Threat actor N0n claims it compromised managed IT provider services and obtained complete client financial records for Chibitek in the US, including accounting, inventory, and payroll data, as well as client network credentials and internal company documents. The claim is labeled “NOT PAID — EXPOSED: leak 2026-10-11 04:43 UTC,” impacting #UnitedStates
The FBI has arrested another suspected co-conspirator linked to ShinyHunters following the group’s alleged breach of the FBI jobs portal and theft of sensitive data on agents and applicants. Authorities say the incident stemmed from a contractor’s failure to apply a security patch on a third-party platform, while earlier arrests in…
Company #20, a cannabis operator in Michigan, USA, reported a ransomware incident attributed to threat actor N0n, with pending exposure indicating data publication on 2026-10-13 09:40 UTC. The attacker’s actions resulted in unauthorized access and threat of disclosure of company data. #UnitedStates
There is an alleged ransomware incident involving KP Industries in the UK attributed to the threat actor nightspire. The reported activity is said to have impacted systems and data, with the impacted country listed as #UnitedKingdom
nightspire ransomware activity was claimed against MGT Lojistik A,Ş in Turkey (TR), though specific details were not verified in the provided context. The incident impact is attributed to #Turkey
![Threat Research | Weekly Recap [11 Oct 2026]](https://www.hendryadrian.com/tweet/image/WeeklyRecap.png "Threat Research | Weekly Recap [11 Oct 2026]")
Cybersecurity Threat Research ‘Weekly’ Recap. The report highlights increasing abuse of AI agents and MCP-related access paths, including attempts to validate stolen AWS keys for Amazon Bedrock and token probing tied to Claude, alongside broader social engineering such as the WhatsApp “ballerina” scam. It also covers ransomware/extortion evolution with IronChain acting like a wiper, The Gentlemen ecosystem theft by Azazel, state-aligned intrusions like Iran-backed CL-STA-1178’s Blinder Tunnel targeting, and stealth malware such as SectopRAT embedded in legitimate software, while noting Kubernetes RBAC risks from built-in principals.
#MCP #AmazonBedrock #Claude #IronChain #Azazel #ShinyHunters #CL-STA-1178 #BlinderTunnel #ShelbyLoaderV2 #Blackwood #SectopRAT #systemanonymous #systemauthenticated
BrainCipher ransomware allegedly targeted huntcompanies.com in the US, causing disruption through unauthorized access and encryption of files. Impacted country(s): #UnitedStates
Company #24, a smart building and surveillance integration provider in California, USA, is claimed by threat actor N0n to have suffered ransomware activity, with potential exposure of data published on 2026-10-14 18:00 UTC. The alleged incident is described under [PENDING EXPOSURE], with impacted systems and information at risk. #CaliforniaUSA
Emperador claims to have stolen 1.2M contact records, 245K carrier profiles with EIN/SSN, 57K bank accounts, 334K document URLs, and 4.5M carrier registry entries from Spelman Logistics’ MVMNT TMS, and to have compromised partner systems including ALG Canada Inc, Line Transportation Inc, Maverick Acquisition Ventures Inc, Reliable Freight Solutions, and Rhode Sense. The group demands a $500,000 BTC/XMR ransom and threatens partner disruption, listing impacted countries as #countryname.
Company #21, a neurology practice in New South Wales, Australia, reported a ransomware incident attributed to N0n with [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC] noted by the threat actors. #NewSouthWalesAustralia
Company #22 in Florida, USA was targeted by threat actor N0n with ransomware that encrypted files and triggered a pending exposure of stolen data scheduled for 2026-10-14 12:00 UTC. The ransomware incident is reported to affect #UnitedStates.
Company #23 reported ransomware targeting its smart building & surveillance integration in California, USA, attributed to the N0n threat actor, with a pending exposure window scheduled for 2026-10-14 18:00 UTC. The incident is expected to result in unauthorized data exposure, pending publication. #UnitedStates
![Cybersecurity News | Daily Recap [10 Oct 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [10 Oct 2026]")
Daily Recap, [No news items were provided.] Please share the list of news items so I can write a 2-sentence summary and add specific hashtags for the named malware, threat actors, and affected organizations/systems.
Company #28 in the US reports ransomware activity attributed to threat actor N0n, with data publication scheduled for 2026-10-14 12:00 UTC. The incident centers on Florida-based architecture and design operations, with potential exposure of sensitive information. #UnitedStates
Company #29 in the US is claimed to have been targeted by the N0n ransomware group, with disruption allegedly tied to smart building and surveillance integration in California. The attacker is described as threatening exposure of stolen data ahead of the scheduled 2026-10-14 publication, with the impacted country(s) #UnitedStates