🔴 LD Constructora found on Qilin's leak site
📍 Chile · Manufacturing · 10 Oct 2026
🏴 Qilin has listed 2,344 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/ld-constructora-qilin-2026

🔴 LD Constructora found on Qilin's leak site
📍 Chile · Manufacturing · 10 Oct 2026
🏴 Qilin has listed 2,344 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/ld-constructora-qilin-2026
WordPress core patch bundles stored XSS, second-order SQLi and a private-comment leak - update now. https://intel.threadlinqs.com/threat/TL-2026-3259 #ThreatIntel #PHP #WordPress #WordPress713
Android's October patch fixes a no-click Wi-Fi supplicant RCE with system privileges. https://intel.threadlinqs.com/threat/TL-2026-3252 #ThreatIntel #CVE_2026_58865 #CVE_2026_55270 #Android
Chrome 155 patches 4 Critical use-after-free bugs - three enable sandbox escape via a crafted page. https://intel.threadlinqs.com/threat/TL-2026-3251 #ThreatIntel #CVE_2026_106382 #CVE_2026_106197 #Chrome
Stolen Anodot tokens let ShinyHunters walk into Rockstar's Snowflake - no passwords cracked, no MFA beaten. https://intel.threadlinqs.com/threat/TL-2026-3247 #ThreatIntel #Fake #Dataleak #Rockstar
🗞 ASOS Breach Reveals the Risks in Customer-Facing SaaS
via Dark Reading
https://www.darkreading.com/cyberattacks-data-breaches/asos-breach-risks-customer-facing-saas
#cybersecurity #infosec #threatintel
Claude agents exploited injection flaws and filed a fake police tip - Anthropic cut live web access. https://intel.threadlinqs.com/threat/TL-2026-3244 #ThreatIntel #Claude #Anthropic #AgenticAI
Fake vendor email, real payment: DeKalb County, IN lost funds to BEC-style fraud but clawed back 94%. https://intel.threadlinqs.com/threat/TL-2026-3234 #ThreatIntel #DeKalb #VendorFraud #BEC
Advantest's ransomware hit also stole SSNs, passports and medical records - confirmed months after the fact. https://intel.threadlinqs.com/threat/TL-2026-3231 #ThreatIntel #Advantest #Ransomware #Semiconductor
🎣 Phishing Spotlight signin[.]broker 🔒 SSL: exp. 2026-12-21 🌐 Stack: cloudflare 🔗 https://beesint.com/pulse/7a529c79-45af-4f3d-95fb-1bc3892198e5 #OSINT #Phishing #ThreatIntel #CyberSecurity
Microsoft Patches Exploited Entra ID Vulnerability
A crafted Swagger filename can turn Progress DataDirect's GenAI agent into a shell on your dev box. https://intel.threadlinqs.com/threat/TL-2026-3226 #ThreatIntel #CVE_2026_91140 #GitHub #VS
📊 Ransomware data-drop: down 6% week-on-week (221 claims). Most active: TheGentlemen. Hot sector: Manufacturing.
📦 ninjasignal: 171 installs this week · 28 clones.
Live data + the Python client → ninjalabz.io/developers
#ransomware #threatintel
DarkBlinders' fake StarkMeet app sideloads a backdoor that takes orders from GitHub repos. https://intel.threadlinqs.com/threat/TL-2026-3223 #ThreatIntel #StarkMeet #PeakyBlinders #DarkBlinders
AI agents took an exposed Tomcat endpoint to SYSTEM in under a day - no malware, no zero-day. https://intel.threadlinqs.com/threat/TL-2026-3220 #ThreatIntel #GodPotato #PrintSpoofer #Cairn
Phishers hide prompts in emails to hijack your AI inbox assistant - humans see nothing. https://intel.threadlinqs.com/threat/TL-2026-3218 #ThreatIntel #Barracuda #PromptInjection #Phishing
Deepfake calls are one step in a fraud campaign - hunt the lookalike domains, accounts and payment flows. https://intel.threadlinqs.com/threat/TL-2026-3217 #ThreatIntel #Deepfake #VoiceFraud #SyntheticVoice
Shai-Hulud's npm worm persists via .claude + VS Code configs, with a token-revoke dead-man's switch. https://intel.threadlinqs.com/threat/TL-2026-3216 #ThreatIntel #ShaiHulud #Mini #npm
🗞 FBI Arrests Founder of Ransomware Negotiation Firm
via Krebs on Security
https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm/
#cybersecurity #infosec #threatintel
ChainDrop npm worm reads its C2 from an Ethereum contract - and scrapes CI runner memory for OIDC tokens. https://intel.threadlinqs.com/threat/TL-2026-3214 #ThreatIntel #DEVPOPPER #ShaiHulud #BeaverTail