⚡ ⚡ ⚡ GLOBAL INFOSEC INTELLIGENCE WIRE ⚡ ⚡ ⚡

CYBER DISPATCH

🟢 INFOCON: GREEN | CISA KEV CATALOG: 1,734 KNOWN EXPLOITED VULNERABILITIES | LATEST KEV: CVE-2020-29583 (Zyxel Multiple Products Use of Hard-...)
UPDATED: WEDNESDAY, OCTOBER 07, 2026 — 09:45 PM CDT | CURATED BY AGY ENGINE (MULTI-SOURCE INFOSEC DEDUPLICATION)
BLEEPINGCOMPUTER • THE HACKER NEWS • KREBS ON SECURITY • DARK READING • SECURITYWEEK • SANS ISC • THE RECORD • CYBERSCOOP • CISCO TALOS • SCHNEIER • CISA.GOV
UNPATCHED CRITICAL LMCACHE FLAW LETS UNAUTHENTICATED ATTACKERS RUN CODE REMOTELY... [THN]
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server without logg...
• MICROSOFT EXCHANGE FLAW LETS AUTHENTICATED ATTACKERS READ OTHER USERS' MAILBOXES... [THN]
• HACKERS EXPLOIT CRITICAL ATLASSIAN FLAW AFTER PUBLIC POC RELEASE... [BLEEPINGCOMPUTER]
• FBI REMOVES ACCENTURE CONTRACTOR AFTER PATCH FAILURE LED TO SHINYHUNTERS BREACH... [THN]
THREAT INTEL • ZERO-DAYS • RANSOMWARE • EXPLOITS
⚡ WEEKLY RECAP: NETSCALER AND FORTIMAIL 0-DAYS, AI CODING LEAKS, SPECTRE V2 AND RANSOMWARE ARRESTS... [THN]
QILIN RANSOMWARE SUSPECT ARRESTED IN JAPAN, EXTRADITED TO GERMANY... [SECURITYWEEK]
• Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use... [TALOS]
KITEWORKS & CITRIX INCIDENTS SHOW CHALLENGES OF ZERO-DAY RESPONSE... [DARK READING]
• Citrix discloses third actively exploited NetScaler zero-day in less than a week... [CYBERSCOOP]
ALLEGED KILLSEC RANSOMWARE MASTERMIND A 16-YEAR-OLD... [DARK READING]
HITACHI ENERGY REB500... [CISA]
• Hitachi Energy Asset Suite... [CISA]
• Hitachi Energy SOI... [CISA]
• Hitachi Energy RTU500... [CISA]
FBI: ONGOING FORTIBLEED ATTACKS LOCK OUT FORTIGATE VPN ADMINS... [BLEEPINGCOMPUTER]
• Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks... [CYBERSCOOP]
SWIFT BANKING & GOVERNMENT MIDDLEWARE ENABLES RCE... [DARK READING]
CHINA-NEXUS UAT-11587 TARGETS GOVERNMENT AND POLICY ORGANIZATIONS ACROSS ASIA WITH ANTINO BACKDOOR... [TALOS]
RANSOMWARE HAS A NEW TARGET. IS YOUR BACKUP READY... [BLEEPINGCOMPUTER]
CISA ADDS ONE KNOWN EXPLOITED VULNERABILITY TO CATALOG... [CISA]
ANDROID’S OCTOBER 2026 UPDATES PATCH 25 VULNERABILITIES... [SECURITYWEEK]
• Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities... [TALOS]
POELLM MALWARE INFECTS EXPOSED AI SERVERS IN CRYPTOMINING ATTACKS... [BLEEPINGCOMPUTER]
• PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet... [THN]
SONICWALL WARNS OF MAX SEVERITY SSRF FLAW IN SMA1000 GATEWAYS... [BLEEPINGCOMPUTER]
• SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances... [THN]
ATLASSIAN PATCHES CRITICAL VULNERABILITY AFFECTING 8 PRODUCTS... [SECURITYWEEK]
ARIZONA COURTS SAY HACKERS STOLE INFO ON MORE THAN 1.3 MILLION PEOPLE... [THE RECORD]
ADVANTEST CONFIRMS PERSONAL INFORMATION STOLEN IN RANSOMWARE ATTACK... [BLEEPINGCOMPUTER]
HACKERS EXPLOIT 32 ZERO-DAYS ON FIRST DAY OF PWN2OWN IRELAND... [BLEEPINGCOMPUTER]
GOOGLE PAUSES OSS PRODUCT BUG BOUNTY REWARDS AFTER SURGE IN INVALID AUTOMATED REPORTS... [THN]
NATION-STATE • CRITICAL INFRASTRUCTURE • DEFENSE • CISA
CYBER EXPERTS CALL ON CISA TO CREATE MANDATORY FEDERAL OT RULES... [THE RECORD]
CHINESE HACKERS IMPERSONATE US OFFICIALS FOR AI CYBER ESPIONAGE... [DARK READING]
WARLOCK RANSOMWARE HITS LARGE SPANISH, PORTUGUESE ORGS... [DARK READING]
REALTEK JUNGLE SDK EXPLOIT ATTEMPTS DELIVER CLING BOTNET WITH STUN-BASED C2... [THN]
FBI PROBES SERVICE SELLING 153M+ DRIVERS LICENSES... [KREBS]
CISA MALCOLM... [CISA]
JOHNSON CONTROLS EASYIO FG... [CISA]
• Johnson Controls EasyIO Neo Series EC and CW Controllers... [CISA]
• Johnson Controls EasyIO Neo Series EC and CW Controllers... [CISA]
GEORGIA POWER, ALABAMA POWER DATA BREACH HITS 400,000 ACCOUNTS... [SECURITYWEEK]
CLINGSTUN TURNS VULNERABLE IOT DEVICES INTO PROXY NODES... [DARK READING]
MALICIOUS LINUX IMPLANTS MIMIC ASIAN MAIL SECURITY PRODUCTS... [DARK READING]
RUSSIA'S STAR BLIZZARD DITCHES CLICKFIX TO WIDEN PHISHING NET... [DARK READING]
FBI, FRENCH AUTHORITIES SEIZE DEEPFAKE CSAM-FOR-SALE WEBSITES... [CYBERSCOOP]
HERE’S HOW EXPERTS THINK CISA SHOULD TELL AGENCIES TO PROTECT OT... [CYBERSCOOP]
SHOULD YOU CARE ABOUT AN “AI SLOWDOWN?”... [TALOS]
WE'VE GOT ONE WORD FOR IT, AND IT'S USUALLY THE WRONG ONE... [TALOS]
NINJA FORMS PLUGIN FLAW EXPLOITED TO HACK WORDPRESS SITES... [BLEEPINGCOMPUTER]
WHAT IS AGENTIC PENTESTING? WHAT IT PROVES, AND WHERE IT STOPS... [THN]
100+ COMPROMISED WEBSITES USE FAKE CLOUDFLARE CHECKS TO DELIVER LUNEXSTEALER... [THN]
DATA BREACHES • AI SECURITY • PRIVACY • RESEARCH
HACKERS HIJACK GOOGLE DOMAINS AFTER BREACHING CCTLD REGISTRIES... [BLEEPINGCOMPUTER]
• Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains... [THN]
ADVANTEST DISCLOSES DATA BREACH MONTHS AFTER RANSOMWARE ATTACK... [SECURITYWEEK]
ONE BREACH, PLEASE, AND MAKE NO MISTAKES... [TALOS]
FBI WARNS FORTIBLEED REMAINS ACTIVE AFTER AMASSING 86,644 FORTINET DEVICE CREDENTIALS... [THN]
LINUX BACKDOORS IMPERSONATE EMAIL SECURITY TOOLS TO EVADE DETECTION IN KOREA AND TAIWAN... [THN]
ASOS CONFIRMS DATA BREACH AFTER “HACKED” IN-APP NOTIFICATIONS... [BLEEPINGCOMPUTER]
• ASOS Confirms Cyberattack, Data Breach... [SECURITYWEEK]
CRITICAL HEALTHCARE SYSTEMS AREN'T QUANTUM-READY... [DARK READING]
ISC STORMCAST FOR THURSDAY, OCTOBER 8TH, 2026 HTTPS://ISC.SANS.EDU/PODCASTDETAIL/10128, (THU, OCT 8TH)... [SANS ISC]
• ISC Stormcast For Wednesday, October 7th, 2026 https://isc.sans.edu/podcastdetail/10126, (Wed, Oct 7th)... [SANS ISC]
• ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)... [SANS ISC]
• ISC Stormcast For Monday, October 5th, 2026 https://isc.sans.edu/podcastdetail/10122, (Mon, Oct 5th)... [SANS ISC]
FAKE CHATGPT, GEMINI SITES STEAL ADVERTISING ACCOUNTS, MFA CODES... [BLEEPINGCOMPUTER]
• Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes... [THN]
ANTHROPIC EXPANDS CLAUDE ACCESS FOR VETTED CYBER TEAMS AS GLASSWING FINDS 129,000 FLAWS... [THN]
• Anthropic Gives Vetted Defenders Fewer Claude Guardrails... [DARK READING]
WIKIMEDIA SAYS OPENAI AGENTS TRIED TO COMPROMISE ETHERPAD AND USE WIKI TOOLS AS PROXIES... [THN]
• Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies... [SECURITYWEEK]
RANSOMWARE RECOVERY CEO CHARGED OVER SECRET RANSOM PAYMENTS... [BLEEPINGCOMPUTER]
US POSTS $10 MILLION REWARD FOR ACCUSED CHINESE ‘HAFNIUM’ HACKER... [THE RECORD]
EIGHT MALICIOUS NPM PACKAGES DOWNLOADED 40,767 TIMES DELIVER OVERLORD RAT AND STEALER... [THN]
THE SIXTH VOICE OF THE CISO DATA SHOWS CYBER RISK HAS MOVED INSIDE THE WORKFLOW... [THN]
LIBREOFFICE AND OPENOFFICE FLAWS LET MALICIOUS SPREADSHEETS RUN CODE WITHOUT MACRO WARNINGS... [THN]
WELCOME TO THE JUNGLE: WHAT WE FOUND INSIDE 15,465 PUBLIC MCP SERVERS... [THN]
DENMARK SAYS ATTACKERS ACCESSED CPR DATA FOR 8.8 MILLION PEOPLE VIA COMPANY ACCOUNT... [THN]