🔴 Company #28 — listed by N0n
📍 United States · Professional Services · 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-28-n0n-2026
@cyberintelligence.bsky.social
@cyberintelligence.bsky.social🔴 Company #28 — listed by N0n
📍 United States · Professional Services · 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-28-n0n-2026
@cyberintelligence.bsky.social🔴 Company #29 — listed by N0n
📍 United States · Technology · 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-29-n0n-2026
@inferlume.bsky.socialCitrix NetScaler zero days, SonicWall SSRF exploits, and FBI seizures of Flax Typhoon infrastructure headline NightWatch Edition 028. Autonomous AI agents strike banking while Git repos spread stealers.
#ThreatIntel #NetScaler #FlaxTyphoon #CyberSecurity #InfoSec
@threadlinqs.bsky.socialOne infected contractor PC put Japan's biggest karaoke chain's customer data at risk. https://intel.threadlinqs.com/threat/TL-2026-3312 #ThreatIntel #DaichiKosho #SupplyChainAttack #Karaoke
@hapsis.bsky.socialNippon Columbia malware incident exposes 8.6 million karaoke fan records
@threadlinqs.bsky.socialStolen DTU logins and abused CPR access put Danish identities in phishers' crosshairs. https://intel.threadlinqs.com/threat/TL-2026-3306 #ThreatIntel #DTUBasen #CPR #DTU
@cybergeodigest.bsky.socialToday's CyberGeoDigest — 7 stories Top: Chinese Hacker Weaponizes ARTEX AI and Claude Agents Against South Korean Banks #APT #ThreatIntel #CyberSecurity
@threadlinqs.bsky.socialOne stolen service-account token, no 2FA, years of access - non-human identities are the quiet blind spot. https://intel.threadlinqs.com/threat/TL-2026-3305 #ThreatIntel #NHI #Machine #ServiceAccount
@threadlinqs.bsky.socialPatching CitrixBleed 2 isn't enough: Anubis replays stolen session tokens to skip MFA. https://intel.threadlinqs.com/threat/TL-2026-3302 #ThreatIntel #CVE_2025_5777 #Anubis #Sphinx
@cyberintelligence.bsky.social🔴 CNESTEN, based in Morocco, found on Qilin’s leak site.
📍 Morocco · Government & Defense · 11 Oct 2026
🏴 Qilin has listed 2,344 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/cnesten-qilin-2026
@darkwebsonar.bsky.social🇮🇱 We tracked SumudCyberCmd claiming a 15.92 TB data leak from Israel's Institute for National Security Studies. The actor alleges files from research servers and analyst workstations. #DataLeak #ThreatIntel
More on this and other incidents → go.darkwebsonar.io/sumudcybercm...
@ninjaintelgroup.bsky.socialLockBit has claimed 3319 victims and counting. We track the whole ransomware ecosystem and call what's next. https://ninjalabz.io/intel-report/ #ransomware #threatintel
@ninjaintelgroup.bsky.social🗞 AI Scramble Drives Cybersecurity M&A Boom
via Dark Reading
https://www.darkreading.com/cybersecurity-analytics/ai-scramble-cybersecurity-ma-boom
#cybersecurity #infosec #threatintel
@cyberintelligence.bsky.social🔴 Company #4 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-4-n0n-2026
@beesint.bsky.social🎣 Phishing Spotlight mfacebook[.]com[.]vn 🔒 SSL: exp. 2027-01-06 🌐 Stack: nginx 🔗 https://beesint.com/pulse/cf2fa641-7ae7-45e2-abba-c52c7c9ea66d #OSINT #Phishing #ThreatIntel #CyberSecurity
@cyberintelligence.bsky.social🔴 Company #5 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-5-n0n-2026
@darkwebsonar.bsky.social🇹🇭 We tracked a ransomware claim by The Gentlemen listing the Royal Thai Air Force (rtaf.mi.th). The Gentlemen has 121 listings in the past 30 days. #Ransomware #ThreatIntel
This entry + more → darkwebsonar.io/events?utm_s...
@ninjaintelgroup.bsky.social📊 Ransomware data-drop: down 4% week-on-week (217 claims). Most active: TheGentlemen. Hot sector: Manufacturing.
📦 ninjasignal: 178 installs this week · 32 clones.
Live data + the Python client → ninjalabz.io/developers
#ransomware #threatintel
@cyberintelligence.bsky.social🔴 TQC S.A. — listed by Dragonforce
📍 Peru · Manufacturing · 11 Oct 2026
🏴 Dragonforce has listed 659 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/tqc-s-a-dragonforce-2026
@ninjaintelgroup.bsky.social🗞 U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
via Krebs on Security
https://krebsonsecurity.com/2026/09/u-s-soldier-gets-70-months-in-prison-for-att-verizon-extortions/
#cybersecurity #infosec #threatintel