President Donald Trump named Jay Clayton to lead a new government task force on artificial intelligence called the “Super Intelligence Force.” The group will coordinate federal efforts and engage with industry, consumers, and critical infrastructure providers to advance US leadership in AI. #JayClayton #DonaldTrump #SuperIntelligenceForce…
![Cybersecurity News | Daily Recap [03 Oct 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [03 Oct 2026]")
Daily Recap, The coverage highlights how agentic AI is speeding up both attack and defense, alongside emerging legal exposure tied to AI-driven intrusions and ongoing investment in keeping AI agents from “internet misadventures.” It also reports critical fixes across GitLab’s AI Gateway and Fortra/Dell products, while noting espionage tradecraft including the Antino backdoor and targeted phishing that impersonated the White House and Anthropic. #Microsoft #GitLab #Fortra #BoKS #Dell #Dell CSM #Antino #Outlook #OneDrive #Pegasus #Pegasus #Vicksburg #Warlock #SharePoint #Frontline Education #ALPR #Tren de Aragua #EDR #CFAA #Anthropic
MorseLife Health System, Inc. in the US reported data theft of 344 GB by the Booba Project, associated with a ransomware claim. The incident involved stolen data from the healthcare organization in the United States. #UnitedStates
Last week’s security news was dominated by active exploitation of multiple zero-days in Citrix NetScaler, Apple, Cisco SD-WAN, and FortiMail, alongside a major breach of OpenInfra Europe’s JFrog Artifactory and a reported FBI portal compromise linked to ShinyHunters. The roundup also highlighted growing AI-related risks, including malicious Custom GPT abuse, leaked company screenshots from coding agents, and research showing AI systems can expose secrets and weaken security controls. #Citrix #NetScaler #Apple #Cisco #FortiMail #OpenInfraEurope #JFrogArtifactory #ShinyHunters #DIVD #KillSec
TA419, a China-nexus espionage group, has been using credential phishing campaigns to target AI experts at U.S. think tanks, universities, and legal organizations by impersonating economists, AI policymakers, and a prominent Anthropic employee. The group uses shortened URLs, multi-stage redirection, and a Frameless BitB adversary-in-the-middle setup to steal Microsoft credentials and…
A suspected ShinyHunters member known as “Rey” has allegedly been detained in Jordan and is reportedly cooperating with the FBI to identify other members of the group. The case follows fresh arrests and revelations about ShinyHunters’ attacks on organizations including the FBI portal, Cl0p’s darknet site, and more than 140 victims,…
Westrop Primary & Nursery School (westropprimaryschool.co.uk) in Highworth, Swindon, GB, reported a ransomware incident attributed to the threat actor thegentlemen, impacting school operations. #UnitedKingdom
Mandurah State Emergency Service (mandurahses.org.au) in Australia is reported as being targeted by ransomware linked to the threat actor thegentlemen, disrupting operations for a volunteer emergency rescue unit providing 24/7/365 services in WA. The incident claim implicates Australian systems and services, with potential impact on the organization’s responders and cadet support activities. #Australia
Rotamac Inc. (rotamac.ca) in Canada was reportedly targeted by ransomware by threat actor thegentlemen, impacting operations tied to its industrial equipment distribution and e-commerce services. The incident affected the victim in #Canada
Hospital de la Santa Creu i Sant Pau (Spain) reported a ransomware incident attributed to thegentlemen, potentially disrupting hospital operations and services. As a major Barcelona academic medical center with extensive research and clinical trial activity, any such impact would affect healthcare delivery across Spain. #Spain
Thegentlemen ransomware group compromised Zelham (zelham.com) and targeted systems of the U.S. hospitality renovation general contractor, seeking to extort through data theft and disruption. Zelham, Inc., headquartered in Boise, Idaho, with operations across multiple U.S. states, was affected in #unitedstates
Storm ransomware targeted Step By Step, Inc. (US-based nonprofit human services organization) disrupting community-based support services across residential, behavioral health, autism, and in-home programs for individuals with intellectual and physical disabilities and related needs. The incident impacted United States #UnitedStates
WOOSHIN SAFETY SYSTEMS CO LTD (KR) reported a ransomware incident attributed to the threat actor “thegentlemen,” impacting its wooshinsys.co.kr and related online assets. The claim indicates disruption to operations and services in South Korea. #SouthKorea
A suspected ShinyHunters member known as “Rey,” identified as Saif al-Din Khader, has reportedly been detained in Jordan and is now cooperating with the FBI and other law enforcement agencies. The reported arrest comes amid intensified action against ShinyHunters following claims of an FBI breach, as the group’s infrastructure appeared to go offline even while a new data leak site later surfaced. #ShinyHunters #SaifalDinKhader #Rey #FBI #Jordanianauthorities
Warlock, also known as Gold Salem, Longlegs, and Storm-2603, is still exploiting Microsoft SharePoint vulnerabilities to attack organizations in Portuguese- and Spanish-speaking countries across Europe, Africa, and Latin America. The group has targeted critical infrastructure, government, and education sectors while using web shells, BYOVD, legitimate tools, and SYSVOL staging to disable…