Synology NAS Ransomware Hits Outdated DSM

Synology NAS ransomware C3RB3R: attackers encrypt devices running outdated DSM versions, update DSM and keep an offline backup, November 2026

Synology NAS ransomware is hitting devices that run outdated DSM versions. On October 29, Synology said attackers are exploiting a vulnerability it patched in December 2024 to encrypt data and demand a ransom. Qihoo 360 names the malware C3RB3R, a Cerber variant. As of November 2, which flaw gets attackers in is disputed, and neither…

Read More

Top 5 Cybersecurity News

Top 5 Cybersecurity News, October 23, 2026: hourglass with blue sand and the headline “Attackers need hours. Recovery needs days.”

This week’s Top 5 Cybersecurity News for October 23, 2026 is about time. Attackers needed hours, and in one case started four days before public disclosure. Recovery asked for days: restores from clean backups, rotated credentials, client updates and, at one grocery group, more than a week without e-commerce. A flaw in PHP, the language…

Read More

SafePay Ransomware Wipes Backups First

SafePay ransomware advisory AA26-293A: backups destroyed before encryption, October 2026

SafePay ransomware has compromised at least 600 organizations since August 2024, and a joint advisory published on October 20 says its operators halt shadow copies and reset backup storage before they encrypt anything. The FBI, CISA and the US Secret Service wrote it together with Germany’s Landeskriminalamt Rheinland-Pfalz and UK law enforcement (the National Crime…

Read More

IDC Frontier Ransomware: One Cloud, 495 Customers

IDC Frontier ransomware attack on a Japanese cloud provider affecting 495 customers, October 2026

One ransomware attack on one cloud region has hit 495 companies and local governments in Japan at once. IDC Frontier, a SoftBank subsidiary, said its IDCF Cloud service was struck by ransomware on October 7 at 3:40 a.m. local time, forcing it to shut down the network and systems of its East Japan Region 1.…

Read More

Top 5 Cybersecurity News

Top 5 Cybersecurity News, October 9, 2026: FortiBleed lockouts, AI-driven bank hacks, the ASOS app breach, Osaka ransomware and Warlock SharePoint attacks.

This week’s Top 5 Cybersecurity News for October 9, 2026 has one thing in common: nobody needed a new exploit. A credential campaign against Fortinet firewalls now locks owners out of their own devices and feeds ransomware affiliates. An open-source AI tool probed South Korean banks through employee-facing systems. ASOS customers received their breach announcement…

Read More