iiinova — where your digital self keeps evolving

CyberNetSecIO

@netsecio.bsky.social

79 followers 37 following 1.6K posts

Cybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation.

Posts Replies Media

CyberNetSecIO @netsecio.bsky.social · 8h

The U.S. Senate unanimously passed the Health Care Cybersecurity and Resiliency Act to strengthen cyber defenses for healthcare providers through grants, training, and improved agency coordination. #Healthcare #Cybersecurity #Policy 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

U.S. Senate Passes Bipartisan Healthcare Cybersecurity Act

The U.S. Senate has passed the Health Care Cybersecurity and Resiliency Act to provide grants, training, and resources to bolster the cybersecurity of...

CyberNetSecIO @netsecio.bsky.social · 8h

A key suspect from the ShinyHunters hacking group, Saif al-Din Khader ('Rey'), has been detained in Jordan and is reportedly cooperating with the FBI to identify other members. #ShinyHunters #Cybercrime #FBI 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Suspected ShinyHunters Hacker

A suspected key member of the ShinyHunters hacking group, known as

000

CyberNetSecIO @netsecio.bsky.social · 8h

Fortra patches 3 critical vulnerabilities in its BoKS Privileged Access Manager. Flaws include auth bypass (CVE-2026-79901, 9.9), RCE (CVE-2026-79898, 9.1), and buffer overflow (CVE-2026-12627, 9.8). #CVE #PatchNow #Linux 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Fortra Patches Critical Flaws in BoKS Privileged Access Manager

Fortra has released security patches for three critical vulnerabilities in its BoKS Privileged Access Manager, including flaws allowing for authentication...

000

CyberNetSecIO @netsecio.bsky.social · 8h

Epic Systems pauses MyChart development for 6 weeks to fix critical security flaws found by an AI model. The vulnerabilities could allow undetected access to patient records affecting millions. #Healthcare #CyberSecurity #MyChart 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Epic Systems Halts Development to Fix MyChart Security Flaws

Epic Systems has paused product development for its MyChart patient portal to address significant security vulnerabilities that could expose patient...

CyberNetSecIO @netsecio.bsky.social · 8h

Coordinated cyberattacks hit South Korea's financial sector, including Shinhan & KB Kookmin Bank. Customer data exposed. President orders full probe amid concerns of AI-driven attacks. #CyberAttack #SouthKorea #Finance 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

South Korean Financial Sector Hit by Coordinated Cyberattacks

Multiple South Korean financial institutions, including major banks, have suffered data breaches in a coordinated cyber campaign, prompting a government...

000

CyberNetSecIO @netsecio.bsky.social · 8h

Technical University of Denmark (DTU) suffers a major data breach affecting up to 200,000 users. Attackers compromised the DTUBasen IAM system, exposing sensitive data including CPR numbers, risking identity theft. #DataBreach #Denmark #CyberSecurity 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Technical University of Denmark Breach Exposes Data of 200,000

The Technical University of Denmark (DTU) reports a major data breach affecting up to 200,000 users after its DTUBasen identity management system was...

100

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

Fortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Critical Fortinet FortiMail Zero-Day Exploited for RCE

A critical zero-day vulnerability (CVE-2026-104286) in Fortinet FortiMail is being actively exploited. The flaw allows unauthenticated RCE.

000

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

Cybersecurity leaders warn that AI-powered attacks are outpacing defensive capabilities. The rise of autonomous hacking agents and supply chain risks demands a shift to AI-driven defense. #AI #CyberSecurity #ThreatIntel #InfoSec 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Industry Leaders Warn AI-Powered Attacks Are Outpacing Defenses

At the Asia New Vision Forum, cybersecurity experts warned that AI is enabling autonomous hacking and expanding threats beyond the capabilities of current...

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack

Citrix releases urgent patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in NetScaler ADC and Gateway under active...

000

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

'Booba Project' ransomware group claims attack on a NY healthcare provider, alleging theft of 70GB of data. Patient PHI at risk. #Ransomware #DataBreach #Healthcare #BoobaProject 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Booba Project Ransomware Claims Attack on NY Healthcare Provider

000

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

New Zealand's NCSC report officially names China as the most 'persistent and capable' state-sponsored cyber threat, linking it to numerous attacks on critical sectors. #China #CyberEspionage #ThreatIntel #NewZealand #APT 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

New Zealand NCSC Report Names China as Top Cyber Threat

A new report from New Zealand

000

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

A critical RCE vulnerability (CVSS 9.8) has been disclosed in multiple Siemens PLC models, posing a severe risk to industrial control systems. Admins are urged to apply firmware updates immediately. #Siemens #PLC #ICS #OTsecurity #Vulnerability 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Critical RCE Vulnerability (CVSS 9.8) Affects Siemens PLCs

A critical remote code execution (RCE) vulnerability with a 9.8 CVSS score has been found in Siemens Programmable Logic Controllers (PLCs), threatening...

000

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

Europol dismantles KillSec ransomware infrastructure in Operation KillSwitch. Leak site seized, 110TB of data secured. A 16-year-old is the suspected main operator. #Ransomware #KillSec #Europol #Cybercrime 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Europol Dismantles KillSec Ransomware; Teenager Suspected Leader

Europol and German authorities have dismantled the KillSec ransomware group, seizing its infrastructure and identifying a 16-year-old as the suspected...

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

Cisco patches critical auth bypass zero-day (CVE-2026-76504) in Catalyst SD-WAN Manager. CVSS 9.8 flaw actively exploited. Unauthenticated attackers can gain admin access. CISA added to KEV. Patch immediately! #Cisco #ZeroDay #SDWAN #CVE202676504 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Cisco Patches Actively Exploited SD-WAN Auth Bypass Zero-Day

Cisco is patching a critical, actively exploited zero-day vulnerability (CVE-2026-76504) in its Catalyst SD-WAN Manager that allows for complete...

000

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

Two major supply chain incidents: Pentagon reveals a 2025 data breach via a 3rd party affecting military personnel. Separately, Kiteworks proactively shut down customer systems based on federal threat intel, patching a new flaw before exploitation. #... 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Pentagon Reveals Breach; Kiteworks Halts Systems on Threat Intel

The Pentagon disclosed a major data breach affecting the DMDC via a third party, while Kiteworks executed a proactive customer-wide shutdown to mitigate a...

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack

Citrix releases urgent patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in NetScaler ADC and Gateway under active...

000

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

Zscaler's 2026 report shows a 275% surge in ransomware data exfiltration, with nearly 900TB stolen. Attackers are shifting from encryption to data theft for extortion. #Ransomware #Zscaler #ThreatIntel #DataBreach #CyberSecurity 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Ransomware Data Exfiltration Surges 275%, Zscaler Reports

A new report from Zscaler ThreatLabz reveals a 275% increase in data exfiltrated during ransomware attacks, signaling a major shift in attacker strategy to...

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

China-aligned threat actor TA419 is targeting U.S. AI policy experts with sophisticated phishing attacks, impersonating officials to steal cloud credentials and MFA tokens via AitM techniques. #TA419 #Phishing #CyberEspionage #China #AI 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

China-Aligned Group TA419 Targets U.S. AI Policy Experts

The China-aligned espionage group TA419 is conducting sophisticated credential phishing campaigns against U.S.

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

Fortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Critical Fortinet FortiMail Zero-Day Exploited for RCE

A critical zero-day vulnerability (CVE-2026-104286) in Fortinet FortiMail is being actively exploited. The flaw allows unauthenticated RCE.

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Cybersecurity leaders warn that AI-powered attacks are outpacing defensive capabilities. The rise of autonomous hacking agents and supply chain risks demands a shift to AI-driven defense. #AI #CyberSecurity #ThreatIntel #InfoSec 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Industry Leaders Warn AI-Powered Attacks Are Outpacing Defenses

At the Asia New Vision Forum, cybersecurity experts warned that AI is enabling autonomous hacking and expanding threats beyond the capabilities of current...

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack

Citrix releases urgent patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in NetScaler ADC and Gateway under active...

000

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Gartner advises CISOs: prioritize AI risks, budget for preemptive security, and treat frontier AI as an insider threat. 76% of CISOs rank AI-driven vulnerability discovery as a top risk. #CISO #Gartner #AI #Cybersecurity 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Gartner Advises CISOs to Prioritize AI Risks, Preemptive Security

Gartner outlines five key actions for CISOs to take by the end of 2026, focusing on managing AI risks and implementing preemptive security measures.

000

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Multiple data breaches disclosed, affecting US healthcare and professional services. Modoc Medical Center, Blanchard Training & Development, and others report exposure of PII, financial, and medical data. #DataBreach #Healthcare #PII 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Data Breaches at Healthcare & Professional Services Firms Disclosed

Recent disclosures reveal data breaches at multiple US organizations, including Modoc Medical Center, exposing sensitive personal, financial, and medical...

000

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Russian APT Star Blizzard (FSB) adopts new 'RedFlick' phishing technique to deploy CosmicPulse backdoor. The method streamlines attacks on Ukraine-linked orgs. #APT #StarBlizzard #Phishing #Russia #Ukraine 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Russian APT Star Blizzard Evolves Phishing with

Russian APT group Star Blizzard is using a new

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Europol dismantles KillSec ransomware infrastructure in Operation KillSwitch. Leak site seized, 110TB of data secured. A 16-year-old is the suspected main operator. #Ransomware #KillSec #Europol #Cybercrime 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Europol Dismantles KillSec Ransomware; Teenager Suspected Leader

Europol and German authorities have dismantled the KillSec ransomware group, seizing its infrastructure and identifying a 16-year-old as the suspected...

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Dutch security institute DIVD hacked by 'agentic AI-powered attack' exploiting two Zammad zero-days (CVE-2026-102489, CVE-2026-102490). Attackers chained RCE & privesc flaws. All Zammad users urged to patch. #ZeroDay #AI #CyberAttack #Zammad 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Dutch Security Institute Hacked via AI-Powered Zammad Zero-Days

The Dutch Institute for Vulnerability Disclosure (DIVD) was hacked using two chained zero-day vulnerabilities in Zammad helpdesk software, in what it calls...

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Cisco patches critical auth bypass zero-day (CVE-2026-76504) in Catalyst SD-WAN Manager. CVSS 9.8 flaw actively exploited. Unauthenticated attackers can gain admin access. CISA added to KEV. Patch immediately! #Cisco #ZeroDay #SDWAN #CVE202676504 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Cisco Patches Actively Exploited SD-WAN Auth Bypass Zero-Day

Cisco is patching a critical, actively exploited zero-day vulnerability (CVE-2026-76504) in its Catalyst SD-WAN Manager that allows for complete...

100

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

Image-sharing service Gyazo discloses a major data breach exposing 23.6M user records and 490M image metadata records after a server vulnerability was exploited. All users are required to change their passwords. #DataBreach #Gyazo #Privacy 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Gyazo Screenshot Tool Breach Exposes 23.6M User Records, Image Data

Image-sharing tool Gyazo confirms a data breach affecting 23.6 million user accounts and 490 million image metadata records due to a server vulnerability.

000

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

Chaos ransomware group claims a cyberattack against Taiwanese industrial IoT giant Advantech. The breach could have significant supply chain implications for industrial automation and smart city tech. #Ransomware #Chaos #Advantech #IIoT #CyberAttack 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Chaos Ransomware Claims Attack on Industrial IoT Giant Advantech

The Chaos ransomware group has listed industrial IoT leader Advantech as a victim, raising concerns about a significant data breach and potential supply...

000

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

🚨 CRITICAL THREAT: Two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are under active exploitation for RCE. CISA KEV updated. Patch immediately! #CyberSecurity #ZeroDay #CVE #PatchNow 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Citrix Zero-Days and Oracle PeopleSoft Flaw Under Active Exploit

A critical threat advisory warns of active exploitation of two Citrix NetScaler zero-days and an Oracle PeopleSoft RCE vulnerability. Patching is urgent.

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

Cybersecurity leaders warn that AI-powered attacks are outpacing defensive capabilities. The rise of autonomous hacking agents and supply chain risks demands a shift to AI-driven defense. #AI #CyberSecurity #ThreatIntel #InfoSec 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Industry Leaders Warn AI-Powered Attacks Are Outpacing Defenses

At the Asia New Vision Forum, cybersecurity experts warned that AI is enabling autonomous hacking and expanding threats beyond the capabilities of current...

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

U.S. utility provider Southern Company is investigating a data breach affecting 400,000 individuals. Leaked PII includes full names, emails, and physical addresses, increasing the risk of phishing and identity theft. #DataBreach #PII #SouthernCompany 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Southern Company Investigates Data Breach Affecting 400,000 Customers

Southern Company, a major U.S. utility, is investigating a data leak of 400,000 PII records, including names, emails, and addresses, after a database was...

000

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

An AI-assisted cyberattack on Spain's rail operators Adif & Renfe resulted in the exfiltration of 500GB of data. Attackers used commercial AI models to accelerate the breach, which originated from Adif's web systems. #CyberAttack #AI #CriticalInfrast... 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

AI-Assisted Attack on Spanish Rail Network Exfiltrated 500GB of Data

Investigation reveals an AI-assisted cyberattack on Spain

000

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack

Citrix releases urgent patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in NetScaler ADC and Gateway under active...

000

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

Unit 42 releases OperTraitor, an LLM-powered tool to audit Kubernetes operators for excessive RBAC permissions. Many operators on OperatorHub found to be overly permissive, creating silent backdoors. #Kubernetes #DevSecOps #RBAC #CloudSecurity 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Unit 42 researchers release OperTraitor, an open-source tool to audit excessive RBAC permissions in Kubernetes operators, uncovering significant supply...

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

🚨 19 vulnerabilities, including a critical auth bypass (CVE-2026-27546), found in Pepperl+Fuchs IO-Link industrial gateways. Flaws allow root access, posing a severe risk to OT networks. Patches are available. #ICS #OTSecurity #Vulnerability 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

19 Flaws in Industrial Gateway Grant Root Access to OT Networks

Researchers found 19 flaws in a Pepperl+Fuchs industrial gateway, including a critical authentication bypass that could give attackers root access to OT...

000

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

Astrana Health discloses a data breach caused by a social engineering attack. Attackers impersonated staff and used phone spoofing to trick employees, leading to the exfiltration of confidential information. #DataBreach #SocialEngineering #Healthcare 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Astrana Health Data Breach Caused by Social Engineering Attack

Healthcare tech company Astrana Health reports a data breach resulting from a social engineering and vishing campaign that compromised confidential...

000

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

GAO report finds poor fraud management in DoD IT programs has led to billions in losses and exposes critical systems to cyber risks. The report calls for urgent implementation of anti-fraud practices. #GAO #DoD #Cybersecurity #Fraud 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

GAO: Poor Fraud Management Puts DoD IT Programs at Cyber Risk

A U.S. GAO report reveals the Department of Defense

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

A major data breach in Poland's healthcare sector as an SQL injection flaw in Qbusoft's Medyc software was exploited. Attackers stole patient PII and likely sensitive medical records. #DataBreach #Healthcare #SQLi #Poland 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

SQL Injection Flaw in Medyc Software Leads to Polish Health Data Breach

Polish medical software provider Qbusoft

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

Ransomware hits Japanese conglomerate Keio Corporation, crippling payment and reservation systems at its hotels and retail stores. Train operations are unaffected due to network segmentation. #Ransomware #CyberAttack #Japan #Keio 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Ransomware Attack on Japan

Japanese railway and retail giant Keio Corporation confirms a ransomware attack has disrupted its hospitality and retail business systems, disabling...

CyberNetSecIO @netsecio.bsky.social · 28/09/2026

Cybercrime infighting: ShinyHunters has hijacked the data leak site of the Clop ransomware gang. The takeover is allegedly retaliation over a stolen zero-day exploit. ShinyHunters threatens to expose Clop's operations. #ShinyHunters #Clop #Ransomware 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

ShinyHunters Hijacks Clop Ransomware Site in Inter-Gang Feud

The ShinyHunters extortion group has hijacked the dark web leak site of the Clop ransomware gang in a public feud over an allegedly stolen zero-day exploit.

000

CyberNetSecIO @netsecio.bsky.social · 28/09/2026

Honeywell report: 87% of maritime organizations were hit by a significant OT cyberattack in the last year. The industry shows critical gaps, with only 21% having a full OT asset inventory, leading to major downtime. #Maritime #CyberSecurity #OT #ICS 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

87% of Maritime Firms Hit by Cyberattacks in Past Year: Report

A new Honeywell report finds 87% of maritime organizations suffered a significant OT cyber incident in the past year, highlighting major gaps in asset...

000

CyberNetSecIO @netsecio.bsky.social · 28/09/2026

Two major supply chain incidents: Pentagon reveals a 2025 data breach via a 3rd party affecting military personnel. Separately, Kiteworks proactively shut down customer systems based on federal threat intel, patching a new flaw before exploitation. #... 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Pentagon Reveals Breach; Kiteworks Halts Systems on Threat Intel

The Pentagon disclosed a major data breach affecting the DMDC via a third party, while Kiteworks executed a proactive customer-wide shutdown to mitigate a...

CyberNetSecIO @netsecio.bsky.social · 28/09/2026

A new ransomware strain named 'Altair' has been discovered targeting Windows. It uses a double-extortion model, exfiltrates data, and leverages WMI for stealth. Victims are given a 72-hour deadline. #Ransomware #Altair #CyberSecurity #Malware 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Security firm CYFIRMA has identified a new double-extortion ransomware strain called Altair that targets Windows systems and uses WMI for stealthy...

000

CyberNetSecIO @netsecio.bsky.social · 28/09/2026

Former US Army soldier Cameron Wagenius ('kiberphant0m') sentenced to 70 months in prison for hacking telecom giants like AT&T, stealing data via Snowflake breaches, and attempting to extort over $1M. #CyberCrime #Extortion #InsiderThreat 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Cameron John Wagenius, a former U.S. soldier, was sentenced to 70 months in prison for hacking, data theft from firms like AT&T, and an extortion scheme.

CyberNetSecIO @netsecio.bsky.social · 28/09/2026

Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack

Citrix releases urgent patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in NetScaler ADC and Gateway under active...

000

CyberNetSecIO @netsecio.bsky.social · 27/09/2026

Kiteworks issues urgent advisory for customers to shut down servers for 6-9 hours following a 'credible threat' warning from federal authorities about a potential imminent attack, possibly a zero-day. #CyberSecurity #ThreatIntel #Kiteworks 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Kiteworks Urges Shutdown After Warning of Imminent Cyberattack

Secure file-transfer vendor Kiteworks advised customers to shut down servers as a precaution after receiving credible threat intelligence of an imminent...

CyberNetSecIO @netsecio.bsky.social · 27/09/2026

Extortion group ShinyHunters claims to have breached the FBI using a PeopleSoft zero-day vulnerability. The group alleges data theft of agent and applicant info as revenge. The claim is unconfirmed. #ShinyHunters #CyberAttack #FBI #ZeroDay 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

ShinyHunters Claims FBI Hack, Cites Revenge and PeopleSoft Zero-Day

The threat group ShinyHunters has claimed it breached the FBI by exploiting a PeopleSoft zero-day vulnerability, though the claim remains unconfirmed.

000

CyberNetSecIO @netsecio.bsky.social · 27/09/2026

CISA adds two actively exploited vulnerabilities to its KEV catalog: a SharePoint RCE (CVE-2026-65660) and a MikroTik RouterOS flaw (CVE-2026-67279). Federal agencies must patch by Sep 28. Prioritize remediation now! #CyberSecurity #PatchNow #CISA 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

CISA Adds SharePoint, MikroTik Bugs to Known Exploited List

CISA adds two actively exploited vulnerabilities to its KEV catalog: a Microsoft SharePoint RCE flaw and a MikroTik RouterOS bug. Patching is critical.

000

CyberNetSecIO @netsecio.bsky.social · 27/09/2026

🚨 CRITICAL VULNERABILITY: WordPress Core is being actively exploited via CVE-2026-87902 (CVSS 9.2). The unauthenticated path traversal flaw can lead to RCE. Affects versions 4.7.0-7.1.1. Update to 7.1.2 immediately! #WordPress #CVE #CyberSecurity #P... 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Critical WordPress Path Traversal Flaw Actively Exploited (CVE-2026-87902)

A critical path traversal vulnerability, CVE-2026-87902, is being actively exploited in WordPress versions 4.7.0-7.1.1, potentially leading to RCE.

000