Retail giant Ahold Delhaize takes systems offline after cyberattack
@hapsis.bsky.social
@hapsis.bsky.socialRetail giant Ahold Delhaize takes systems offline after cyberattack
@hapsis.bsky.socialInside AvisLoader: A Windows Malware Loader Built to Resist Disruption
@threadlinqs.bsky.socialXWorm is back as a plugin platform - rootkit, webcam spying and ransomware loaded in memory on demand. https://intel.threadlinqs.com/threat/TL-2026-3363 #ThreatIntel #XWorm #Remcos #XCoderTools
@inferlume.bsky.socialCritical vulnerabilities in Gitea and Bricksforge WordPress plugins face active exploitation as CyberXero deploys autonomous AI agents and P7 DarkSword raids iOS keychains. Explore our full technical brief.
@threadlinqs.bsky.socialAvisLoader's C2 runs over Tox P2P - no domain to sinkhole, delivered by fake DocuSign ClickFix lures. https://intel.threadlinqs.com/threat/TL-2026-3362 #ThreatIntel #AvisLoader #UACMe #ClickFix
@netsecio.bsky.socialUnit 42 uncovers 'Blinder Tunnel,' an Iranian-nexus campaign targeting Iraqi critical infrastructure. Attackers use fake job lures, a custom ShelbyLoader V2 malware, and GitHub for C2 communications. #ThreatIntel #Iran #CyberSecurity #APT
🌐 cyber[.]netsecops[.]io
@threadlinqs.bsky.socialGitLab's CI/CD regex compiler flaw allows unauthenticated code execution on self-managed servers. https://intel.threadlinqs.com/threat/TL-2026-3356 #ThreatIntel #CVE_2026_97229 #GitLab #RCE
@threadlinqs.bsky.socialGoogle DevSite's OAuth secret was also its Flask signing key - forged cookies led to pickle RCE. https://intel.threadlinqs.com/threat/TL-2026-3355 #ThreatIntel #Python #pickletoolsdis #curl
@cyberintelligence.bsky.social🔴 PIC GROUP, INC — listed by Akira
📍 United States · Other · 12 Oct 2026
🏴 Akira has listed 1,632 victims since April 2023.
https://cyberthreatintelligence.net/ransomware-victim/pic-group-inc-akira-2026
@threadlinqs.bsky.socialNew IDN tricks make fake apple.com and okta.com lookalikes render as Unicode in Chrome and Gmail. https://intel.threadlinqs.com/threat/TL-2026-3353 #ThreatIntel #Turning #IDNLookalike #Phishing
@darkwebsonar.bsky.social🇧🇷 TerroahOver claims breach of civil registry portals in Brazil, Ecuador, and Chile, alleging usernames, passwords, emails, and national IDs. 20 incidents in the past 30 days. #DataBreach #ThreatIntel
This entry + more → go.darkwebsonar.io/terroahover-...
@cyfar.ca~Malpedia~
Live open directories exposed an iOS wallet-stealing exploitation platform and victim telemetry.
-
IOCs: 156[.]239[.]230[.]120, hdios[.]cn, 66ds[.]lol
-
#DarkSword #Malware #ThreatIntel
@threadlinqs.bsky.socialIBM Verify Access: two unauthenticated deserialization RCEs at CVSS 9.8, and no workaround - only patching. https://intel.threadlinqs.com/threat/TL-2026-3352 #ThreatIntel #CVE_2026_78401 #CVE_2026_78406 #IBMVerifyAccess
@timb.me.ukIf you spotted the Samsung fridge outage a few weeks ago... just spotted reports of someone turning off France's supermarket fridges:
@threadlinqs.bsky.socialCyrillic lookalike domains slip past Chrome's homograph checks and render as the real brand. https://intel.threadlinqs.com/threat/TL-2026-3351 #ThreatIntel #IDNHomoglyph #Chrome #Phishing
@threadlinqs.bsky.socialAI found 16 runtime-verified WordPress plugin flaws - and still needed humans to weed out the false alarms. https://intel.threadlinqs.com/threat/TL-2026-3349 #ThreatIntel #Claude #VulnPlugs #WordPress
@thedailytechfeed.comOld Apache Struts flaw CVE-2016-3081 is being actively exploited—patch now. #ApacheStruts #CVE20163081 #Vulnerability #CyberSecurity #ThreatIntel #LegacySystems https://thedailytechfeed.com/outdated-apache-struts-bug-cve-2016-3081-under-active-attack/
@threadlinqs.bsky.socialVulcanRAT207.A: a WhatsApp ZIP to SYSTEM via PoolParty injection into Task Scheduler and a BYOVD AV killer. https://intel.threadlinqs.com/threat/TL-2026-3343 #ThreatIntel #VulcanRAT207A #PoolParty #VulcanRAT207
@ninjaintelgroup.bsky.social🗞 What We Missed: FBI Strikes Back at ShinyHunters
via Dark Reading
https://www.darkreading.com/identity-access-management-security/fbi-shinyhunters-claims-hack
#cybersecurity #infosec #threatintel
@threadlinqs.bsky.socialWARDEN Stealer sells a stealer, crypto clipper and loader in one small Windows binary - by subscription. https://intel.threadlinqs.com/threat/TL-2026-3342 #ThreatIntel #WARDENStealer #winwarden_stealer #WARDEN
