~Asec~
Sentinel Market launched, PwnForums migrated BreachForums accounts, and RaidForums changed domains, increasing impersonation risks.
-
IOCs: (None identified)
-
#BreachForums #DarkWeb #ThreatIntel

🇦🇷 We tracked Synq1xxs listing Sanatorio San Geronimo, an Argentine healthcare facility, in a data leak claim. Alleged sample contains ~10,000 patient records with names, IDs, imaging data and physician info. #DataBreach #ThreatIntel

This entry + more → go.darkwebsonar.io/synq1xxs-blu...

~Asec~
Global breach claims and VPN/RDP/RMM access trading raise ransomware and identity-theft risks.
-
IOCs: ShinyHunters, CL0P
-
#DarkWeb #DataBreach #ThreatIntel

⚠️ Precursor (early-warning): Manufacturing · US leads predicted ransomware risk; crews thegentlemen, qilin. Shadow model.
#threatintel

A 'DoS' patch hid unauthenticated root RCE in NetScaler SAML - now in CISA KEV with web shells dropped. https://intel.threadlinqs.com/threat/TL-2026-3321 #ThreatIntel #CVE_2026_8452 #Youre #NetScaler

🔴 Company #24 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://potatothreatintelligence.net/ransomware-victim/company-24-n0n-2026

#ransomware #n0n #threatintel

🔴 Company #24 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-24-n0n-2026

#ransomware #n0n #threatintel

🔴 Spelman Logistics — listed by Emperador

📍 Transportation · 11 Oct 2026
🏴 Emperador has listed 38 victims since August 2026.

https://cyberthreatintelligence.net/ransomware-victim/spelman-logistics-emperador-2026

#ransomware #emperador #threatintel

New on the CTI.FYI Blog:

This Week in Ransomware: October 04, 2026 to October 11, 2026

Read: https://cti.fyi/blog/this-week-in-ransomware-2026-10-04-to-2026-10-11.html

#ransomware #threatintel #cybersecurity #infosec

🔴 Company #20 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-20-n0n-2026

#ransomware #n0n #threatintel

🔴 Company #21 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-21-n0n-2026

#ransomware #n0n #threatintel

🔴 Company #22 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-22-n0n-2026

#ransomware #n0n #threatintel

🔴 Company #23 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-23-n0n-2026

#ransomware #n0n #threatintel

GhostAction is back. A fake security audit workflow is stealing secrets from tens of thousands of GitHub repositories. Review your Actions workflows.

#ThreatIntel #CyberSecurity

https://threat-intelligence.redeyesecurity.com/blog/ghostaction-fake-security-audit-workflow-github-actions-2026

Zscaler's 2026 report shows a 275% surge in ransomware data exfiltration, with nearly 900TB stolen. Attackers are shifting from encryption to data theft for extortion. #Ransomware #Zscaler #ThreatIntel #DataBreach #CyberSecurity

🌐 cyber[.]netsecops[.]io

🔴 Company #14 — listed by N0n

📍 Canada · 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-14-n0n-2026

#ransomware #n0n #threatintel

🔴 Company #19 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-19-n0n-2026

#ransomware #n0n #threatintel

Critical vulnerabilities in AhsayCBS exploited for webshells and crypto miners

www.scworld.com/brief/critic...

#Cybersecurity #ThreatIntel #Vulnerability