Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC

articleTotal: 1890 reports

Filter:All Vulnerabilities 1161 Threat Actors 474 Geopolitical 103|Critical only

Cyber Threat Daily Brief — October 28, 2026

satellite_altDaily Brief

Threat Intel Brief·Daily Summary

Cyber Threat Daily Brief — October 28, 2026

Today's briefing: 9 critical and 29 high-severity threats. A total of 45 detailed analyses covering vulnerabilities, threat actors, and geopolitical context.

9 Critical29 High45 analyses

schedule04:17 UTC

Read briefarrow_forward

Latest Reports

28 / 1716 results

Zohar Pinhasi Charged with $19M Ransomware Victim Fraud Scheme

highperson_alertThreat Actor

person_alertThreat Actor

Zohar Pinhasi Charged with $19M Ransomware Victim Fraud Scheme

Zohar Pinhasi (also known as Zack Silver and Zack Green) is a 50-year-old U.S. and Israeli national who owned and operated MonsterCloud, a Florida-based company purporting to offer ransomware recovery services. Pinhasi is charged by the U.S.

Cyber Threat Daily Brief — October 28, 2026

Latest Reports

Zohar Pinhasi Charged with $19M Ransomware Victim Fraud Scheme

Tensorlake npm package 0.5.144 compromised with Shai-Hulud worm

Web3-based C2 in supply chain attacks targets cloud credentials via npm

FortiBleed Campaign Exploits Leaked Credentials to Compromise FortiGate VPNs

Hackers hijack Google domains via compromised ccTLD registries for Ghana, AS, SL

Attackers hijack .gh, .sl, .as registries to issue fraudulent Google certs

MALFEX campaign: 8 malicious npm packages deliver Overlord RAT, 40K+ downloads

SonicWall SMA1000 CVSS 10.0 pre-auth SSRF allows internal access

Critical RCE in LMCache (CVE-2026-105192) allows unauthenticated code execution

Canto Incognito Targets AI/LLM Infrastructure for Crypto Mining Botnet

PoeLLM botnet compromises 3,400+ AI servers for cryptomining

HPE AOS-Switch auth bypass and buffer overflow require immediate patching

SonicWall SMA1000 pre-auth SSRF and post-auth RCE require urgent patching

Ransomware Groups Target Backup Infrastructure to Eliminate Recovery

ShinyHunters Leader Detained in Jordan, Cooperating with FBI

Atlassian CVE-2026-21589 exploited in wild after PoC release

FBI warns FortiBleed campaign actively harvesting Fortinet credentials

Atlassian Data Center CVE-2026-21589 exploited within 2 hours of disclosure

SonicWall SMA1000 gateways vulnerable to unauthenticated SSRF flaw

Advantest Corporation Ransomware Attack Exposes PII Data

Critical file access flaw in Atlassian Data Center products requires patching

Critical unauthenticated path traversal in Atlassian products

Citrix Netscaler ADC/Gateway HTTP smuggling flaws require immediate patch

Ninja Forms and WPC Product Bundles XSS flaws under active exploit

32 zero-days exploited at Pwn2Own Ireland 2026, Samsung Galaxy S26 hacked

Human-Operated Phishing Platform Targets AI Chatbot Ad Portals

Linux backdoors mimic email security tools to target telecom in Korea, Taiwan

Critical file-access flaw in Atlassian Data Center products (self-hosted)