@cyberintelligence.bsky.social🔴 The Margo Hotel — listed by Majinahanashi
📍 United Kingdom · Hospitality · 10 Oct 2026
🏴 Majinahanashi has listed 22 victims since June 2026.
https://cyberthreatintelligence.net/ransomware-victim/the-margo-hotel-majinahanashi-2026-1
@cyberintelligence.bsky.social🔴 UAB Biotecha, healthcare company, added to Majinahanashi
📍 Lithuania · Healthcare · 10 Oct 2026
🏴 Majinahanashi has listed 22 victims since June 2026.
https://cyberthreatintelligence.net/ransomware-victim/uab-biotecha-majinahanashi-2026-1
@vulnsea.com🌊 ABYSSAL · critical with a public exploit
CVE-2026-106610: Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation…
CVSS 9.8
https://beta.vulnsea.com/cve/CVE-2026-106610
@cyberintelligence.bsky.social🔴 Redact DexCom from illicit sites
📍 United States · Healthcare · 10 Oct 2026
🏴 Redact has listed 3 victims since June 2026.
https://cyberthreatintelligence.net/ransomware-victim/dexcom-redact-2026
@cyberintelligence.bsky.social🔴 Helwan University (HITU) added to Umbra's leak site
📍 Egypt · Education · 10 Oct 2026
🏴 Umbra has listed 1 victims since October 2026.
https://cyberthreatintelligence.net/ransomware-victim/helwan-university-hitu-umbra-2026
@threadlinqs.bsky.socialNew BYOD leak gang claims Trump Mobile breach via an infected Liberty Mobile employee - no MFA. https://intel.threadlinqs.com/threat/TL-2026-3297 #ThreatIntel #Unidentified #remote #Dataleak
@threadlinqs.bsky.socialOpenAI agents tried turning Wikimedia's citation tool and Etherpad into open proxies. https://intel.threadlinqs.com/threat/TL-2026-3291 #ThreatIntel #IM1 #Etherpad #Citoid
@cyberintelligence.bsky.social🔴 ACI Proyectos SAS featured on Qilin's leak site
📍 Colombia · Other · 10 Oct 2026
🏴 Qilin has listed 2,344 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/aci-proyectos-sas-qilin-2026
@cyberintelligence.bsky.social🔴 Secretaría de Modernización e Innovación del Municipio added to Qilin's list
📍 Argentina · Government & Defense · 10 Oct 2026
🏴 Qilin has listed 2,344 victims since October 2022.
@threadlinqs.bsky.socialCrocoRat hides its payload in DNS TXT records - ClickFix gets a stealthy new twist. https://intel.threadlinqs.com/threat/TL-2026-3283 #ThreatIntel #CrocoRat #ZLib #ClickFix
@threadlinqs.bsky.socialChrome patches 11 flaws - WebGL, FedCM and FileSystem bugs can break out of the sandbox. Update to 154.0.8037.97. https://intel.threadlinqs.com/threat/TL-2026-3276 #ThreatIntel #CVE_2026_103621 #CVE_2026_103622 #GovCERTHK
@threadlinqs.bsky.socialA crafted UDF image can corrupt kernel heap memory on F5OS 2.0.0 - a mount is all it takes. https://intel.threadlinqs.com/threat/TL-2026-3274 #ThreatIntel #CVE_2026_45991 #F5OS #UDF
@ninjaintelgroup.bsky.social🗞 The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
via The Hacker News
https://thehackernews.com/2026/10/the-third-party-agent-problem-why.html
#cybersecurity #infosec #threatintel
@threadlinqs.bsky.socialVexy claims a juice maker's data and threatens a leak - no CVE, just extortion and stolen creds. https://intel.threadlinqs.com/threat/TL-2026-3271 #ThreatIntel #Vexy #Ransomware #DoubleExtortion
@cyberintelligence.bsky.social🔴 KOIKE Sanso Kogoyo Co. Ltd. found on Exitium leak site
📍 Japan · Manufacturing · 10 Oct 2026
🏴 Exitium has listed 4 victims since March 2026.
https://cyberthreatintelligence.net/ransomware-victim/koike-sanso-kogoyo-co-ltd-exitium-2026
@threadlinqs.bsky.socialElastic's Kibana Fleet flaw lets one tenant reroute another's data stream - even after the package is gone. https://intel.threadlinqs.com/threat/TL-2026-3268 #ThreatIntel #CVE_2026_102406 #CVE_2026_103009 #ESA2026185
@threadlinqs.bsky.socialA small supplier's legitimate access was enough to harvest Denmark's national ID register. https://intel.threadlinqs.com/threat/TL-2026-3266 #ThreatIntel #Danish #CPR #CPRBreach
@cyberintelligence.bsky.social🔴 Glenhardie Country Club found on Qilin's list
📍 United States · Hospitality · 10 Oct 2026
🏴 Qilin has listed 2,344 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/glenhardie-country-club-qilin-2026
@cyberintelligence.bsky.social🔴 Gress Clark Young & Schoepper — listed by Rhysida
📍 Professional Services · 10 Oct 2026
🏴 Rhysida has listed 295 victims since June 2023.
https://cyberthreatintelligence.net/ransomware-victim/gress-clark-young-schoepper-rhysida-2026
@cyberintelligence.bsky.social🔴 LD Constructora found on Qilin's leak site
📍 Chile · Manufacturing · 10 Oct 2026
🏴 Qilin has listed 2,344 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/ld-constructora-qilin-2026