Patching CitrixBleed 2 isn't enough: Anubis replays stolen session tokens to skip MFA. https://intel.threadlinqs.com/threat/TL-2026-3302 #ThreatIntel #CVE_2025_5777 #Anubis #Sphinx
@threadlinqs.bsky.social
@threadlinqs.bsky.socialPatching CitrixBleed 2 isn't enough: Anubis replays stolen session tokens to skip MFA. https://intel.threadlinqs.com/threat/TL-2026-3302 #ThreatIntel #CVE_2025_5777 #Anubis #Sphinx
@cyberintelligence.bsky.social🔴 CNESTEN, based in Morocco, found on Qilin’s leak site.
📍 Morocco · Government & Defense · 11 Oct 2026
🏴 Qilin has listed 2,344 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/cnesten-qilin-2026
@darkwebsonar.bsky.social🇮🇱 We tracked SumudCyberCmd claiming a 15.92 TB data leak from Israel's Institute for National Security Studies. The actor alleges files from research servers and analyst workstations. #DataLeak #ThreatIntel
More on this and other incidents → go.darkwebsonar.io/sumudcybercm...
@ninjaintelgroup.bsky.socialLockBit has claimed 3319 victims and counting. We track the whole ransomware ecosystem and call what's next. https://ninjalabz.io/intel-report/ #ransomware #threatintel
@ninjaintelgroup.bsky.social🗞 AI Scramble Drives Cybersecurity M&A Boom
via Dark Reading
https://www.darkreading.com/cybersecurity-analytics/ai-scramble-cybersecurity-ma-boom
#cybersecurity #infosec #threatintel
@cyberintelligence.bsky.social🔴 Company #4 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-4-n0n-2026
@beesint.bsky.social🎣 Phishing Spotlight mfacebook[.]com[.]vn 🔒 SSL: exp. 2027-01-06 🌐 Stack: nginx 🔗 https://beesint.com/pulse/cf2fa641-7ae7-45e2-abba-c52c7c9ea66d #OSINT #Phishing #ThreatIntel #CyberSecurity
@cyberintelligence.bsky.social🔴 Company #5 — listed by N0n
📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/company-5-n0n-2026
@darkwebsonar.bsky.social🇹🇭 We tracked a ransomware claim by The Gentlemen listing the Royal Thai Air Force (rtaf.mi.th). The Gentlemen has 121 listings in the past 30 days. #Ransomware #ThreatIntel
This entry + more → darkwebsonar.io/events?utm_s...
@ninjaintelgroup.bsky.social📊 Ransomware data-drop: down 4% week-on-week (217 claims). Most active: TheGentlemen. Hot sector: Manufacturing.
📦 ninjasignal: 178 installs this week · 32 clones.
Live data + the Python client → ninjalabz.io/developers
#ransomware #threatintel
@cyberintelligence.bsky.social🔴 TQC S.A. — listed by Dragonforce
📍 Peru · Manufacturing · 11 Oct 2026
🏴 Dragonforce has listed 659 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/tqc-s-a-dragonforce-2026
@ninjaintelgroup.bsky.social🗞 U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
via Krebs on Security
https://krebsonsecurity.com/2026/09/u-s-soldier-gets-70-months-in-prison-for-att-verizon-extortions/
#cybersecurity #infosec #threatintel
@potato.softwareTwo critical auth-bypass flaws expose HR and CRM platforms to complete compromise—while Chinese APTs weaponize BO agents against PaperCut NG/MF.
5 sources verified · mashingallthethings.com
#infosec #threatintel #potatosecurity #PaperCut #SecurityAlert
@raven-sec.bsky.socialTwo critical auth-bypass flaws expose HR and CRM platforms to complete compromise—while Chinese APTs weaponize AI agents against PaperCut NG/MF.
5 sources verified · hackingallthethings.com
#infosec #threatintel #cybersecurity #PaperCut #SecurityAlert
@ninjaintelgroup.bsky.social🗞 Probably Fine Daily No. 14
SonicWall patched on Tuesday. It was being exploited by Friday.
Today's threat brief, read by AI — with receipts.
https://ninjalabz.io/daily/2026-10-11/
@ninjaintelgroup.bsky.social⚠️ Precursor (early-warning): Manufacturing · US leads predicted ransomware risk; crews thegentlemen, qilin. Shadow model.
#threatintel
@cyberintelligence.bsky.social🔴 BONJOUR GROUP — listed by Majinahanashi
📍 India · Other · 10 Oct 2026
🏴 Majinahanashi has listed 22 victims since June 2026.
https://cyberthreatintelligence.net/ransomware-victim/bonjour-group-majinahanashi-2026-1
@cyberintelligence.bsky.social🔴 CALICHE — listed by Majinahanashi
📍 Chile · Energy & Utilities · 10 Oct 2026
🏴 Majinahanashi has listed 22 victims since June 2026.
https://cyberthreatintelligence.net/ransomware-victim/caliche-majinahanashi-2026-1
@cyberintelligence.bsky.social🔴 Camandona SA — listed by Majinahanashi
📍 10 Oct 2026
🏴 Majinahanashi has listed 22 victims since June 2026.
https://cyberthreatintelligence.net/ransomware-victim/camandona-sa-majinahanashi-2026-1
@cyberintelligence.bsky.social🔴 CARIBE / SUBRA — listed by Majinahanashi
📍 Other · 10 Oct 2026
🏴 Majinahanashi has listed 22 victims since June 2026.
https://cyberthreatintelligence.net/ransomware-victim/caribe-subra-majinahanashi-2026-1