four Plex Media Server flaws chained as Plex2Shell to deploy XMRig miners and reverse proxy software after PoC release.
AI agents are changing the math on software spending
AI agents are reshaping enterprise software pricing. Companies like Microsoft, Salesforce, and SAP are ditching traditional per-seat licensing for hybrid models combining fixed subscriptions with consumption-based charges. CIOs must now budget for workflow complexity and execution frequency, not just user count. Success requires rethinking forecasting strategies and potential budget shifts between IT and business units.
IT StrategyAI agents are changing the math on software spending | TechTargetAI agents add usage-based charges to seat licensing. CIOs must compare workflow costs, forecast consumption and decide who pays for agent activity.
Thank you to the JawnCon 0x3 organizers, speakers, villages and volunteers. Community cons run on people giving their weekend. Proud to have sponsored it.
Possible Phishing 🎣
on: ⚠️hxxp[:]//a2zapk[.]co/1368404-spotify-music-and-podcasts-9-0-30-242-ab-experimental-cloned-armeabi-v7a-arm64-v8a-a2z[.]html
🧬 Analysis at: https://urldna.io/scan/6ad654733b77500002f4d97a
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
#introduction, round two. I'm Solomon: retired chef, network and systems engineer, CySA+, finishing an M.S. in cybersecurity at USF.
I build Brigade, open-source tooling that keeps AI coding agents honest: verified runs with signed exit codes, a code graph agents check before editing, and an evidence log of what they did. I also run a homelab SOC on Wazuh, TheHive, and MISP.
Here for blue team, agent security, and homelabs.
BrigadeBrigade - trackable work for coding-agent fleetsTrack coding-agent tasks, receipts, shared memory, and synced tools across tools, repos, and sessions. Local files. No required daemon.
Possible Phishing 🎣
on: ⚠️hxxps[:]//bit[.]ly/BancoIombiamiSeguro
🧬 Analysis at: https://urldna.io/scan/6ad5c7c03b775000050098c1
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
CVE-2026-11319: TickTick Limited's TickTick for Android 8.2.2.0 contains a path traversal flaw in its exported ShareReceiveActivity.
A malicious local app can supply a crafted filename to write files outside the attachment directory.
No in-the-wild exploitation is confirmed and no fixed version is listed.
We are seeing suspicious traffic hitting our website and triggering HTTP 503 errors.
IPs observed in the logs:
185.220.100.243
185.220.100.248
141.98.11.62
192.42.116.*
Some of these IPs are associated with Tor exit nodes. Has anyone seen similar traffic recently?
🚨New ransom group blog post!🚨
Group name: incransom
Post title: Seetelhotels.de
Organization: Seetel Hotels
Location: 🇩🇪 DE
Sector: Hospitality & Tourism
Info: https://cti.fyi/#disclosure/incransom/Seetelhotels.de
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
Thank you Splunk, a Cisco Company for sponsoring BSides Edmonton 2026. It was a great event thanks to your support.
We’re excited for 2027, our 10th year!
Secure your spot here: https://bsidesyeg.org/SponsorNextYear
https://www.splunk.com
https://www.linkedin.com/company/splunk/
#BSides #BSidesEdmonton #BSidesYEG #YEG #Infosec #informationsecurity #CyberSec #CyberSecurity
Google DocsBSides Edmonton 2027 Sponsor ApplicationBSides Edmonton is back for it's 10th year!
Building on the success of our prior events, we are asking for sponsors to be part of the team to deliver another first-rate cybersecurity conference in Edmonton. Alberta. We are a community-driven, non for profit event.
Date: Monday September 13 & Tuesday September 14, 2027
Location: TBA
If your organization wants to: Connect directly with the cyber
