News
📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: KillSec Ransomware-as-a-Service (RaaS) Syndicate Threat Actor / Attribution: Joint International Operation: German LKA, Europol, Eurojust, FBI, UK NCA Impact / Records Compromised: 110 Terabytes of Stolen Enterprise Data Recovered; 5 Infrastructure Nodes Seized Initial Attack
News
📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🏛️Incident Overview:Target / Organization: FELG Software sp. z o.o. (FELG Dent Platform)Threat Actor / Attribution: Threat Actor "Horus" (Extortion & Data Theft)Impact / Records Compromised: 2.4 Million Patients, 1.2M Prescriptions, PESEL IDs,
News
📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Bitget Global Cryptocurrency Exchange Threat Actor / Attribution: Suspected State-Sponsored Syndicate (Lazarus Group / DPRK) Impact / Records Compromised: $387.5 Million in Digital Assets (ETH, XRP, USDT, USDC across 11 Blockchains) Initial Attack Vector: Zero-Day
News
Executive Summary: The weekend of September 26–28, 2026, unleashed one of the most critical sequences of edge appliance emergencies and AI-augmented cyber offensives of the year. Citrix released urgent out-of-band updates and CTX697096 advisories for two actively exploited zero-day Remote Code Execution (RCE) flaws in NetScaler ADC and Gateway
News
📌Security Roundup Series: Weekend of September 28, 2026 • 4 min read deep dive🚨Vulnerability Intelligence: CVE ID: CVE-2026-88771 & CVE-2026-88772 (CWE-20 / CWE-119) Severity: CRITICAL (CVSS 9.5) Status: September 27, 2026 (Active Zero-Day, Added to CISA KEV) Affected Systems: Citrix NetScaler ADC & NetScaler Gateway 14.1, 13.1, 13.
News
📌Security Roundup Series: Weekend of September 28, 2026 • 4 min read deep dive🚨Vulnerability Intelligence: CVE ID: CVE-2026-65660 (CWE-94 / CWE-502) Severity: HIGH / CRITICAL (CVSS 8.8) Status: September 25, 2026 (Added to CISA KEV) Affected Systems: Microsoft SharePoint Server 2016, 2019, Subscription Edition Fixed In: Microsoft September 2026 Cumulative Update
News
📌Security Roundup Series: Weekend of September 28, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Kiteworks Global Customer Base (Self-Managed Deployments) Threat Actor / Attribution: Credible Federal Threat Intelligence / Unnamed APT Syndicate Impact / Records Compromised: Zero Confirmed Breaches (Preemptive Defensive Action) Initial Attack Vector: Targeted Zero-Day Weaponization against "
News
📌Security Roundup Series: Weekend of September 28, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Adif (Infrastructure Manager) & Renfe (National Railway) - Spain Threat Actor / Attribution: Unattributed Cyber Threat Actor / AI-Assisted Reconnaissance Unit Impact / Records Compromised: ~500GB Exfiltrated (Passenger Telemetry, Route Scheduling, System Logs) Initial Attack Vector:
News
📌Security Roundup Series: Weekend of September 28, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: ShinyHunters Syndicate Infrastructure / Odido / FBI Job Portal Threat Actor / Attribution: Pepijn van der Stap (Arrested) & ShinyHunters Retaliatory Affiliates Impact / Records Compromised: Terabytes of Historical & Retaliatory Extortion Data Initial Attack Vector: Offensive
News
📌Security Roundup Series: Weekend of September 28, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Global Industrial, Healthcare & Manufacturing Sectors Threat Actor / Attribution: Qilin Ransomware Syndicate (RaaS) Impact / Records Compromised: Record High: 15% of all August/September 2026 Global Ransomware Attacks Initial Attack Vector: AI-Generated Active Directory
News
Executive Summary: The final week of September 2026 witnessed an unprecedented wave of critical edge infrastructure and enterprise appliance disclosures. CISA added three high-impact zero-days to the Known Exploited Vulnerabilities catalog: an unauthenticated heap-based buffer overflow in F5 BIG-IP Access Policy Manager (CVE-2026-94127, CVSS 9.8), an actively exploited path
News
📌Security Roundup Series: https://colibrisec.org/security-roundup-f5-bigip-checkpoint-zeroday-velocloud-cisa-kev-week-of-september-25-2026/ • 4 min read deep dive🛡️Vulnerability Intelligence: F5 has released an out-of-band security advisory addressing a critical remote code execution vulnerability in BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127. The flaw allows unauthenticated remote attackers to trigger a heap-based buffer overflow within