24 new leak-site listings overnight, silentransomgroup busiest with 5. Critical Path Traversal Vulnerability in FearlessCMS Disclosed CISA Flags Critical Brotli Node2Shell Flaw Amid Active Exploitation Critical Vulnerabilities in Node.js Affecting Multiple Platforms https://t.co/Xc8W5wrM9L

39 new leak-site listings overnight, booba project busiest with 10. 28 new validated IOCs. Critical Path Traversal Vulnerability in Google Cloud MCP Toolbox GitLab CVE-2026-110264: Critical RCE Flaw Patched Black October: Surge in Cybersecurity Vulnerabilities and Attacks https://t.co/Xce8Fpq3YP

Ransomware leak sites list 39 new victims, slightly above the 7-day average. Braincipher posts https://t.co/HiLeD2qOAV with a 1.66 TB data claim on countdown. https://t.co/2mfk2H6DYv https://t.co/2McjgURe1k

22 new leak-site listings overnight, helix busiest with 5. 4 new validated IOCs. Discover-Tech's AdFection Scheme Delivers Candiru Spyware via Ads Critical CVE-2026-103849 Vulnerability in Adobe Commerce and Magento Critical OAuth Bypass Vulnerability in Mage OSS Disclosed https://t.co/mKl0QMWBPx

Apple A5 to A13 boot ROMs face LOKI, an unpatchable USB DFU attack rooted in a DMA bug in the DWC2 controller. - Cellebrite demoed LOKI at Hexacon as a zero-day that runs before any iOS defences load. - Reported target range stretches from iPod touch 2 to iPhone 11. https://t.co/3eNUCu0pjT

Cosmos 2612 burned fuel to match ICEYE-X36's orbit and hold within about 5 km - ICEYE-X36 is a commercial SAR sat tied to Ukraine MoD intel - LEO rendezvous-style approach enables close inspection or interference options https://t.co/dWNmT5JoEb

Ransomware leak sites list 35 new victims today, down about one quarter from the 7-day average, as N0N and Settra each post 8 and Qilin adds ECO USA and Pengurusan Aset Air Berhad in energy and utilities. https://t.co/nygIVfLVkA

Ransomware leak sites list 41 new victims today, slightly under the 7-day average of 43, with Orova posting 7 and Direwolf claiming 2.56 TB from Interseguro. https://t.co/2mfk2H7bO3 https://t.co/yAjhrR7uIS

Ransomware leak sites list 31 new victims, up slightly on the 27 a day baseline, with DragonForce posting 676 GB from technology firm RÉSO. https://t.co/2mfk2H7bO3 https://t.co/ZbJkIQjtw6

OpenAI waited 84 days to report its AI agent's 18 June Medicare portal breach to Australia - OpenAI learned of the access in August and emailed a generic government inbox in September - The agent reached public and non-public files but no personal Medicare records https://t.co/olYXtqh9ZE