Ironwire — Cybersecurity News

The wire275

Now reading

SecurityWeekFri, Oct 2, 2026, 9:34 AM

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek .

This is an excerpt. The full article is the property of SecurityWeek — continue reading on their site below.

Continue on SecurityWeek

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

Microsoft’s X account hacked in crypto pump-and-dump scheme

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

AI Agents Aimed SQL Injection at US and Canadian Government Sites

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools

Criminal recruiters want people on your payroll

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

Android 17 makes it harder for spyware to cover its tracks

Botnets, adversarial attacks and data poisoning top leaders’ AI threat list

AI agents keep access to company data after their work is done

New infosec products of the week: October 2, 2026

ISC Stormcast For Friday, October 2nd, 2026 https://isc.sans.edu/podcastdetail/10120, (Fri, Oct 2nd)

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Alleged KillSec Ransomware Mastermind a 16-Year-Old

AI agents hacked the hackers, stealing email addresses from security research org

Autonomous AI agents tried to hack US, Canadian government websites

Iranian accused of hacking American universities extradited from Montenegro

Authorities seize KillSec extortion group infrastructure, arrest 3 alleged members

Microsoft says threat actors are ahead in the early AI race

OpenAI software attempted to secretly scrape data from dozens of prominent websites

National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations

Researchers find Chinese hacking campaigns targeting AI firms, Asian governments

Give yourself room to be human

Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks

EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank

Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing

Police disrupt KillSec ransomware, arrest suspected teenage leader

Microsoft catches hackers exploiting Zimbra bug before disclosure

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass

Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says

Police dismantle KillSec ransomware gang allegedly led by 16-year-old

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader

AI policy circles targeted in China-linked phishing operation

MI5 warns UK academics their research may have helped Chinese spies

The Day-One Hole in Zero Trust Architecture

Preparing governments for an era of interconnected cyber risk

Insights from the 2026 Microsoft Digital Defense Report

16-year-old suspected leader of KillSec ransomware group arrested

DeepKeep’s AI Lens flags coding agent data leaks and routes destructive commands for approval

Kiteworks patches max severity code injection vulnerability

Exabeam brings AI-assisted security investigations to data that must stay on-premises

RadarFirst helps teams investigate AI bias, data exposure and unintended actions

CISO thought he had a 'r3@lg00dp@$$w0rd' but forgot to patch

AI Has Changed Attack Speed, Not Security Fundamentals

Warlock Ransomware Hits Large Spanish, Portuguese Orgs

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure

Cyberattack on major Polish invoicing platform exposes customer data

Armatura LLC Armatura One

Meari IoT Cloud Platform OpenAPI Service

Monta monta.app

Johnson Controls EasyIO Neo Series EC and CW Controllers

CISA Adds One Known Exploited Vulnerability to Catalog

ABB Protection and Control IED Manager PCM600

Johnson Controls EasyIO Neo Series EC and CW Controllers

CISA Malcolm

How Financial Services Companies Can Modernize Their Software Supply Chain

England's schools are getting better at mopping up cyber incidents

Microsoft enables Windows settings backup by default for orgs

Connected Cars Are a Surveillance Platform

FBI tells ShinyHunters members to turn themselves in, after arrest of alleged leader

ShinyHunters suspect arrested, and is now investigated over alleged murder plots

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates

UK privacy watchdog starts over with new board and Manchester HQ

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

The Fine Art of Frustrating the Adversary

Hackers stole Pentagon personnel records of over 3 million people

Fewer women than ever in UK's 'old boys' club' cyber industry

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version

Metamask discloses security incident affecting its infrastructure

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)

Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft

MetaMask Security Incident Prompts Exit of Affected Ethereum Validators

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

ISC Stormcast For Thursday, October 1st, 2026 https://isc.sans.edu/podcastdetail/10118, (Thu, Oct 1st)

Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

Beyond source code: A path to the keys to the kingdom