Ransom! Gibson Area Hospital & Health Services (SEP-2026)

Tekko Enterprises, Inc. (US) reported a ransomware incident attributed to interlock, involving leaked confidential information including utility system drawings/diagrams/specifications, crane-related materials, employee personal and identifying data, security clearances/ID cards, and sensitive bids/financials, in connection with multiple U.S. defense and infrastructure contracts. The claim cites alleged security negligence and violations of the False Claims Act, DFARS, FISMA, and the Privacy Act. #UnitedStates

Read More
Notice of Data Security Incident | Bright Smile Dental Care

Bright Smile Dental Care, Ltd. disclosed a ransomware incident discovered on August 3, 2026 that affected its server, practice management system, patient record software, and dental imaging software. The company said the data was encrypted, there is no evidence of misuse, and it is offering free TransUnion credit monitoring for some patients whose Social Security numbers may have been involved. #BrightSmileDentalCare #TransUnion

Read More
Vietnamese man charged in  million ‘pig butchering’ crypto scam

A Vietnamese national, Trung Nguyen Van, was charged with money laundering for allegedly helping move more than $16 million in cryptocurrency from a pig butchering scam that targeted a victim through a fake investment platform called Triangle. Court documents say his wallets received over $53 million in illicit crypto tied to wire fraud schemes, while U.S. authorities continue to warn that pig butchering scams are driving massive losses nationwide. #TrungNguyenVan #Triangle #FBI #ScamCenterStrikeForce

Read More
Catch threats before they escalate with real-time Identity Telemetry

Identity governance alone is no longer enough to defend modern enterprises, as attackers exploit cloud apps, external accounts, and increasingly sophisticated phishing and AI-driven attacks. tenfold combines identity governance, data access governance, and real-time event auditing to help organizations detect suspicious identity activity and respond faster. #tenfold #Windows #ActiveDirectory #EntraID

Read More
Automated AI agent used to breach cybersecurity nonprofit DIVD

The Dutch Institute for Vulnerability Disclosure (DIVD) said it was hit by a loud, messy AI-driven attack that appears to have used an autonomous agent after exploiting an undisclosed technical vulnerability. The investigation is still ongoing, with DIVD notifying authorities and planning to share more details later while warning other potential victims. #DIVD #NCSC #AutoriteitPersoonsgegevens

Read More
Reco Raises  Million for Agentic Security

Reco has raised $55 million in a strategic funding round led by AT&T Ventures, bringing its total funding to $140 million. The company helps organizations visualize and control AI agents’ identities, permissions, data access, and risky integrations across platforms like OpenAI, Anthropic, Microsoft Copilot, Salesforce, ServiceNow, and Workday. #Reco #AT&TVentures #OpenAI…

Read More
RemoteThreat Launches With  Million for Offensive Operations Platform

RemoteThreat has emerged from stealth with $7 million in pre-seed funding to launch an offensive operations platform for enterprise and critical infrastructure red teams, US government mission teams, and vetted defense partners. Built by former IBM X-Force red team leaders Chris Thompson and Shawn Jones, the platform combines mission planning, C2,…

Read More
Beware of Phishing Emails That Disguise Themselves as Project Material Purchase Requests

ASEC reported phishing emails impersonating employees of a Korean company and luring victims into opening a malicious XLS file that abuses CVE-2017-0199 to fetch an HTA payload, then a steganographic PNG-delivered loader and finally Remcos RAT. The attack uses layered execution via WMI and obfuscated PowerShell to deploy the malware and…

Read More
Ransom! Gibson Area Hospital & Health Services (SEP-2026)

The ransomware claim targets BCX (Business Connexion) at www.bcx.co.za in South Africa (ZA), attributed to threat actor incransom, and alleges a total leak of 500 GB across 4,224,088 files and 596,613 folders, including source code and confidential technical documentation. The exfiltrated materials include six fully functional business applications and numerous integration libraries/modules, along with claims that multiple vulnerabilities exist in current versions of the affected systems, impacting #SouthAfrica.

Read More
Kiteworks lifts shutdown advisory after ‘credible threat intelligence’ from federal authorities

Kiteworks resumed normal operations after a precautionary weekend shutdown triggered by credible federal threat intelligence, during which customers were asked to take production systems offline. The company also identified and patched a previously unknown critical flaw in Advanced Forms, with no signs of exploitation, while noting its broader file transfer and encryption products were unaffected. #Kiteworks #AdvancedForms #Mandiant #Accellion

Read More
Cybersecurity News | Daily Recap [28 Sep 2026]

Daily Recap, major incidents and patching updates dominated today’s security news: a reported Titan JWT signature flaw enabled access to 17 trillion analytics rows at Microsoft, while Citrix confirmed two NetScaler RCE zero-days were exploited and CISA ordered federal agencies to patch by Wednesday. Meanwhile, Google warned that ShinyHunters is targeting Oracle PeopleSoft environments, and Cloudflare addressed a cross-tenant Containers vulnerability that could expose customer data across accounts.
#Titan #Microsoft #NetScaler #Citrix #CISA #Cloudflare #Containers #ShinyHunters #Oracle #PeopleSoft

Read More