Spanish police arrested a 16-year-old suspected of running the KillSec ransomware group as investigators took its leak site, five servers and at least 110TB of stolen data. Three suspects were arrested and a fourth, the alleged developer, has been identified.
Taylor Vick via UnsplashIDC Frontier says customer data in four zones of its IDCF Cloud East Japan Region 1 will be difficult to recover after a ransomware attack that began on 7 October. Customers should restore from their own backups. 495 businesses and local governments are affected.
Atlassian disclosed a critical file-read flaw in eight self-hosted products on Monday. On Tuesday a research firm explained how it turns into Jira administrator access in some setups, and honeypots saw attacks within two hours.
The FBI and Secret Service say the FortiBleed campaign is still running, and that some victims may be locked out of their own firewalls. The advisory lists the account names attackers leave behind.
Federal agencies had until 30 September to put Citrix's fix on their NetScaler gateways. By Friday the fixed build was crashing under a new attack. Citrix has now patched its third exploited NetScaler zero-day in a week, and CISA wants it in by Wednesday, with a forensic check, for a flaw Citrix describes as a denial-of-service bug.
Vendors have learned to produce the file. The harder question is what happens to it after it lands in a procurement inbox.
Federal advisories describe the same route into hardened companies: a phone call, a password reset, and an MFA token moved to a new device.
August 29, 2026
.jpg?width=1400)
.jpg?width=1400)
