MI5 has warned that more than 100 U.K.-linked academics may have helped China’s Ministry of State Security strengthen its intelligence capabilities through research funded by CGTRI, which the agency assesses is a front company for the MSS. The alert urges U.K. institutions to review collaborations with CGTRI and warns that continued…
Allied Machine & Engineering, a US precision cutting tool manufacturer, reported a ransomware incident attributed to the Storm threat actor. The company, headquartered in Dover, Ohio, produces advanced holemaking and finishing tooling for metalworking industries and was impacted in the United States. #UnitedStates
Wallstreet ransomware actors claim they compromised the Saudi network of the China Railway Construction Corporation Saudi Branch / Sama Construction consortium, targeting the main contractor work for the Jeddah Central Stadium for FIFA World Cup 2034 in Saudi Arabia. They report exfiltrating 17 TB and 1.5M files, including contract, dispute/suspension documentation, IFC design files, supplier bid data, and personal data for 150,000+ employees. #SaudiArabia
Wallstreet ransomware reportedly targeted St. Francis Healthcare Systems of Hawaiʻi, a Catholic, nonprofit healthcare organization serving Hawaiʻi families since 1927, disrupting operations and access to critical systems. The impacted country(s) is #UnitedStates.
The Technical University of Denmark (DTU) says attackers used compromised credentials to access its DTUBasen identity and access management system and potentially exposed data for up to 200,000 users. The breach may have revealed CPR numbers, names, addresses, profile photos, and next-of-kin details, prompting warnings about identity fraud and targeted phishing. #DTU #DTUBasen #CPRnumbers
![Cybersecurity News | Daily Recap [02 Oct 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [02 Oct 2026]")
Daily Recap, Critical patch activity highlighted a FortiMail zero-day reportedly exploited in the wild, along with Dell CSM issues that could grant admin privileges and Kiteworks code injection flaws; WordPress malware also demonstrated self-repair behavior by rebuilding from files, database, and shared memory after cleanup. On the threat front, autonomous AI agents attempted SQL injection against U.S. and Canadian government sites, while law enforcement actions targeted the KillSec ransomware operation and officials reported additional cloud and identity abuse spanning hijacked social accounts and a MetaMask incident.
#FortiMail #FortiMailWrites #DellCSM #Kiteworks #WordPress #AutonomousAIAgents #SQLInjection #KillSec #MicrosoftX #MetaMask #Warlock #SharePoint #GCP #YAML #Osavul
Cybersecurity is evolving to keep pace with cloud expansion, AI, distributed systems, and the growing complexity of modern digital environments. The report shows how organizations are shifting toward continuous visibility, stronger identity control, faster remediation, and unified protection across identities, endpoints, cloud, and connected devices. #KeeperSecurity #Cribl #Automox #Nisos #SurfAI #AdaptiveSecurity…
Fortra has patched eight vulnerabilities in Core Privileged Access Manager (BoKS), including three critical flaws that could lead to authentication bypass, command injection, and remote memory corruption. The issues affect BoKS Manager deployments, with notable risks tied to Active Directory service account management and network-accessible interfaces such as BCC and WSI….
doxx.net has raised $38 million in a Series A round led by Andreessen Horowitz to expand its Agentic Defined Networking platform for humans and AI agents. The platform combines private, serverless networking with DNS-level threat protection to block malicious destinations, phishing sites, and malware before connections are made. #doxxnet #AndreessenHorowitz #AgenticDefinedNetworking…
rhysida ransomware impacted Skaff Group by encrypting 139,377 files across ~268 GB, including full HR dossiers with Lebanese national ID scans, passports, civil-status extracts, and employees’ private photo archives. The compromise also exposed banking data, payroll/payroll-module material, commerce and customer documents (including customs/export paperwork), impacting Lebanon #lebanon
Precon Marine Inc, a diversified marine contractor specializing in heavy marine construction and advanced subsea services, reported a ransomware incident allegedly carried out by threat actor netrunner. The attack resulted in disruption to the company’s operations, with impact limited to the affected country/entities. #countryname
Genesis Credit Management in the US reported a ransomware incident attributed to the qilin threat actor, resulting in disruption of its systems and data availability. The impacted country is: #UnitedStates
Aware, Inc. (US) reports a ransomware incident associated with the threat actor “thegentlemen,” impacting its biometrics identity verification SaaS operations and related workflows. The alleged intrusion is linked to the company’s online presence and the incident is reported in the United States. #UnitedStates
Storm ransomware claimed it targeted States Industries, a privately held US hardwood plywood and veneer panel manufacturer based in Eugene, Oregon. The company’s operations, products, and employees were impacted, with the claim ending in #UnitedStates
A dataset allegedly linked to the Royal Belgian Football Association is being offered for sale by the actor “RedStone,” with claims of 346,685 unique names and extensive records on players, referees, clubs, and officials. If authentic, the exposed data could enable phishing, impersonation, and other social-engineering attacks against people connected to…