Cyber Threat News

Malware 2026-10-18

Malware & phishing activity digest — 2026-10-18

453 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-18

Ransomware activity digest — 2026-10-18

23 organizations were newly listed on ransomware leak sites, with the most active groups being everest, Helix, N0n. Figures are aggregated from public leak-site

Malware 2026-10-17

Malware & phishing activity digest — 2026-10-17

379 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-17

Ransomware activity digest — 2026-10-17

74 organizations were newly listed on ransomware leak sites, with the most active groups being thegentlemen, N0n, THE SEVEN DEADLY SINS. Figures are aggregated

Vulnerability 2026-10-16

New actively exploited vulnerability: CVE-2025-61624

CVE-2025-61624 (Fortinet Multiple Products Path Traversal Vulnerability) affecting Fortinet was added to CISA's Known Exploited Vulnerabilities catalog, indicat

Vulnerability 2026-10-16

New actively exploited vulnerability: CVE-2026-102764

CVE-2026-102764 (BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability) affecting BeyondTrust was added to CISA's Known Exploited Vulnerabi

Malware 2026-10-16

Malware & phishing activity digest — 2026-10-16

426 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-16

Ransomware activity digest — 2026-10-16

45 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, iah6477, N0n. Figures are aggregated from public leak-site

Vulnerability 2026-10-15

New actively exploited vulnerability: CVE-2026-21589

CVE-2026-21589 (Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability) affecting Atlassian was added to CISA's Known Exp

Malware 2026-10-15

Malware & phishing activity digest — 2026-10-15

470 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-15

Ransomware activity digest — 2026-10-15

22 organizations were newly listed on ransomware leak sites, with the most active groups being lockbit5, akira, nightspire. Figures are aggregated from public l

Vulnerability 2026-10-14

New actively exploited vulnerability: CVE-2026-0322

CVE-2026-0322 (Palo Alto Networks PAN-OS Code Injection Vulnerability) affecting Palo Alto Networks was added to CISA's Known Exploited Vulnerabilities catalog,

Vulnerability 2026-10-14

New actively exploited vulnerability: CVE-2026-105133

CVE-2026-105133 (Ahsay AhsayCBS Improper Authentication Vulnerability) affecting Ahsay was added to CISA's Known Exploited Vulnerabilities catalog, indicating a

Vulnerability 2026-10-14

New actively exploited vulnerability: CVE-2026-76519

CVE-2026-76519 (Cisco Secure Email Gateway Relative Path Traversal Vulnerability) affecting Cisco was added to CISA's Known Exploited Vulnerabilities catalog, i

Vulnerability 2026-10-14

New actively exploited vulnerability: CVE-2026-105134

CVE-2026-105134 (Ahsay AhsayCBS Command Injection Vulnerability) affecting Ahsay was added to CISA's Known Exploited Vulnerabilities catalog, indicating active

Malware 2026-10-14

Malware & phishing activity digest — 2026-10-14

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-14

Ransomware activity digest — 2026-10-14

59 organizations were newly listed on ransomware leak sites, with the most active groups being Wallstreet, HYFLOCK, Orova. Figures are aggregated from public le

Vulnerability 2026-10-13

New actively exploited vulnerability: CVE-2026-96951

CVE-2026-96951 (Microsoft Windows Command Injection Vulnerability) affecting Microsoft was added to CISA's Known Exploited Vulnerabilities catalog, indicating a

Vulnerability 2026-10-13

New actively exploited vulnerability: CVE-2026-104935

CVE-2026-104935 (Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability) affecting Ivanti was added to CISA's Known Exploited Vulnerabilities cat

Malware 2026-10-13

Malware & phishing activity digest — 2026-10-13

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-13

Ransomware activity digest — 2026-10-13

71 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, interlock, thegentlemen. Figures are aggregated from public

Malware 2026-10-12

Malware & phishing activity digest — 2026-10-12

437 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-12

Ransomware activity digest — 2026-10-12

21 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, qilin, rhysida. Figures are aggregated from public leak-site

Malware 2026-10-11

Malware & phishing activity digest — 2026-10-11

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-11

Ransomware activity digest — 2026-10-11

29 organizations were newly listed on ransomware leak sites, with the most active groups being Majinahanashi, qilin, thegentlemen. Figures are aggregated from p

Malware 2026-10-10

Malware & phishing activity digest — 2026-10-10

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-10

Ransomware activity digest — 2026-10-10

82 organizations were newly listed on ransomware leak sites, with the most active groups being thegentlemen, nightspire, qilin. Figures are aggregated from publ

Malware 2026-10-09

Malware & phishing activity digest — 2026-10-09

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-09

Ransomware activity digest — 2026-10-09

34 organizations were newly listed on ransomware leak sites, with the most active groups being nightspire, Eclipse, SilentRansomGroup. Figures are aggregated fr

Vulnerability 2026-10-08

New actively exploited vulnerability: CVE-2015-3306

CVE-2015-3306 (ProFTPD Improper Access Control Vulnerability) affecting ProFTPD was added to CISA's Known Exploited Vulnerabilities catalog, indicating active e

Vulnerability 2026-10-08

New actively exploited vulnerability: CVE-2021-3199

CVE-2021-3199 (ONLYOFFICE Docs Server Path Traversal Vulnerability) affecting ONLYOFFICE was added to CISA's Known Exploited Vulnerabilities catalog, indicating

Vulnerability 2026-10-08

New actively exploited vulnerability: CVE-2023-22894

CVE-2023-22894 (Strapi Cleartext Storage of Sensitive Information Vulnerability) affecting Strapi was added to CISA's Known Exploited Vulnerabilities catalog, i

Vulnerability 2026-10-08

New actively exploited vulnerability: CVE-2016-3081

CVE-2016-3081 (Apache Struts Command Injection Vulnerability) affecting Apache was added to CISA's Known Exploited Vulnerabilities catalog, indicating active ex

Vulnerability 2026-10-08

New actively exploited vulnerability: CVE-2015-5477

CVE-2015-5477 ( ISC BIND Data Processing Errors Vulnerability) affecting ISC was added to CISA's Known Exploited Vulnerabilities catalog, indicating active expl

Malware 2026-10-08

Malware & phishing activity digest — 2026-10-08

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-08

Ransomware activity digest — 2026-10-08

24 organizations were newly listed on ransomware leak sites, with the most active groups being incransom, UmBra, qilin. Figures are aggregated from public leak-

Malware 2026-10-07

Malware & phishing activity digest — 2026-10-07

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-07

Ransomware activity digest — 2026-10-07

20 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, everest, akira. Figures are aggregated from public leak-si

Malware 2026-10-06

Malware & phishing activity digest — 2026-10-06

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-06

Ransomware activity digest — 2026-10-06

51 organizations were newly listed on ransomware leak sites, with the most active groups being safepay, VYPR, BYOD. Figures are aggregated from public leak-site

Malware 2026-10-05

Malware & phishing activity digest — 2026-10-05

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-05

Ransomware activity digest — 2026-10-05

16 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, krybit, play. Figures are aggregated from public leak-site

Vulnerability 2026-10-04

New actively exploited vulnerability: CVE-2026-88779

CVE-2026-88779 (Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability) affecting Citrix was added to CISA's Kno

Malware 2026-10-04

Malware & phishing activity digest — 2026-10-04

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-04

Ransomware activity digest — 2026-10-04

19 organizations were newly listed on ransomware leak sites, with the most active groups being thegentlemen, Storm, Wallstreet. Figures are aggregated from publ

Malware 2026-10-03

Malware & phishing activity digest — 2026-10-03

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-03

Ransomware activity digest — 2026-10-03

31 organizations were newly listed on ransomware leak sites, with the most active groups being settra, krybit, Booba Project. Figures are aggregated from public

Vulnerability 2026-10-02

New actively exploited vulnerability: CVE-2026-102489

CVE-2026-102489 (Zammad GmbH Zammad Session Fixation Vulnerability) affecting Zammad GmbH was added to CISA's Known Exploited Vulnerabilities catalog, indicatin

Vulnerability 2026-10-02

New actively exploited vulnerability: CVE-2026-102490

CVE-2026-102490 (Zammad GmbH Zammad Improper Privilege Management Vulnerability) affecting Zammad GmbH was added to CISA's Known Exploited Vulnerabilities catal

Malware 2026-10-02

Malware & phishing activity digest — 2026-10-02

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-02

Ransomware activity digest — 2026-10-02

28 organizations were newly listed on ransomware leak sites, with the most active groups being incransom, genesis, akira. Figures are aggregated from public lea

Vulnerability 2026-10-01

New actively exploited vulnerability: CVE-2026-104286

CVE-2026-104286 (Fortinet FortiMail Path Traversal Vulnerability) affecting Fortinet was added to CISA's Known Exploited Vulnerabilities catalog, indicating act

Malware 2026-10-01

Malware & phishing activity digest — 2026-10-01

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-10-01

Ransomware activity digest — 2026-10-01

66 organizations were newly listed on ransomware leak sites, with the most active groups being thegentlemen, Storm, lamashtu. Figures are aggregated from public

Vulnerability 2026-09-30

New actively exploited vulnerability: CVE-2026-76504

CVE-2026-76504 (Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability) affecting Cisco was added to CISA's Known Exploited Vulnerabilities catalog, indicatin

Malware 2026-09-30

Malware & phishing activity digest — 2026-09-30

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-09-30

Ransomware activity digest — 2026-09-30

28 organizations were newly listed on ransomware leak sites, with the most active groups being BrainCipher, m3rx, lockbit5. Figures are aggregated from public l

Vulnerability 2026-09-29

New actively exploited vulnerability: CVE-2026-86950

CVE-2026-86950 (Apple Multiple Products Out-of-Bounds Write Vulnerability) affecting Apple was added to CISA's Known Exploited Vulnerabilities catalog, indicati

Malware 2026-09-29

Malware & phishing activity digest — 2026-09-29

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-09-29

Ransomware activity digest — 2026-09-29

44 organizations were newly listed on ransomware leak sites, with the most active groups being safepay, threeam, qilin. Figures are aggregated from public leak-