Germany jails alleged Qilin ransomware core member
Japan's National Police Agency confirmed the arrest and extradition to Germany of a Russian national it ties to the Qilin ransomware operation, first detained at an Osaka hotel in May.
Newsroom
FBI arrests another ShinyHunters suspect over FBIjobs breach
FBI Director Kash Patel says agents arrested another suspected ShinyHunters co-conspirator tied to the FBIjobs.gov breach. The New York Times reports a Canadian national held in Pennsylvania.
ASOS app hijacked to push Snowflake extortion message
On 6 October, ASOS customers got an in-app 'ASOS HACKED' push claiming a compromised Snowflake instance. Snowflake says its platform was not breached; the scope is unverified.
Atlassian patches critical file-read flaw CVE-2026-21589
CVE-2026-21589 lets unauthenticated attackers read files from eight Atlassian Data Center products. CVSS 9.3. Patch now; cloud instances are not affected.
ClickFix campaign hits 100+ Ukrainian sites with Lunex stealer
CERT-UA, tracking the activity as UAC-0277, says more than 100 compromised websites push fake Cloudflare checks that trick users into running PowerShell and installing Lunex Stealer.
Denmark CPR register breach exposes 8.8 million people
Unauthorized parties abused a Danish company's lawful CPR lookup access to pull names, addresses and CPR numbers for 8.8 million people over roughly ten days in September.
FBI blames contractor's missed patch for ShinyHunters breach
The FBI says a contractor failed to apply a patch for the Oracle PeopleSoft flaw CVE-2026-35273, leading to the ShinyHunters theft of employee data. The contractor was removed.
LibreOffice RCE via JDBC runs code with no macro warning
CVE-2026-63277 lets a crafted LibreOffice Calc document load a remote Java driver and run code on open — no macro prompt. Fixed in 26.2.5 and 26.8.0.
MALFEX npm campaign ran 3 years, hit 40,000 downloads
CloudSEK details MALFEX, a single-operator npm campaign active since 2023: 8 malicious packages, 40,000+ downloads, delivering the Overlord RAT and an infostealer.