SafePay Ransomware Wipes Backups First

SafePay ransomware advisory AA26-293A: backups destroyed before encryption, October 2026

SafePay ransomware has compromised at least 600 organizations since August 2024, and a joint advisory published on October 20 says its operators halt shadow copies and reset backup storage before they encrypt anything. The FBI, CISA and the US Secret Service wrote it together with Germany’s Landeskriminalamt Rheinland-Pfalz and UK law enforcement (the National Crime…

Read More

Flax Typhoon Integrity Tech Domain Seizure

Flax Typhoon Integrity Tech: the FBI seized seven domains behind two Chinese hacking tools. The advisory lists Exchange password spraying and old CVEs.

The Flax Typhoon Integrity Tech case reached a new stage on October 8, when the FBI seized seven domains behind two hacking tools, MicroScan and FishHub. The Justice Department says a Chinese company with government contracts, Integrity Technology Group, operated them. The joint advisory published alongside gives defenders a short list: password spraying against Microsoft…

Read More

Top 5 Cybersecurity News

Top 5 Cybersecurity News October 2, 2026: Cisco SD-WAN zero-day, WSO2 CVSS 10 auth bypass, Citrix backdoors persist, Apple CoreGraphics exploit, GUTcert breach.

This week’s Top 5 Cybersecurity News for October 2, 2026 follows a pattern that has been building across the year: attackers are targeting the layers that other infrastructure trusts. A critical-severity zero-day in Cisco’s SD-WAN Manager — the console that programs an entire enterprise WAN — arrived in CISA’s Known Exploited Vulnerabilities catalog on September…

Read More

Signal Backup Recovery Key Russian intelligence

Signal Backup Recovery Key

Signal Backup Recovery Key Russian intelligence theft is now formally attributed by three governments. The FBI, CISA, and Ukraine’s Security Service (SSU) jointly disclosed on June 26–27, 2026 that FSB-linked UNC5792 and GRU-linked UNC4221 are stealing these keys via fake support SMS messages — granting persistent access to complete message archives even after victims reset…

Read More

Air Gaps and OT Security in the Zero Trust Era

OT security — air gap trust assumptions, removable media risks, and supply chain integrity in ICS environments

OT security has always rested on a core assumption: if a system is physically separated, it is safe. For years, the air gap represented real certainty. No routable path, no shared infrastructure, no logical bridge — and no external attack surface to speak of. In safety-critical industrial environments, that clarity mattered. But the industrial world…

Read More