N4D Mesh Controller is an active Linux malware campaign that exploits exposed MCP servers and other internet-facing services to steal credentials, move laterally, persist, and maintain command-and-control. Datadog Security Research confirmed a newer loader-to-agent chain, rotated infrastructure, and direct runtime evidence that the 33.8-go-titan agent enumerates MCP tools, invokes execute_command, and reports results back to its controller. #N4D #MCP #33.8-go-titan #cdnorigin.net #209.99.186.235
Aztec Software in Mexico was targeted by direwolf ransomware, disrupting operations by encrypting files tied to its engineering software environment. The attack caused data loss and operational downtime, impacting Mexico #Mexico
NorthStar, a CA-based Enterprise Resource Planning organization, was targeted by the direwolf ransomware operation, resulting in disruption of its ERP environment and encrypted business data. The incident affected NorthStar’s operations in #Canada
Interim HealthCare [Head office] in the US reported a data breach after a ransomware attack attributed to the anubis threat actor at a major healthcare franchise headquarters. The incident impacted United States #UnitedStates
Sakura Internet disclosed that attackers breached its customer management system on August 9, 2026, potentially affecting up to 1,360,563 customer accounts and exposing contract agreements plus personal and corporate data. The company said the incident involved malware and unauthorized logins, but it was not a ransomware attack and no confirmed data…
Two U.S. senators are pressing TikTok for answers after reports alleged the company disabled safety features for some users to study the impact on engagement, including minors. The controversy centers on internal testing tied to harmful content exposure and has renewed scrutiny of TikTok’s practices amid broader concerns over child safety…
A forum user named Satanic allegedly offered Wrappiness.co’s customer database for sale, claiming it contains 3 million order records and 115 administrator accounts. The published fields include names, emails, phone numbers, addresses, tracking numbers, and personalization details, but the claim remains unverified. #Wrappiness.co #Satanic…
A forum user calling themselves ChimeraZ allegedly leaked 43GB of data from bergerat-rent.com in the eleventh release of a numbered series, now explicitly linking the source to the BlgCloud platform. The reported material includes email content, CRM records, invoices, and financial exposure fields, but the claim remains unverified. #BergeratRent #ChimeraZ #BlgCloud…
The ransomware payload, operating under the “payload” threat actor, breached Qualiflex Datacenter (CH) and exfiltrated data from multiple organizations including HWZ-Studiengänge (fh-hwz.ch), myenb.ch, schelling.ch, kaelteringag.ch, kaeltebucher.ch, cbmswiss.ch, vitabad.ch, and ign8.ch. The stolen data was taken from these targets in Switzerland. #Switzerland
Shinyhunters has issued a final ransomware warning to Cyrus******, demanding payment by end of day 24 Aug 2026 or facing data leak and related disruptive digital impacts. Updated 20 Aug 2026, the threat states “PAY OR LEAK,” with the impacted country(s): #countryname
The ransomware claim targets the Ayuntamiento de Velilla de San Antonio, the official local government body for the municipality of Velilla de San Antonio in Spain’s Community of Madrid, responsible for public services, the municipal register, local taxes, and civic administration. The actor behind the incident is kairos. #Spain
Bitdefender uncovered SilkParasite, a China-linked espionage campaign targeting government bodies across Central Asia with seven malware families, including the newly observed DriveSilkRAT. The operation used spearphishing documents, Google Drive-based command traffic, and signs of AI-assisted malware development to hide its activity across the region. #SilkParasite #DriveSilkRAT #Bitdefender #Uzbekistan #Turkmenistan #Kyrgyzstan #Tajikistan…
Three suspected Russian cyber espionage clusters, UNC6293, UNC5976, and UNC7005, have been using legitimate authentication flows and social engineering to target academia, defense, governments, and think tanks across Europe and the U.S. Their campaigns span app password, OAuth, device code, and WhatsApp phishing, along with malware and token theft to hijack…
The Rust Project removed malicious releases of arrayref, internment, and append-only-vec after a compromised maintainer account published typosquatted dependencies that executed a remote payload during build time. The incident abused proc-macro1 to bypass normal build expectations, and the Rust Security Response Team advised developers to inspect local cargo caches and pin…
Kyle William Spitze, an original member of 764 and leader of the Harm Nation offshoot, was sentenced to 77 years in prison for producing and distributing child sexual abuse material and other coercive abuse crimes. The case exposed his role in a broader 764 network tied to The Com, as federal investigators and the FBI intensified arrests against nihilistic violent extremist groups. #764 #HarmNation #TheCom #KyleWilliamSpitze