Cyber Threat Intel Daily Briefing — 2026-10-28

CYBER THREAT INTEL

DAILY BRIEFING · 2026-10-28 12:15 UTC · REPORT BRIEF-20261028-121510

OPEN // LE

01

Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows – CVE-2026-104351 (CVSS score:

SRC: The Hacker News Wed, 28 Oct 2026 16:45:51 +0530 https://thehackernews.com/2026/10/adobe-fixes-8-critical-campaign-classic.html

02

Long-Hidden Flaws Patched in EPICS Research Facility Control Software

Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs. The post Long-Hidden Flaws Patched in EPICS Research Facility Control Software appeared first on SecurityWeek.

SRC: SecurityWeek Wed, 28 Oct 2026 10:48:00 +0000 https://www.securityweek.com/long-hidden-flaws-patched-in-epics-research-facility-control-software/

03

CISA warns of hackers now exploiting critical Node2Shell flaw

On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. […]

SRC: BleepingComputer Wed, 28 Oct 2026 06:46:23 -0400 https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-now-exploiting-critical-node2shell-flaw/

04

Hackers Start Probing Fresh Oracle EBS Vulnerability

CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek.

SRC: SecurityWeek Wed, 28 Oct 2026 09:14:23 +0000 https://www.securityweek.com/hackers-start-probing-fresh-oracle-ebs-vulnerability/

05

Nefilim and Hive ransomware affiliate gets 70 months in prison

A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021. […]

SRC: BleepingComputer Wed, 28 Oct 2026 05:43:15 -0400 https://www.bleepingcomputer.com/news/security/nefilim-and-hive-ransomware-affiliate-gets-70-months-in-prison/

06

Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach

Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October 28 and pays only if a tip helps lead to an arrest or an internat

SRC: The Hacker News Wed, 28 Oct 2026 12:43:21 +0530 https://thehackernews.com/2026/10/japans-gmo-offers-1-million-bounty-to.html

07

External Teams Chats Anchor 15-Minute Malware Delivery

Mail bombing is getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.

SRC: DarkReading Tue, 27 Oct 2026 20:42:40 GMT https://www.darkreading.com/cloud-security/email-bombing-external-teams-chats-repeatable-access-path

08

Japan's GMO urges customers to shut down PCs amid ransomware threat

The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a ransomware attack today. […]

SRC: BleepingComputer Tue, 27 Oct 2026 19:35:51 -0400 https://www.bleepingcomputer.com/news/security/japans-gmo-urges-customers-to-shut-down-pcs-amid-ransomware-threat/

09

Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature

Interpol's annual Operation Serengeti, now on its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds.

SRC: DarkReading Wed, 28 Oct 2026 06:00:00 GMT https://www.darkreading.com/cybersecurity-operations/third-serengeti-sweep-1400-arrests-investigations-mature

10

The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest

Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses. Huntress Labs ranks the threats hitting organizations hardest, highlighting which attack techniques deserve immediate attention and

SRC: BleepingComputer Tue, 27 Oct 2026 10:01:11 -0400 https://www.bleepingcomputer.com/news/security/the-huntress-tragic-quadrant-ranking-threats-hitting-businesses-hardest/

11

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind. ANY.R

SRC: The Hacker News Wed, 28 Oct 2026 16:00:00 +0530 https://thehackernews.com/2026/10/american-organizations-under-attack.html

12

CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors

SRC: The Hacker News Tue, 27 Oct 2026 23:56:46 +0530 https://thehackernews.com/2026/10/cyberstrikeai-uses-44-ai-agents-to.html

13

Warp discloses breach exposing AI agent logs, user telemetry data

Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure. […]

SRC: BleepingComputer Tue, 27 Oct 2026 12:15:39 -0400 https://www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/

14

Japan internet giant GMO says hackers posted stolen customer data

Japan's GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.

SRC: TechCrunch Security Tue, 27 Oct 2026 13:32:57 +0000 https://techcrunch.com/2026/10/27/japan-internet-giant-gmo-says-hackers-posted-stolen-customer-data/

15

3 Frameworks to Protect CISOs & Orgs Against AI Liability

Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.

SRC: DarkReading Tue, 27 Oct 2026 21:15:03 GMT https://www.darkreading.com/cyber-risk/3-frameworks-cisos-ai-liability

16

SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack

A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.

SRC: DarkReading Tue, 27 Oct 2026 19:58:06 GMT https://www.darkreading.com/cyber-risk/sboms-alone-scope-supply-chain-attack

17

Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies. The post Nobody Trusts the Security Questionnaire. We Rely on It Anyway. appeared first on SecurityWeek.

SRC: SecurityWeek Wed, 28 Oct 2026 10:30:00 +0000 https://www.securityweek.com/nobody-trusts-the-security-questionnaire-we-rely-on-it-anyway/

18

Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems. The post Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise appeared first on SecurityWeek.

SRC: SecurityWeek Wed, 28 Oct 2026 09:48:24 +0000 https://www.securityweek.com/secrets-management-firm-infisical-valued-at-600-million-after-40-million-raise/

19

FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering

The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The move was in response to the service being used to commit and facilitate prolific criminal activity, including "the advertisement of sexually e

SRC: The Hacker News Wed, 28 Oct 2026 13:07:50 +0530 https://thehackernews.com/2026/10/fbi-seizes-virtualine-domain-over.html

20

OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests

OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. […]

SRC: BleepingComputer Tue, 27 Oct 2026 18:43:27 -0400 https://www.bleepingcomputer.com/news/artificial-intelligence/openais-gpt-61-terra-is-safer-overall-but-shows-more-destructive-action-flags-in-tests/

[ SOURCE ] OpenPhish (18 indicator(s))