Company
Mandiant is a cybersecurity firm within Google Cloud specializing in incident response and threat intelligence, publisher of the annual M-Trends report.
Attackers altered files on AOMEI's update servers in windows of five to ten minutes between May and July 2026 to push a backdoor to Backupper installs. AOMEI has reported fixing its servers, but the researchers say that does not remove the backdoor from machines already hit.
Reality
BeyondTrust says a suspected China-nexus actor has exploited Remote Support flaw CVE-2026-102764 since late August. SaaS customers were patched on October 8, but self-hosted installs without automatic updates must be updated by hand.
Perspective Coverage
8 publishersReality
An Akira affiliate began spraying passwords at a SonicWall SSL VPN on August 4, 2026, and one worked about seven minutes later. The account had no MFA, and the ransomware deployment that followed failed after credentials and file-share data were already stolen.
Reality
The FBI confirmed a contractor's failure to apply a critical Oracle PeopleSoft patch, CVE-2026-35273, led to a breach affecting thousands of employees. Any organisation that outsources PeopleSoft operations is exposed in the same way wherever its operator has not installed the fix.
Reality
Luna Moth's leaked vishing playbook, which has not been verified, coaches callers to keep victims calm while a second operator works their machine, Check Point reported. The method needs no new malware, only a phone call and a legitimate remote-support tool, so the defense sits at the help desk.
Reality
Microsoft has tracked passkey- and SSO-themed help desk impersonation since May 2026, with the calls steering employees into adversary-in-the-middle proxies and device-code grants that hand over live Microsoft 365 sessions.
Perspective Coverage
3 publishersReality
Mandiant and Google traced a September 2026 campaign exploiting NetScaler bug CVE-2026-88772, CVSS 9.5, to root on appliances with no login. From there the intruders drop web shells and a Python tunneler that reaches into victims' internal networks to steal credentials.
Perspective Coverage
21 publishersReality
FBI said a contractor's failure to apply a security patch on a third-party platform let ShinyHunters steal personal details of thousands of bureau employees. The patch had already been issued, so the breach came down to one missed update on a platform the Bureau did not manage itself.
Perspective Coverage
11 publishersReality
ShinyHunters says a second PeopleSoft zero-day let it steal data on every FBI employee, a claim neither the FBI nor Oracle has confirmed. Two suspects have since been arrested, and PeopleSoft customers are still judging their own exposure from analysts' advice.
Reality
Dell has fixed CVE-2026-86360, a critical path traversal in Dell System Update that lets an unauthenticated remote attacker run code as root. Any server on a DSU build older than 2.3.0.0 stays exposed until it is updated.
Perspective Coverage
3 publishersReality
Chainalysis tied the $387 million Bitget hack to North Korea-linked hackers, saying it pushed their 2026 crypto theft past $1 billion. Its AI cut more than 20 hours of tracing to minutes, while the bill falls on a Bitget user fund the exchange puts above $464 million.
Perspective Coverage
3 publishersReality
Attackers using two NetScaler zero-days since early September left webshells that patching to 14.1-73.37 or 13.1-64.23 does not remove. Operators have to search every appliance for those traces, patched or not, and move OT remote access onto a jump host of its own.
Reality
Dell patched six critical flaws in its Kubernetes storage modules, one letting unauthenticated attackers pull admin credentials for every registered array. The Authorization module holds those keys for each array it fronts, so one reachable deployment exposes all the storage registered behind it.
Perspective Coverage
3 publishersReality
Kevin Mandia's Armadin raised $255.5 million at a valuation above $2.5 billion, bringing its total to $445 million seven months after launch. Its case against periodic pen tests rests on performance data from an exercise Armadin ran with a partner.
Perspective Coverage
6 publishersReality
Bitget CEO Gracy Chen doubts much of the $387.5 million stolen via a backend tied to a third-party security vendor will come back. So far about 0.2% of the loss has been frozen, so the exchange itself is paying for an outsourced security flaw.
Perspective Coverage
4 publishersReality
Kevin Mandia's AI cybersecurity startup Armadin raised a $255.5 million Series B at a valuation above $2.5 billion. Security teams comparing its AI agents with periodic human pentests have only Armadin's own platform figures to go on.
Perspective Coverage
3 publishersReality
Bitget says attackers may have used a flaw in a third-party security product to get internal credentials and forge $388 million of withdrawals. The account puts vendor software that can reach a withdrawal system inside an exchange's counterparty risk, alongside its own wallet controls.
Reality
Armadin, the AI attack-testing startup run by Mandiant founder Kevin Mandia, raised $255.5 million at a valuation above $2.5 billion. Investors are betting that always-on AI agents will take over the budget companies now spend on periodic penetration tests.
Perspective Coverage
6 publishersReality
Bitget says attackers stole $387.5 million after exploiting zero-days in two third-party security appliances. Investigators say the appliances' privileged access led the attacker to its production wallet server.
Reality
FBI's Brett Leatherman urged ShinyHunters members to surrender after the Dutch arrest of an alleged leader of a group tied to $70 million in extortion. Dutch police have not ruled out more arrests, though the public record so far shows one suspect in custody.
Perspective Coverage
9 publishersReality
Security · September 30, 2026 · Confirmed4 publishers
Security · September 29, 2026 · Confirmed3 publishers
Security · September 29, 2026 · Confirmed5 publishers
Invest · September 29, 2026 · Confirmed2 publishers
Security · September 26, 2026 · Confirmed8 publishers
Build · September 28, 2026 · Confirmed2 publishers
Leadership · September 28, 2026 · Confirmed2 publishers
Invest · September 28, 2026 · Confirmed2 publishers
Security · September 25, 2026 · Confirmed9 publishers
Invest · September 26, 2026 · Confirmed3 publishers
Invest · September 27, 2026 · Confirmed15 publishers
Product · September 25, 2026 · Confirmed3 publishers
Security · August 25, 2026 · Confirmed5 publishers
Security · August 31, 2026 · Confirmed6 publishers
Security · September 1, 2026 · Confirmed2 publishers
Security · September 7, 2026 · Confirmed3 publishers
Security · September 23, 2026 · Confirmed14 publishers
Leadership · September 16, 2026 · Confirmed2 publishers