russia
sandworm
+7
Sep 14, 2026
•
6 min read
Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access
Also: a fired employee had days of unrevoked admin access and made excellent use of them, and Iran's IRGC commander behind critical infrastructure attacks just picked up a $10 million US bounty.
kddi
+11
Jun 29, 2026
•
6 min read
Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.
Also: a Huntress insider allegedly fed a ransomware gang live IR case details while the firm fought the breach, and KDDI's shared email system leaked 14 million accounts across six ISPs.