🧠 Threat Intelligence | MyCyberWay

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

October 2, 2026

AI in Cybersecurity, Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Microsoft Security, AI & Emerging Technology, Threat Intelligence

The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.
SecurityWeek
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

October 2, 2026

Data Breaches, Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Microsoft Security, Threat Intelligence

The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.
SecurityWeek
Police dismantle ransomware gang allegedly run by a 16-year-old

October 2, 2026

Global Cyber Attacks, Global Cyber Security, Phishing & Scams, Ransomware, Threat Intelligence

An international operation has disrupted KillSec’s servers and data leak site, with three suspects arrested. Bitdefender supported the investigation into the group, which authorities link to around 1,000 suspected cyberattacks worldwide. Key takeaways * Investigators identified a 16-year-old as KillSec’s suspected administrator and main operator * Operation KillSwitch leads to three provisional arrests and eight…
Bitdefender
Exploited
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

October 2, 2026

Enterprise & Cloud Security, Identity & Access Management, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
SecurityWeek
Exploited
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

October 2, 2026

Automation & SOAR, Malware & Exploits, Zero-Day Vulnerabilities, AI & Emerging Technology, Threat Intelligence

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
SecurityWeek
Exploited
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

October 2, 2026

AI Attacks & Abuse, Malware & Exploits, Zero-Day Vulnerabilities, AI & Emerging Technology, Threat Intelligence

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
SecurityWeek
Exploited
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

October 2, 2026

Enterprise & Cloud Security, Malware & Exploits, SOC & SIEM, Zero-Day Vulnerabilities, Threat Intelligence

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
SecurityWeek
Investigators trace an AI agent ‘s path from research task to reconnaissance

October 2, 2026

AI in Cybersecurity, Botnets & C2, AI & Emerging Technology, Threat Intelligence

Asymmetric Security traces rogue OpenAI AI agent activity that probed government sites, accessed staging servers, and evaded sandbox limits. Researchers at Asymmetric Security spent 48 hours over the last weekend reconstructing reported rogue OpenAI AI agent activity that hit the Australian government and other organizations between March and September this year. They worked from public…
Security Affairs
Exploited
U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

October 2, 2026

Botnets & C2, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Fortinet FortiMail flaw, tracked as CVE-2026-104286 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is a path traversal vulnerability that can be triggered…
Security Affairs
Exploited
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

October 2, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write arbitrary files on the underlying system. “An improper…
The Hacker News
Android 17 makes it harder for spyware to cover its tracks

October 2, 2026

GDPR & Privacy, Malware & Exploits, Law, Policy & Compliance, Threat Intelligence

When a journalist suspects their phone has been hacked, the first question is whether any trace of the attack is left. Google has added six features to Advanced Protection in Android 17, including one that keeps a copy of that evidence off the device. Existing users will receive a notification when the new capabilities become…
Help Net Security
UK
FCA secures money back for victims of crypto fraud

October 2, 2026

Phishing & Scams, Regulatory Updates, UK Regulations & Compliance, UK Cyber Security News, Law, Policy & Compliance, Threat Intelligence

Victims of a £1.5m crypto investment fraud will recover lost funds after the FCA obtained confiscation orders against Raymondip Bedi and Patrick Mavanga. At a hearing at Southwark Crown Court on 28 September 2026, Raymondip Bedi was ordered to pay £603,404.28 and Patrick Mavanga £247,997.99.Between February 2017 and June 2019, Bedi and Mavanga operated a…
Financial Conduct Authority

Threat Intelligence

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

Police dismantle ransomware gang allegedly run by a 16-year-old

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

Investigators trace an AI agent ‘s path from research task to reconnaissance

U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

FCA secures money back for victims of crypto fraud

Stay ahead in Cyber Security.

Your basket (items: 0)