 |
Fraud & Cybercrime
FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation
Cyber Security News · also reported by GBHackers
The FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on October 8, 2026, as part of its investigation into the hacking group ShinyHunters. The arrest links a professional involved in ransomware response to an alleged cyber extortion conspiracy. However, the evidence behind the charges rema…
|
|
 |
Vulnerabilities & Exploits
Flock can now issue CVEs for its own products. Should we trust it?
CyberScoop
Flock, the controversial public safety company entangled in controversy amid recurring law enforcement abuse of its products, gained authority to assign CVE IDs to vulnerabilities in its own products and grade those defects as a CVE Numbering Authority. The manufacturer of various surveillance systems, including automa…
|
|
|
|
 |
Vulnerabilities & Exploits
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Dark Reading
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position. SonicWall customers are on the defensive once again, as threat actors are actively exploiting a maximum-severity vulnerability in the cybersecurity vendor's unified secur…
CVE-2026-102255
|
|
 |
Fraud & Cybercrime
ShinyHunters arrest number three: a Canadian ransomware negotiator
Security Affairs
A Canadian ransomware negotiator faces extortion charges in the FBI’s ShinyHunters crackdown. Here’s what is known, and what isn’t. ShinyHunters is the focus of a global FBI investigation, and the crackdown has led to the October 8 arrest of a Canadian ransomware negotiator who now faces extortion charges. Reuters repo…
|
|
|
|
|
|
 |
Cloud & Identity
Quantum-resistant signing on AWS, Part 1: Build a software supply chain with ML-DSA
AWS Security Blog
Software supply chain attacks have grown in both frequency and sophistication. Recent high-profile compromises of build systems and open source dependencies demonstrate that attackers increasingly target the trust mechanisms that verify software integrity. Those trust mechanisms rely on digital signature algorithms, an…
|
|
 |
Fraud & Cybercrime
Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted
Security Affairs
Canonical suffered its second DDoS attack this year, disrupting public websites for over four hours while Launchpad and the Snap Store remained online. Ubuntu’s parent company Canonical spent part of last week fighting off a sustained distributed denial of service (DDoS) attack, the second one to hit its infrastructure…
|
|
 |
Ransomware & Extortion
Prominent Ransomware Negotiator Faces Extortion Charges
Dark Reading
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money. US authorities last week charged a ransomware negotiator over alleged extortion activity — the latest example of cybersecurity professionals being implicated in the very activity th…
|
|
 |
Security
Ahold Delhaize experiencing cybersecurity issue
Cybersecurity Dive
The company said it took some systems offline as part of “precautionary measures.” Websites for all five of the grocer’s U.S. banners were down Monday morning.
|
|
|
|
 |
Cloud & Identity
Yandex confirms service outage as users lose access to cloud files
BleepingComputer
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third. Yandex customers are experiencing service outages, some of them reporting inability to access files stored on the company’s cloud infrastructure. T…
|
|
|
|
 |
Cloud & Identity
No Identity, No Recovery: Cyber Resilience Starts With IAM
Dark Reading
Enterprise cybersecurity technology research that connects the dots. The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink. Enterprises need cyber resilience to ensure that they can sustain operations in the face of ransomware and other cyber threats, …
|
|
