Cyber — daily report — 2026-11-06
In ultimele 24-36 de ore, atacurile asupra infrastructurii critice de răcire (lanțuri de supermarketuri și depozite frigorifice din Europa și SUA) au dominat, alături de o campanie de inginerie socială asistată de AI care a furat peste 129 de milioane de dolari prin impersonarea directorilor, precum și de o vulnerabil…
Cyber — daily report — 2026-11-05
The past 24-36 hours have been dominated by a wave of cyberattacks with implications for critical infrastructure in Europe: sabotage of the cooling systems of blood centres in France and of supermarket chains in several countries, attributed to pro-Russian groups, as well as the compromise of the IT provider Amadeus,…
Cyber — daily report — 2026-11-04
In the last 24-36 hours, two fronts have dominated: a campaign of cyberattacks against refrigerators and freezers in supermarkets (at least 11 European countries, including Romania, Germany and the United Kingdom), and the record theft of $6.3 billion from Binance, attributed to the North Korean group, through fake jo…
Cyber — daily report — 2026-11-03
In the last 24-36 hours, coordinated cyberattacks were reported against the refrigeration systems of supermarkets in several European countries (Belgium, Sweden, Luxembourg, Ireland, Estonia, Romania), with food losses estimated at tens of thousands of euros. Simultaneously, emergency alert systems in Russia and Ukrai…
Cyber — daily report — 2026-11-02
The last 24-36 hours have been dominated by major incidents with cross-border impact: the theft of 6.3 billion USD in cryptocurrency from Binance, attributed by the FBI to the North Korean group TraderTraitor, and security incidents in government infrastructure in Slovenia, Russia and Moldova. The spyware campaign tar…
Cyber — daily report — 2026-11-01
The most important event of the past 24-36 hours is the cyberattack on Binance, estimated at 6.3 billion dollars, preliminarily attributed to the North Korean group Lazarus; Binance covered approximately 90% of the funds, and the FBI officially accused North Korea. In parallel, critical vulnerabilities were reported (…
Cyber — daily report — 2026-10-31
The most important event of the past 24-36 hours is the cyberattack on the Binance platform, estimated at $6.3 billion, preliminarily attributed to North Korean teams, with approximately $3 billion frozen on-chain. In parallel, a critical vulnerability in the Linux kernel (MPTCP) has been reported, allowing remote com…
Cyber — daily report — 2026-10-30
The most important event of the period is the security incident at Binance, investigated as possibly the largest theft in the history of cryptocurrencies, with reported sums between 5.6 and 5.8 billion USD. In parallel, Polymarket temporarily suspended trading after a third-party service used to distribute cryptocurre…
Cyber — daily report — 2026-10-29
In ultimele 24-36 de ore au fost marcate de incidente majore de securitate: un atac cibernetic asupra sistemelor guvernamentale din Republica Moldova ce a compromis datele a aproximativ 750.000 de persoane, o scurgere de date de peste 40.000 de angajați DHS (SUA) și o campanie activă de exploatare a unei vulnerabilită…
Cyber — daily report — 2026-10-28
In the last 24-36 hours there has been a high number of active incidents: ransomware attacks against the healthcare sector (UNM Health), the compromise of South Korean financial systems (Bithumb, Mirae Asset, Daishin), and a ransomware threat at GMO Group in Japan. In parallel, a critical vulnerability in UEFI firmwar…
Cyber — daily report — 2026-10-27
In the last 24-36 hours, a wave of critical remote code execution vulnerabilities in the Brotli compression library (dubbed HTTP2Shell, Broccoli2Shell, Node2Shell, PHP2Shell) has dominated the landscape, affecting Node.js, .NET, PHP and industrial products. In parallel, major security incidents have targeted GMO Inter…
Cyber — daily report — 2026-10-26
In the last 24‑36 hours, critical vulnerabilities have been reported in Tailscale SSH and PHP2Shell, AI‑assisted exploits, and major incidents at Dreamhost and airline companies, highlighting an increase in trust‑chain attacks and the use of AI in post‑exploitation.
Cyber — daily report — 2026-10-22
In ultimele 24-36 de ore, atenția este concentrată pe o vulnerabilitate critică în limbajul PHP (familia PHP2Shell, cu două CVE-uri critice și un al treilea potențial), care a dus la indisponibilitatea temporară a unor site-uri guvernamentale, spitale, universități și platforme WordPress, cu indicii de încercări de ex…
Cyber — daily report — 2026-10-21
In the last 24-36 hours, the focus has been the compromise of TLS certificates issued by the certificate authority eMudhra, with eight weak intermediate keys that allow private keys to be recovered quickly, prompting Google, Mozilla and Apple to block the affected certificates. In parallel, several ransomware groups (…
Cyber — daily report — 2026-10-20
În ultimele 24-36 de ore, au fost înregistrate atacuri supply-chain care au vizat distribuitori de software legitim: pachetul WordPress Rank Math PRO a fost compromis cu un backdoor auto-restaurabil, iar serverele AOMEI au fost folosite pentru distribuirea de malware prin mecanismul de promovare din aplicație. În para…
Cyber — daily report — 2026-10-19
In the last 24-36 hours, two main risk vectors have emerged: active exploitation of an OS command injection vulnerability in SiteGuard Server Edition (command execution as root/SYSTEM), and the compromise of Microsoft 365 tenants through a supply-chain attack targeting ConnectWise Cloud Backup. In parallel, a German p…
Cyber — daily report — 2026-10-18
In the past 24-36 hours, a wave of incidents targeting the software supply chain and cloud identities has marked the landscape: the compromise of a ConnectWise credential enabled access to 173 Microsoft 365 tenants, while an Israeli advertising provider served as a delivery channel for zero-click spyware (Candiru). In…
Cyber — daily report — 2026-10-17
In the last 24-36 hours, a series of vulnerabilities actively exploited in edge devices has been marked (BeyondTrust, with a zero-day used by a state-associated Chinese espionage group), a critical bug in Magento/Adobe Commerce (CVE-2026-103849, maximum severity), and a zero-click campaign with Candiru spyware deliver…
Cyber — daily report — 2026-10-16
The last 24-36 hours have been dominated by zero‑click campaigns through online ads (Candiru/Al Jazeera, mercenary spyware), a supply‑chain intrusion that affected Nextcloud instances by exploiting CVE-2026-110447 in Collabora, and an incident that impacted French supermarkets by compromising refrigeration controllers…
Cyber — daily report — 2026-10-15
The reporting period is dominated by the active exploitation of critical zero-days in security products: Palo Alto PAN-OS (CVE-2026-0322), Cisco Secure Email Gateway (unauthenticated root RCE) and Ivanti Connect Secure (authentication bypass + RCE). An attack on IoT refrigeration systems in ~700 supermarkets in France…