🔴 Company #24 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://potatothreatintelligence.net/ransomware-victim/company-24-n0n-2026
@potato.software
@potato.software🔴 Company #24 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://potatothreatintelligence.net/ransomware-victim/company-24-n0n-2026
@cyberintelligence.bsky.social🔴 Company #24 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-24-n0n-2026
@cyberintelligence.bsky.social🔴 Spelman Logistics — listed by Emperador
📍 Transportation · 11 Oct 2026
🏴 Emperador has listed 38 victims since August 2026.
https://cyberthreatintelligence.net/ransomware-victim/spelman-logistics-emperador-2026
@cti.fyiNew on the CTI.FYI Blog:
This Week in Ransomware: October 04, 2026 to October 11, 2026
Read: https://cti.fyi/blog/this-week-in-ransomware-2026-10-04-to-2026-10-11.html
@cyberintelligence.bsky.social🔴 Company #20 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-20-n0n-2026
@cyberintelligence.bsky.social🔴 Company #21 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-21-n0n-2026
@cyberintelligence.bsky.social🔴 Company #22 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-22-n0n-2026
@cyberintelligence.bsky.social🔴 Company #23 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-23-n0n-2026
GhostAction is back. A fake security audit workflow is stealing secrets from tens of thousands of GitHub repositories. Review your Actions workflows.
@netsecio.bsky.socialZscaler's 2026 report shows a 275% surge in ransomware data exfiltration, with nearly 900TB stolen. Attackers are shifting from encryption to data theft for extortion. #Ransomware #Zscaler #ThreatIntel #DataBreach #CyberSecurity
🌐 cyber[.]netsecops[.]io
@cyberintelligence.bsky.social🔴 Company #14 — listed by N0n
📍 Canada · 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-14-n0n-2026
@cyberintelligence.bsky.social🔴 Company #19 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-19-n0n-2026
@hapsis.bsky.socialCritical vulnerabilities in AhsayCBS exploited for webshells and crypto miners
@cyberintelligence.bsky.social🔴 Rhysida includes Reed & Giordano PA on leak site
📍 United States · Professional Services · 11 Oct 2026
🏴 Rhysida has listed 295 victims since June 2023.
https://cyberthreatintelligence.net/ransomware-victim/reed-giordano-pa-rhysida-2026
@threadlinqs.bsky.socialVolt Typhoon has sat in energy networks for 5+ years while Iran-linked actors rewrite PLC logic. https://intel.threadlinqs.com/threat/TL-2026-3319 #ThreatIntel #Rockwell #Dropbear #FRP
@threadlinqs.bsky.socialOne Terminal Operating System failure can halt a whole port, even with cranes intact. https://intel.threadlinqs.com/threat/TL-2026-3317 #ThreatIntel #NotPetya #LockBit #MaritimePorts
@ninjaintelgroup.bsky.social🗞 P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
via The Hacker News
https://thehackernews.com/2026/10/p7-darksword-ios-exploit-kit-adds.html
#cybersecurity #infosec #threatintel
@threadlinqs.bsky.socialA signed WatchGuard EDR driver hands any local user LSASS memory - even with VBS/HVCI on. https://intel.threadlinqs.com/threat/TL-2026-3315 #ThreatIntel #CVE_2026_13043 #PSKMAD #pskmadsys
