A new ClickFix malware-as-a-service (MaaS) framework called Exvicy has been built on code lifted from a rival service, ErrTraffic. According to a technical write-up published by Sekoia’s Threat Detection & Research team on September 21, telemetry from multiple customer environments… Read More "New Exvicy ClickFix Framework Built on Rival ErrTraffic’s Code"
The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos
An under-the-radar procurement program led by the Department of Defense has been granting special statuses to would-be defense contractors that make it easier for the government to quickly purchase their AI offerings, based on product videos that must be no… Read More "The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos"
Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany
An alleged member of the Qilin ransomware group was arrested in Japan and subsequently extradited to Germany. The suspect, a 28-year-old Russian national, was detained in Osaka in May and was reportedly handed over to the German authorities on October… Read More "Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany"
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
Ravie LakshmananOct 07, 2026Vulnerability / Web Security Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked… Read More "Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details"
AI-powered OSINT: Why everyone is a viable target for fraud
It’s getting cheaper and easier for cybercriminals to research potential victims. Here’s what’s still in your control. 27 Aug 2026 • , 5 min. read AI is changing the threat landscape, one model at a time. The pace at which… Read More "AI-powered OSINT: Why everyone is a viable target for fraud"
OT Coalition Urges CISA to Mandate Federal OT Security
The Operational Technology Cybersecurity Coalition (OTCC) has urged the US Cybersecurity and Infrastructure Security Agency (CISA) to set mandatory security requirements for operational technology (OT) across federal civilian agencies. In a report published on October 6, the coalition called for… Read More "OT Coalition Urges CISA to Mandate Federal OT Security"
Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
Southern Company is notifying roughly 400,000 customers that their utility account information was accessed by an unauthorized third party through its online customer portal. The Atlanta-based energy holding company serves more than 9 million customers through electric utilities in three… Read More "Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts"
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
Ravie LakshmananOct 07, 2026Cybercrime / Network Security The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket… Read More "FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials"
Denmark’s national ID system breach exposes personal data of 8.8M
Denmark is reviewing security controls around its national citizen registry after unauthorized parties exploited a company’s access credentials to harvest records on approximately 8.8 million people over a 10-day period. The breach covers people living in Denmark as well as… Read More "Denmark’s national ID system breach exposes personal data of 8.8M"
This month in security with Tony Anscombe – August 2026 edition
Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month’s cybersecurity news 31 Aug 2026 With August coming to a close, it’s time for ESET Chief Security Evangelist Tony Anscombe… Read More "This month in security with Tony Anscombe – August 2026 edition"