Storm-2570 Uses Four Ransomware Brands—and the Same Access Tools
Microsoft links Storm-2570 to four ransomware families. Repeated remote access, credential theft and cloud uploads reveal warning signs before encryption.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 4, 2026
Latest reports
Fake Drawing Votes Target Telegram Accounts, Ukraine Warns
A fake drawing contest turns a vote into a Telegram login. Ukraine renewed the warning; check unfamiliar sessions if you entered a code.
AWS Quarantined a Leaked Key in 10 Seconds. The Response Wasn’t Over.
Unit 42 measured AWS quarantining a public GitHub key leak in 10 seconds. See what the policy limits, which log signal matters, and why…
Talking Tilly: The Camera Keeps Analysing After the Age Check
Talking Tilly requires an age selfie, analyses mood during calls and keeps different records on separate clocks. Here is what the service discloses.
Fake AI Subscription Sites Use Real Google Sign-In
Researchers linked over 100 subscription sites using genuine Google login. Learn why authentication does not verify the seller or cancel a purchase.
PAYLOAD Turns Windows Group Policy Into a Ransom Demand
PAYLOAD attackers used domain policy to display ransom notes without encrypting Windows files. The investigation explains why endpoint cleanup is not enough.
Crypto Investment Fraud: $655,000 Case Leads to Prague Search
Ukraine’s cyberpolice says a passive-income pitch sent over $655,000 to suspect-controlled crypto wallets. A Prague search uncovered potential evidence.
Three Exploited Linux Kernel Flaws: Check Your Patch Track
CISA lists three exploited Linux kernel flaws. Check the exact Ubuntu kernel track, pending fixes and the separate need to review possible compromise.
AgentCore Harness Test Exposes a Service Token Through Memory
Unit 42 demonstrated AgentCore credential theft through a support ticket. See why runtime memory, tool permissions and downstream identity matter.