iiinova — where your digital self keeps evolving

CyberNetSecIO @netsecio.bsky.social · 17h

Coordinated cyberattacks hit South Korea's financial sector, including Shinhan & KB Kookmin Bank. Customer data exposed. President orders full probe amid concerns of AI-driven attacks. #CyberAttack #SouthKorea #Finance 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

South Korean Financial Sector Hit by Coordinated Cyberattacks

Multiple South Korean financial institutions, including major banks, have suffered data breaches in a coordinated cyber campaign, prompting a government...

000

CyberNetSecIO @netsecio.bsky.social · 17h

New ransomware group 'Storm' claims attack on Nipigon District Memorial Hospital in Canada. The incident highlights the continued threat to the healthcare sector from emerging extortion gangs. #Ransomware #CyberAttack #Healthcare #Storm 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Storm Ransomware Group Claims Attack on Canadian Hospital

The newly emerged Storm ransomware group has claimed responsibility for a cyberattack on the Nipigon District Memorial Hospital in Ontario, Canada.

000

CyberNetSecIO @netsecio.bsky.social · 17h

Critical RCE flaw in Rejetto HFS (CVE-2026-61500, CVSS 9.3) is under active attack. A weak RNG allows attackers to forge admin cookies. A Chinese threat actor is targeting US servers. Patch to HFS version 3.2.1 now! #RCE #Vulnerability #CyberAttack 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Attackers Actively Exploit Critical RCE Flaw in Rejetto HFS

A critical RCE vulnerability (CVE-2026-61500) in Rejetto HFS is being actively exploited, allowing attackers to forge admin sessions due to a weak random...

000

CyberNetSecIO @netsecio.bsky.social · 17h

Cloudflare has fixed a critical cross-tenant data exposure flaw in its Containers platform. The bug could let customers read residual data from other tenants' containers. Cloudflare found no evidence of malicious exploitation. #CloudSecurity #Vulnera... 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Cloudflare Fixes Cross-Tenant Data Leak in Container Service

Cloudflare has patched a cross-tenant data exposure vulnerability in its Containers service that could have allowed customers to read residual data from...

000

CyberNetSecIO @netsecio.bsky.social · 17h

Financial giant TIAA discloses a data breach exposing client names and Social Security numbers. The firm discovered the 'unauthorized acquisition' of data on Sept 8 and is offering 24 months of identity protection. #DataBreach #TIAA #Finance #PII 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

TIAA Discloses Data Breach Exposing Client SSNs

Financial services provider TIAA has reported a data breach that exposed the names and Social Security numbers of an undisclosed number of clients.

000

CyberNetSecIO @netsecio.bsky.social · 17h

Ed-tech vendor Frontline Education discloses a data breach after a third-party software flaw was exploited. The incident exposed sensitive school employee data, including names, addresses, and Social Security numbers. #DataBreach #SupplyChain #Education 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Frontline Education Breach Exposes School Employee SSNs

Frontline Education, an ed-tech vendor, has disclosed a data breach exposing school employee Social Security numbers due to a third-party software...

000

CyberNetSecIO @netsecio.bsky.social · 17h

Citrix patches critical zero-day (CVE-2026-88779) in NetScaler ADC & Gateway under active attack. The flaw can cause DoS & potential RCE. CISA added it to its KEV catalog, mandating federal agencies to patch by Oct 7. #NetScaler #ZeroDay #CVE 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Citrix Patches Critical NetScaler Zero-Day Under Active Attack

Citrix releases emergency patches for a critical zero-day vulnerability, CVE-2026-88779, in NetScaler ADC and Gateway products actively exploited in...

000

CyberNetSecIO @netsecio.bsky.social · 04/10/2026

The U.S. Senate unanimously passed the Health Care Cybersecurity and Resiliency Act to strengthen cyber defenses for healthcare providers through grants, training, and improved agency coordination. #Healthcare #Cybersecurity #Policy 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

U.S. Senate Passes Bipartisan Healthcare Cybersecurity Act

The U.S. Senate has passed the Health Care Cybersecurity and Resiliency Act to provide grants, training, and resources to bolster the cybersecurity of...

001

CyberNetSecIO @netsecio.bsky.social · 04/10/2026

A key suspect from the ShinyHunters hacking group, Saif al-Din Khader ('Rey'), has been detained in Jordan and is reportedly cooperating with the FBI to identify other members. #ShinyHunters #Cybercrime #FBI 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Suspected ShinyHunters Hacker

A suspected key member of the ShinyHunters hacking group, known as

000

CyberNetSecIO @netsecio.bsky.social · 04/10/2026

Fortra patches 3 critical vulnerabilities in its BoKS Privileged Access Manager. Flaws include auth bypass (CVE-2026-79901, 9.9), RCE (CVE-2026-79898, 9.1), and buffer overflow (CVE-2026-12627, 9.8). #CVE #PatchNow #Linux 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Fortra Patches Critical Flaws in BoKS Privileged Access Manager

Fortra has released security patches for three critical vulnerabilities in its BoKS Privileged Access Manager, including flaws allowing for authentication...

000

CyberNetSecIO @netsecio.bsky.social · 04/10/2026

Epic Systems pauses MyChart development for 6 weeks to fix critical security flaws found by an AI model. The vulnerabilities could allow undetected access to patient records affecting millions. #Healthcare #CyberSecurity #MyChart 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Epic Systems Halts Development to Fix MyChart Security Flaws

Epic Systems has paused product development for its MyChart patient portal to address significant security vulnerabilities that could expose patient...

010

CyberNetSecIO @netsecio.bsky.social · 04/10/2026

cyber.netsecops.io

South Korean Financial Sector Hit by Coordinated Cyberattacks

Multiple South Korean financial institutions, including major banks, have suffered data breaches in a coordinated cyber campaign, prompting a government...

000

CyberNetSecIO @netsecio.bsky.social · 04/10/2026

Technical University of Denmark (DTU) suffers a major data breach affecting up to 200,000 users. Attackers compromised the DTUBasen IAM system, exposing sensitive data including CPR numbers, risking identity theft. #DataBreach #Denmark #CyberSecurity 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Technical University of Denmark Breach Exposes Data of 200,000

The Technical University of Denmark (DTU) reports a major data breach affecting up to 200,000 users after its DTUBasen identity management system was...

100

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

Fortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Critical Fortinet FortiMail Zero-Day Exploited for RCE

A critical zero-day vulnerability (CVE-2026-104286) in Fortinet FortiMail is being actively exploited. The flaw allows unauthenticated RCE.

000

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

Cybersecurity leaders warn that AI-powered attacks are outpacing defensive capabilities. The rise of autonomous hacking agents and supply chain risks demands a shift to AI-driven defense. #AI #CyberSecurity #ThreatIntel #InfoSec 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Industry Leaders Warn AI-Powered Attacks Are Outpacing Defenses

At the Asia New Vision Forum, cybersecurity experts warned that AI is enabling autonomous hacking and expanding threats beyond the capabilities of current...

011

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack

Citrix releases urgent patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in NetScaler ADC and Gateway under active...

000

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

'Booba Project' ransomware group claims attack on a NY healthcare provider, alleging theft of 70GB of data. Patient PHI at risk. #Ransomware #DataBreach #Healthcare #BoobaProject 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Booba Project Ransomware Claims Attack on NY Healthcare Provider

The

000

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

New Zealand's NCSC report officially names China as the most 'persistent and capable' state-sponsored cyber threat, linking it to numerous attacks on critical sectors. #China #CyberEspionage #ThreatIntel #NewZealand #APT 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

New Zealand NCSC Report Names China as Top Cyber Threat

A new report from New Zealand

100

CyberNetSecIO @netsecio.bsky.social · 03/10/2026

A critical RCE vulnerability (CVSS 9.8) has been disclosed in multiple Siemens PLC models, posing a severe risk to industrial control systems. Admins are urged to apply firmware updates immediately. #Siemens #PLC #ICS #OTsecurity #Vulnerability 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Critical RCE Vulnerability (CVSS 9.8) Affects Siemens PLCs

A critical remote code execution (RCE) vulnerability with a 9.8 CVSS score has been found in Siemens Programmable Logic Controllers (PLCs), threatening...

000

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

Cisco patches critical auth bypass zero-day (CVE-2026-76504) in Catalyst SD-WAN Manager. CVSS 9.8 flaw actively exploited. Unauthenticated attackers can gain admin access. CISA added to KEV. Patch immediately! #Cisco #ZeroDay #SDWAN #CVE202676504 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Cisco Patches Actively Exploited SD-WAN Auth Bypass Zero-Day

Cisco is patching a critical, actively exploited zero-day vulnerability (CVE-2026-76504) in its Catalyst SD-WAN Manager that allows for complete...

000

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

Two major supply chain incidents: Pentagon reveals a 2025 data breach via a 3rd party affecting military personnel. Separately, Kiteworks proactively shut down customer systems based on federal threat intel, patching a new flaw before exploitation. #... 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Pentagon Reveals Breach; Kiteworks Halts Systems on Threat Intel

The Pentagon disclosed a major data breach affecting the DMDC via a third party, while Kiteworks executed a proactive customer-wide shutdown to mitigate a...

010

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

cyber.netsecops.io

Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack

Citrix releases urgent patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in NetScaler ADC and Gateway under active...

000

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

China-aligned threat actor TA419 is targeting U.S. AI policy experts with sophisticated phishing attacks, impersonating officials to steal cloud credentials and MFA tokens via AitM techniques. #TA419 #Phishing #CyberEspionage #China #AI 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

China-Aligned Group TA419 Targets U.S. AI Policy Experts

The China-aligned espionage group TA419 is conducting sophisticated credential phishing campaigns against U.S.

010

CyberNetSecIO @netsecio.bsky.social · 02/10/2026

cyber.netsecops.io

Critical Fortinet FortiMail Zero-Day Exploited for RCE

A critical zero-day vulnerability (CVE-2026-104286) in Fortinet FortiMail is being actively exploited. The flaw allows unauthenticated RCE.

010

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

cyber.netsecops.io

Industry Leaders Warn AI-Powered Attacks Are Outpacing Defenses

At the Asia New Vision Forum, cybersecurity experts warned that AI is enabling autonomous hacking and expanding threats beyond the capabilities of current...

010

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

cyber.netsecops.io

Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack

Citrix releases urgent patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in NetScaler ADC and Gateway under active...

000

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Gartner advises CISOs: prioritize AI risks, budget for preemptive security, and treat frontier AI as an insider threat. 76% of CISOs rank AI-driven vulnerability discovery as a top risk. #CISO #Gartner #AI #Cybersecurity 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Gartner Advises CISOs to Prioritize AI Risks, Preemptive Security

Gartner outlines five key actions for CISOs to take by the end of 2026, focusing on managing AI risks and implementing preemptive security measures.

000

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Multiple data breaches disclosed, affecting US healthcare and professional services. Modoc Medical Center, Blanchard Training & Development, and others report exposure of PII, financial, and medical data. #DataBreach #Healthcare #PII 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Data Breaches at Healthcare & Professional Services Firms Disclosed

Recent disclosures reveal data breaches at multiple US organizations, including Modoc Medical Center, exposing sensitive personal, financial, and medical...

000

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Russian APT Star Blizzard (FSB) adopts new 'RedFlick' phishing technique to deploy CosmicPulse backdoor. The method streamlines attacks on Ukraine-linked orgs. #APT #StarBlizzard #Phishing #Russia #Ukraine 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Russian APT Star Blizzard Evolves Phishing with

Russian APT group Star Blizzard is using a new

110

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

Dutch security institute DIVD hacked by 'agentic AI-powered attack' exploiting two Zammad zero-days (CVE-2026-102489, CVE-2026-102490). Attackers chained RCE & privesc flaws. All Zammad users urged to patch. #ZeroDay #AI #CyberAttack #Zammad 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Dutch Security Institute Hacked via AI-Powered Zammad Zero-Days

The Dutch Institute for Vulnerability Disclosure (DIVD) was hacked using two chained zero-day vulnerabilities in Zammad helpdesk software, in what it calls...

210

CyberNetSecIO @netsecio.bsky.social · 01/10/2026

cyber.netsecops.io

Cisco Patches Actively Exploited SD-WAN Auth Bypass Zero-Day

Cisco is patching a critical, actively exploited zero-day vulnerability (CVE-2026-76504) in its Catalyst SD-WAN Manager that allows for complete...

100

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

Image-sharing service Gyazo discloses a major data breach exposing 23.6M user records and 490M image metadata records after a server vulnerability was exploited. All users are required to change their passwords. #DataBreach #Gyazo #Privacy 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Gyazo Screenshot Tool Breach Exposes 23.6M User Records, Image Data

Image-sharing tool Gyazo confirms a data breach affecting 23.6 million user accounts and 490 million image metadata records due to a server vulnerability.

000

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

Chaos ransomware group claims a cyberattack against Taiwanese industrial IoT giant Advantech. The breach could have significant supply chain implications for industrial automation and smart city tech. #Ransomware #Chaos #Advantech #IIoT #CyberAttack 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Chaos Ransomware Claims Attack on Industrial IoT Giant Advantech

The Chaos ransomware group has listed industrial IoT leader Advantech as a victim, raising concerns about a significant data breach and potential supply...

000

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

🚨 CRITICAL THREAT: Two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are under active exploitation for RCE. CISA KEV updated. Patch immediately! #CyberSecurity #ZeroDay #CVE #PatchNow 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Citrix Zero-Days and Oracle PeopleSoft Flaw Under Active Exploit

A critical threat advisory warns of active exploitation of two Citrix NetScaler zero-days and an Oracle PeopleSoft RCE vulnerability. Patching is urgent.

010

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

cyber.netsecops.io

Industry Leaders Warn AI-Powered Attacks Are Outpacing Defenses

At the Asia New Vision Forum, cybersecurity experts warned that AI is enabling autonomous hacking and expanding threats beyond the capabilities of current...

010

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

U.S. utility provider Southern Company is investigating a data breach affecting 400,000 individuals. Leaked PII includes full names, emails, and physical addresses, increasing the risk of phishing and identity theft. #DataBreach #PII #SouthernCompany 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Southern Company Investigates Data Breach Affecting 400,000 Customers

Southern Company, a major U.S. utility, is investigating a data leak of 400,000 PII records, including names, emails, and addresses, after a database was...

000

CyberNetSecIO @netsecio.bsky.social · 30/09/2026

An AI-assisted cyberattack on Spain's rail operators Adif & Renfe resulted in the exfiltration of 500GB of data. Attackers used commercial AI models to accelerate the breach, which originated from Adif's web systems. #CyberAttack #AI #CriticalInfrast... 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

AI-Assisted Attack on Spanish Rail Network Exfiltrated 500GB of Data

Investigation reveals an AI-assisted cyberattack on Spain

000

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

cyber.netsecops.io

Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack

Citrix releases urgent patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in NetScaler ADC and Gateway under active...

000

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

Unit 42 releases OperTraitor, an LLM-powered tool to audit Kubernetes operators for excessive RBAC permissions. Many operators on OperatorHub found to be overly permissive, creating silent backdoors. #Kubernetes #DevSecOps #RBAC #CloudSecurity 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

New

Unit 42 researchers release OperTraitor, an open-source tool to audit excessive RBAC permissions in Kubernetes operators, uncovering significant supply...

110

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

🚨 19 vulnerabilities, including a critical auth bypass (CVE-2026-27546), found in Pepperl+Fuchs IO-Link industrial gateways. Flaws allow root access, posing a severe risk to OT networks. Patches are available. #ICS #OTSecurity #Vulnerability 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

19 Flaws in Industrial Gateway Grant Root Access to OT Networks

Researchers found 19 flaws in a Pepperl+Fuchs industrial gateway, including a critical authentication bypass that could give attackers root access to OT...

000

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

Astrana Health discloses a data breach caused by a social engineering attack. Attackers impersonated staff and used phone spoofing to trick employees, leading to the exfiltration of confidential information. #DataBreach #SocialEngineering #Healthcare 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Astrana Health Data Breach Caused by Social Engineering Attack

Healthcare tech company Astrana Health reports a data breach resulting from a social engineering and vishing campaign that compromised confidential...

000

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

GAO report finds poor fraud management in DoD IT programs has led to billions in losses and exposes critical systems to cyber risks. The report calls for urgent implementation of anti-fraud practices. #GAO #DoD #Cybersecurity #Fraud 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

GAO: Poor Fraud Management Puts DoD IT Programs at Cyber Risk

A U.S. GAO report reveals the Department of Defense

010

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

A major data breach in Poland's healthcare sector as an SQL injection flaw in Qbusoft's Medyc software was exploited. Attackers stole patient PII and likely sensitive medical records. #DataBreach #Healthcare #SQLi #Poland 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

SQL Injection Flaw in Medyc Software Leads to Polish Health Data Breach

Polish medical software provider Qbusoft

001

CyberNetSecIO @netsecio.bsky.social · 29/09/2026

Ransomware hits Japanese conglomerate Keio Corporation, crippling payment and reservation systems at its hotels and retail stores. Train operations are unaffected due to network segmentation. #Ransomware #CyberAttack #Japan #Keio 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

Ransomware Attack on Japan

Japanese railway and retail giant Keio Corporation confirms a ransomware attack has disrupted its hospitality and retail business systems, disabling...

010

CyberNetSecIO @netsecio.bsky.social · 28/09/2026

Cybercrime infighting: ShinyHunters has hijacked the data leak site of the Clop ransomware gang. The takeover is allegedly retaliation over a stolen zero-day exploit. ShinyHunters threatens to expose Clop's operations. #ShinyHunters #Clop #Ransomware 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

ShinyHunters Hijacks Clop Ransomware Site in Inter-Gang Feud

The ShinyHunters extortion group has hijacked the dark web leak site of the Clop ransomware gang in a public feud over an allegedly stolen zero-day exploit.

000

CyberNetSecIO @netsecio.bsky.social · 28/09/2026

Honeywell report: 87% of maritime organizations were hit by a significant OT cyberattack in the last year. The industry shows critical gaps, with only 21% having a full OT asset inventory, leading to major downtime. #Maritime #CyberSecurity #OT #ICS 🌐 cyber[.]netsecops[.]io

cyber.netsecops.io

87% of Maritime Firms Hit by Cyberattacks in Past Year: Report

A new Honeywell report finds 87% of maritime organizations suffered a significant OT cyber incident in the past year, highlighting major gaps in asset...

000

CyberNetSecIO @netsecio.bsky.social · 28/09/2026

cyber.netsecops.io

Pentagon Reveals Breach; Kiteworks Halts Systems on Threat Intel

The Pentagon disclosed a major data breach affecting the DMDC via a third party, while Kiteworks executed a proactive customer-wide shutdown to mitigate a...

011