[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongMalware & Ransomware
Ivanti Zero-Day Exploited Before Patch Release
Ivanti's internal discovery of a zero-day vulnerability in June didn't stop attackers from exploiting it in the wild by October 1, highlighting a disturbing gap in patch protection. Researchers uncovered a chain of three zero-day flaws being used to breach Ivanti Connect Secure authentication and execute remote code.
Ransomware Attacks Target Victims' Families
Imagine receiving a mysterious package on your doorstep, complete with creepy nesting dolls and regional souvenirs, just because you're investigating a cyberattack - it's a chilling reminder that ransomware attackers will stop at nothing to intimidate their victims. This kind of personal intimidation is just one tactic used by groups like Russia's Midnight Blizzard to terrorize not just their targets, but their families too.
Ivanti Zero-Days Exploited for Root Access
Hackers are on the loose, exploiting three Ivanti zero-day vulnerabilities to gain root access to sensitive systems - and they don't even need a login to do it. This alarming exploit chain allows attackers to run commands with full system privileges, putting organizations at serious risk.
AI Models Expose Vulnerability to Self-Propagating IoT Botnets
Small AI models could soon spread like digital wildfire, replicating themselves across internet-connected devices like smart ovens and Android TVs to form autonomous botnets that are almost impossible to shut down. This emerging threat, dubbed an AI worm, could become a self-propagating menace within months.
Ivanti Discloses Zero-Day Exploited in Targeted Attacks
A high-severity zero-day vulnerability in Ivanti Connect Secure appliances is being exploited in targeted attacks, allowing remote attackers to execute arbitrary commands without user interaction. This authentication bypass flaw, tracked as CVE-2026-104935, affects several ICS versions and requires immediate patching and mitigation.
MFA Gaps Leave Organizations Exposed to Credential Attacks
In just seven minutes, a hacker exploited a vulnerable account lacking multi-factor authentication, gaining access to sensitive data and nearly pulling off a devastating ransomware attack. This alarming incident highlights the critical importance of robust security measures to prevent credential attacks.
French Supermarkets Hit by Cyberattacks on Refrigeration Systems
French supermarkets are reeling from a wave of devastating cyberattacks that crippled their refrigeration systems, causing temperatures to soar as high as 122°F and spoiling food across hundreds of stores. The disruption hit major chains like Intermarché, Carrefour, Monoprix, and Coopérative U, with some stores even reporting fires.
Android Phones Expose Users to Malware-Backed Residential Proxy Networks
Malware lurking in the firmware of low-cost Android phones has been found communicating with the same servers as 13 malicious apps on Google Play, putting users at risk of being roped into a massive residential proxy network. This sneaky campaign, tracked as "Midnight Mimosa," has the potential to compromise a wide range of devices.
Securing AI Data Takes Priority Over Slowing Development
As AI continues to advance, a pressing concern has emerged: securing AI data has taken center stage, even if it means slowing down development. The recent Hugging Face sandbox breakout serves as a stark reminder of the risks, highlighting the urgent need for robust AI safety and cybersecurity measures.
AI Systems Expose Infrastructure to Nightmare Attacks
AI systems are capable of unleashing devastating nightmare attacks on our infrastructure, and the alarming truth is that we're woefully unprepared. The threat is real, and it's only a matter of time before we face the consequences.
Atlassian Flaw Exploited in Wild Amid Security Software Scrutiny
Hackers sprang into action just two hours after technical details were released, exploiting a critical Atlassian flaw that puts multiple Data Center products at risk. This rapid attack highlights the shrinking window for defence in today's threat environment.
Leaked Files Expose Luna Moth Ransomware Group's Tactics
Newly leaked files from an anonymous source reveal the inner workings of the notorious Luna Moth ransomware group, exposing a sophisticated data-extortion business that thrives on manipulating trust. According to Check Point's analysis, this group's tactics are far more complex and sinister than your average ransomware crew.
Ransomware Gang Targets MoneyGram in Alleged Breach
Ransomware group The Gentlemen claims to have breached financial services giant MoneyGram, which boasts 60 million active customers, but the company has yet to confirm the incident. With no concrete evidence or data samples provided, the extent of the alleged breach remains unclear.
Danfoss Controllers Targeted in Cyberattack on French Supermarkets
A cyberattack has hit several French supermarkets, forcing refrigerators to undergo emergency defrost cycles and putting fresh food at risk after hackers hijacked Danfoss refrigeration controllers. The attackers exploited older software versions to trigger the automatic defrost function, causing temperatures to rise in stores nationwide.
AvisLoader Exposes New Evasion Tactics in Windows Malware Attacks
Meet AvisLoader, a sneaky new Windows malware loader that's changing the game with its clever evasion tactics and encrypted communication methods. It starts with a convincing ClickFix page that tricks victims into pasting a malicious command into their terminal.
Ledger Uncovers Unauthorized Hardware Implant in CryptoBilis-Sold Wallets
If you bought a Ledger wallet from CryptoBilis in the last 90 days, don't set it up yet - Ledger's investigating reports of stolen funds linked to devices sold by this reseller. Consider moving your assets to a new Ledger device if you've already set one up.
[SPONSOREDNUBIVANCE]
Nobody's watching your logs at 2 AM.
Full SOC coverage without building one. Nubivance deploys and manages Rapid7 InsightIDR and MDR for organizations that need detection and response, not another dashboard.
Get coverage
Cyber-Attack Disrupts French Supermarket Refrigeration Systems
A cyber-attack has hit French supermarket chain Coopérative U, disrupting refrigeration systems across multiple stores and threatening the freshness of food supplies. The company is racing against time to restore operations, with the CEO vowing a swift resolution and a thorough investigation into the unprecedented incident.
Ransomware Groups Exploit Palo Alto VPN Flaw Despite Patch Release
Ransomware groups are actively exploiting a patched vulnerability in Palo Alto VPNs, allowing them to masquerade as legitimate remote workers and evade detection until they strike. This sneaky tactic enables hackers to steal credentials, move laterally, and deploy ransomware, causing devastating consequences.
Attackers Exploit Bricksforge WordPress Flaw for Unauthenticated RCE
A critical flaw in the Bricksforge WordPress plugin, rated CVSS 10.0, allows hackers to upload and execute malicious code on vulnerable sites without needing login credentials. This gaping security hole is being actively exploited, putting sites at risk of remote code execution.
CyberXero Exploits AI in Dual-Pronged Ukraine Cyberattack Campaign
Meet CyberXero, a Russian-speaking cyber culprit who's been wreaking havoc in Ukraine with a sneaky two-pronged attack campaign that's been flying under the radar since at least July 2026. Over 628,000 records of Ukrainian individuals have already been compromised in this AI-powered cyberattack spree.
Malware Breach Exposes 8.6 Million Karaoke Records
A massive malware breach has hit Daiichi Kosho, Japan's largest karaoke system maker, exposing a staggering 8.6 million customer records and 93,000 employee details, including sensitive personal info like names, birthdates, and contact numbers. The breach occurred when a contractor's system was infected with malware.
FBI Arrests Ransomware Negotiator in ShinyHunters Probe
In a major breakthrough in the ShinyHunters ransomware probe, the FBI has arrested a key player - a ransomware negotiator - in Pennsylvania, dealing a significant blow to the group that's extorted over $70 million from victims so far this year. The suspect, Edward Dobrovsky, faces charges of conspiracy and interference with commerce by threats.
Chinese Hacker Exploits AI Tools in South Korean Bank Cyberattacks
A Chinese hacker recently unleashed a targeted cyberattack on South Korea's financial sector, leveraging a cutting-edge AI-powered penetration testing suite called ARTEX alongside clever Claude agents to breach defenses. The sophisticated attack used multiple AI tools, including DeepSeek and Grok, to outsmart security measures.
Hackers Exploit Bing Redirects in Google Ads to Spread ClickFix Malware
Malicious actors have found a sneaky way to spread ClickFix Malware by exploiting Bing redirects in Google Ads, tricking macOS users into downloading a fake Claude installer that secretly installs harmful commands. This clever tactic, dubbed Adception, uses legitimate search-ad and redirect infrastructure to evade security checks.