OpenProfiler 1.0.0 is out: an open-source JVM profiler written in Rust. CPU flame graphs, out-of-core HPROF heap analysis, SQL/HTTP/Kafka/LLM probes, a CI regression gate and an MCP server for AI agents. Apache-2.0. github.com/matusso/openprofi…
#Java #JVM #Rust #OpenSource
1
1
33
BeyondTrust Remote Support CVE-2026-102764 (CVSS 9.3, ≤26.2.3): zero-day exploited since late Aug by China-linked ARMORY CASTLE (Mandiant); in CISA KEV. SaaS patched Oct 9. On-prem: apply BT26-05-RS (pre-24.3.1: upgrade first), check for compromise.
#CVE #BeyondTrust #InfoSec
1
1
69
One hacker, an army of AI agents: NorForge watched a Chinese-speaking actor use exposed Cairn panels to hit 1,200+ sites and breach 100+, incl. Deere, SharkNinja and Cummins (per Reuters). ~23h per break-in, ~$5,000 in tokens total.
#AI #CyberSecurity #InfoSec
26
GhostAction is back: ~1,900 hijacked GitHub accounts pushed fake "security-audit" workflows to 30,000+ repos Oct 8–9, trying to pull 3,174 CI secrets (GitGuardian). GitHub blocked the runs from Oct 9.
GitHub bounty: hackerone.com/github
#GitHub #SupplyChain #DevSecOps
20
ConnectWise Cloud Backup (ex-SkyKick) breach: attackers used a stolen app secret to sign in to customer M365 tenants as the backup app, so MFA never applied. Huntress counts 162+ hit tenants. Disable app 506e08f9 (don't delete) and audit app credentials.
#M365 #SupplyChain #MSP
38
SiteGuard WAF CVE-2026-106931: OS command injection in the default-on statistics feature is exploited in the wild for root/SYSTEM on the host. Patch to 8.00 Update 5 (FreeBSD: 7.00 Update 6); save diagnostics before updating.
#CVE #WAF #CyberSecurity #InfoSec
1
35
Ransomware leak sites, Oct 12–18: 326 claimed victims (+25% w/w), 42 groups. N0n led with 84, heavy on ports & shipping, then The Gentlemen (42) and Qilin (29). US: 32% of claims. Top sector: transportation. Claims, not confirmed breaches.
#Ransomware #ThreatIntel #CyberSecurity
25
Cisco confirms active exploitation of CVE-2026-76519 (CVSS 9.8) in Secure Email Gateway: unauthenticated root via crafted email attachment when File Reputation is on. Second SEG zero-day this month. Patch AsyncOS / Content Scanner Tools now.
#Cisco #CVE #ZeroDay #CyberSecurity
1
82
CISA KEV: CVE-2026-104935 — Ivanti Connect Secure auth bypass enabling unauthenticated RCE. Exploited as a zero-day since ~Oct 3; actor chained it for root on fully patched VPNs. Patch 22.8R2.5 / 25.1.1.2+ now.
#CVE #Ivanti #CyberSecurity #InfoSec
90
burso retweeted
🔥🚒 pfSense Firewall 0day - 5 RCEs! 🚒 🔥
Exploits
- github.com/abraxas/pfsense-q…
- github.com/abraxas/pfsense-o…
- github.com/abraxas/pfsense-c…
- github.com/abraxas/pfsense-l…
- github.com/abraxas/pfsense-i…
Writeups
- abraxaslabs.tech/research/pf…
- abraxaslabs.tech/research/pf…
- abraxaslabs.tech/research/pf…
- abraxaslabs.tech/research/pf…
- abraxaslabs.tech/research/pf…
Made with AI
15
200
804
73,187
Attackers exploiting Citrix NetScaler ADC/Gateway flaws CVE-2026-88771/88772 (both in CISA KEV) deployed Platypus, an open-source remote-admin tool rebuilt for FreeBSD. Patch to 14.1-73.37 or 13.1-64.23+ and check for compromise; patching won't evict.
#Citrix #NetScaler #infosec
1
91
Extortion group n0n posted 38 port, shipping and logistics firms from 18 countries to its leak site in one batch: terminals, container lines, port IT/EDI providers. Unverified claims, publish deadline Oct 19. Ports: audit TOS/EDI access.
#Ransomware #Maritime #ThreatIntel
67
GitLab fixed CVE-2026-97229 (CVSS 10.0): a crafted regex in CI/CD config can let an unauthenticated attacker run code on self-managed CE/EE servers. Upgrade to 19.4.2, 19.3.5 or 19.2.8. GitLab.com is patched. No exploitation reported yet.
#GitLab #CVE #infosec
1
82
Hackers forced defrost cycles on Danfoss fridge controllers at hundreds of French stores (Intermarché, Carrefour, U, Leclerc). Temps hit ~50°C; food dumped, some fires. CERT-FR: lock down AK-SM/AK-SC; many ran outdated firmware.
#CyberAttack #OTSecurity #France #infosec
Made with AI
72
The Gentlemen ransomware gang lists MoneyGram, Deloitte, KFC and Confluent on its leak site, countdowns running. No data samples or company confirmation yet, so treat these as claims. It already dumped files it says are from Air Canada.
#Ransomware #ThreatIntel #DataBreach
178
Ransomware leak sites (Oct 5–11): 260 claimed victims (+13% WoW). Top posters: The Gentlemen 38, Qilin 23, NightSpire 22. US led with 89 claims. 48 groups active.
#Ransomware #CyberSecurity #ThreatIntel
1
61
Atlassian CVE-2026-21589 (CVSS 9.3) is exploited in the wild: pre-auth file read in Jira, Confluence, Bitbucket, Crowd + 4 more. Honeypots logged 376 attempts from 56 IPs. Jira+Crowd setups can leak admin creds. Not in CISA KEV yet. Patch now.
#Atlassian #CVE #infosec
88
Cold-storage supply-chain attack: Ledger confirms a hidden implant in a wallet sold by SE Asian reseller CryptoBilis. It grabs the seed phrase at setup. Est. $72M–$93M drained, ~$10M frozen. A similar implant is reported in Europe.
#SupplyChain #CryptoSecurity #infosec
1
47
Ransomware crews Qilin and Settra are exploiting CVE-2026-0257, a Palo Alto GlobalProtect/Prisma Access auth bypass, to open VPN sessions without credentials, per ReliaQuest. Patch all portals and gateways, kill active sessions, hunt odd hosts like "kali".
#Ransomware #VPN #CVE
112