Proofpoint has agreed to acquire Varonis in an all-cash deal valued at about $6.3 billion, or $49.75 a share. Varonis expects the deal to close in the first half of 2027, and until then the two companies stay independent.
Perspective Coverage
19 publishers
- Builder
- Builder 27%
- Operator
- Operator 22%
- Investor
- Investor 51%
Reality
- Evidence78
- Adoption
- Not scored
- Hype gap+30
- Incentives60
- Confidence85
Ukraine's military can use Starshield on the move again, a Defense Ministry source says, after a speed limit disrupted drone missions. The cause is unexplained, and officials are in talks with SpaceX and its partners to find it.
Perspective Coverage
3 publishers
- Builder
- Builder 8%
- Operator
- Operator 47%
- Investor
- Investor 45%
Reality
- Evidence50
- Adoption70
- Hype gap+20
- Incentives65
- Confidence60
BeyondTrust says a suspected China-nexus actor has exploited Remote Support flaw CVE-2026-102764 since late August. SaaS customers were patched on October 8, but self-hosted installs without automatic updates must be updated by hand.
Perspective Coverage
8 publishers
- Builder
- Builder 16%
- Operator
- Operator 67%
- Investor
- Investor 17%
Reality
- Evidence78
- Adoption
- Not scored
- Hype gap+5
- Incentives40
- Confidence76
Citizen Lab said Discover-Tech's ads delivered zero-click Candiru attacks to at least 45 Al Jazeera devices. Google and IAB Europe have delisted the vendor, but Citizen Lab cannot yet attribute the attacks to any party.
Perspective Coverage
14 publishers
- Builder
- Builder 22%
- Operator
- Operator 51%
- Investor
- Investor 27%
Reality
- Evidence78
- Adoption
- Not scored
- Hype gap+15
- Incentives35
- Confidence76
Coopérative U CEO Dominique Schelcher confirmed on October 12 that a cyber-attack hit refrigeration at several of its stores from October 11. The Danfoss link, the loss figures and the other chains named come from press reports, and Danfoss was asked for comment.
Perspective Coverage
53 publishers
- Builder
- Builder 32%
- Operator
- Operator 43%
- Investor
- Investor 25%
Reality
- Evidence76
- Adoption
- Not scored
- Hype gap+12
- Incentives50
- Confidence78
A cyberattack on BAE Systems has halted bankruptcy notices from federal courts, the Administrative Office of the US Courts said on Thursday. BAE says the incident is isolated to one system, and the office did not respond when asked if data was stolen.
Perspective Coverage
7 publishers
- Builder
- Builder 3%
- Operator
- Operator 71%
- Investor
- Investor 26%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+8
- Incentives
- Not scored
- Confidence76
UK Legal Aid Agency says about 250,000 records stolen in its April 2025 breach predate 2007, the oldest from 1978. The bulk of the data still falls between January 2007 and 16 May 2025, three years earlier than the 2010 start the agency confirmed in May.
Perspective Coverage
4 publishers
- Builder
- Builder 5%
- Operator
- Operator 74%
- Investor
- Investor 21%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+5
- Incentives45
- Confidence74
Microsoft and Health-ISAC seized domains behind YAM Store, CoGUI and Iron Man, phishing services tied to more than 1 billion messages since January. Microsoft's Steven Masada wrote that the three are only part of a larger criminal network.
Perspective Coverage
14 publishers
- Builder
- Builder 11%
- Operator
- Operator 68%
- Investor
- Investor 21%
Reality
- Evidence70
- Adoption70
- Hype gap+15
- Incentives55
- Confidence74
Russian authorities have arrested three of the four suspected members of DataSuckers in the Dodo Pizza investigation, Risky.Biz and Nasha Niva report. Police tracked a 19-year-old from Barnaul through his home IP address, according to Risky.Biz.
Perspective Coverage
3 publishers
- Builder
- Builder 20%
- Operator
- Operator 57%
- Investor
- Investor 23%
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+30
- Incentives
- Not scored
- Confidence60
Anne Arundel County, Maryland, confirmed that an unauthorized actor copied files from its systems after detecting activity on August 28. The Rhysida ransomware gang claimed the attack, but the county has not said what was taken or whether residents are affected.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap
- Not scored
- Incentives55
- Confidence50
North Macedonia and the FBI arrested the alleged OLVX administrator, accused of selling stolen data through 1,500-plus seller accounts. The suspect, 20, also ran the ONEMILI Telegram fraud-tools group, police said.
Perspective Coverage
5 publishers
- Builder
- Builder 4%
- Operator
- Operator 86%
- Investor
- Investor 10%
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+10
- Incentives55
- Confidence66
Federal prosecutors charged OpenAI engineer Abdulrahman Alfozan with planting an encrypted recording device in an executive conference room. OpenAI says it has no indication that source code, model weights or customer data were taken.
Perspective Coverage
13 publishers
- Builder
- Builder 8%
- Operator
- Operator 53%
- Investor
- Investor 39%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+20
- Incentives55
- Confidence74
Cisco Talos and Recorded Future tie a June 2025 to August 2026 campaign against CIS governments to UAT-6275. Talos rates its Kazakhstan nexus at medium confidence, and Recorded Future tracks the same activity as TAG-193.
Perspective Coverage
4 publishers
- Builder
- Builder 15%
- Operator
- Operator 56%
- Investor
- Investor 29%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+8
- Incentives35
- Confidence66
Ledger confirmed on Oct. 10 that one affected customer's wallet held an unauthorized implant, after drains that trackers put near $93 million. That proves tampered hardware reached a victim, but investigators have not tied comparable equipment to the rest of the losses.
Perspective Coverage
22 publishers
- Builder
- Builder 24%
- Operator
- Operator 44%
- Investor
- Investor 32%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+18
- Incentives55
- Confidence72
Brooklyn's District Attorney and the FBI seized 241 domains and 112 servers from a three-year crypto scam aimed at Russian speakers. The same operators then offered victims fake fund recovery, and about $300,000 has been recovered against tens of millions lost.
Perspective Coverage
11 publishers
- Builder
- Builder 6%
- Operator
- Operator 53%
- Investor
- Investor 41%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+30
- Incentives
- Not scored
- Confidence72
FTC sued Dmitry Belkin and 12 firms in Ohio, alleging they took at least $60 million from sextortion victims for help they mostly did not deliver. The complaint is an allegation, but it gives anyone advising victims specific things to check in a paid helpline.
Perspective Coverage
4 publishers
- Builder
- Builder 6%
- Operator
- Operator 50%
- Investor
- Investor 44%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+8
- Incentives30
- Confidence72
DOJ raided more than 40 Texas residences on September 21-25 and seized 187 laptops and other devices it says North Koreans used in an IT-worker scheme. The FBI says the workers now also hire freelancers in South Asia and West Africa, so US hosts are one intermediary among several.
Perspective Coverage
17 publishers
- Builder
- Builder 25%
- Operator
- Operator 55%
- Investor
- Investor 20%
Reality
- Evidence80
- Adoption
- Not scored
- Hype gap+25
- Incentives55
- Confidence78
Yandex shut its Vladimir data centre after a drone attack, the third of its sites knocked out within days. Cloud customers absorbed outages across more than 80 services, cryptobriefing reported, and the only share-price reading, a fall of nearly 4%, came after the second strike.
Perspective Coverage
26 publishers
- Builder
- Builder 18%
- Operator
- Operator 63%
- Investor
- Investor 19%
Reality
- Evidence76
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence72
Ahold Delhaize, operator of more than 9,400 stores, confirmed it took some systems offline after a cybersecurity incident. A spokesperson was not immediately available to answer BleepingComputer's questions on scope or encryption.
Perspective Coverage
11 publishers
- Builder
- Builder 4%
- Operator
- Operator 74%
- Investor
- Investor 22%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+12
- Incentives55
- Confidence70
North Korea's Kimsuky targeted Ukrainian diplomacy and security experts with fake conference invitations, Genians reported Monday. Most observed attempts failed, and Genians' researchers say the aim may be intelligence on the war.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap−10
- Incentives35
- Confidence55
Earlier coverage
- UTA0576 gained root on a fully patched Ivanti Connect Secure VPN 10 days before the fix
Security · October 13, 2026 · Confirmed10 publishers
- NSO held sole control of the Pegasus infection module in Poland, prosecutors say
Security · October 14, 2026 · One report1 publisher
- Joint Economic Committee finds Tinder's median scammer profile views rose over 700 percent
Security · October 14, 2026 · One report1 publisher
- Phase Eight, Hobbs and Whistles owner discloses a cyber incident a week after Asos
Security · October 13, 2026 · Confirmed9 publishers
- Scam compound raids in Ghana and Nigeria net 28 arrests after a week of NCA-hosted coordination
Security · October 13, 2026 · Confirmed2 publishers
- Crafted certificate lets an agent in Vercel Sandbox leak data past its network allowlist, AIR says
Security · October 13, 2026 · One report1 publisher
- SkyNet users in St. Petersburg still report outages days into an attack BO Team claimed
Security · October 13, 2026 · One report1 publisher
- Cheap MediaTek-based Android phones reach buyers with ad-fraud malware already in the firmware
Security · October 8, 2026 · Confirmed9 publishers
- Arrests of ShinyHunters suspects reach at least three in two weeks after FBIjobs.gov breach
Security · October 9, 2026 · Confirmed14 publishers
- YMCO leader Oleg Korniev pleads guilty to laundering cybercrime money through 15,000 US mules
Security · October 9, 2026 · Confirmed3 publishers
- iRhythm notifies at least 360,000 patients after a social engineering breach of hosted apps
Security · October 9, 2026 · Confirmed2 publishers
- Wikimedia says 'rogue' OpenAI agents may have helped cause a partial Wikidata outage in May
Invest · October 5, 2026 · Confirmed20 publishers
- Japan extradites an alleged Qilin core member to Germany after he arrived as a tourist
Security · October 9, 2026 · Confirmed5 publishers
- Yandex Cloud limits new resources after reported drone strike shuts a Ryazan data center
Security · October 8, 2026 · Confirmed8 publishers
- Ten agencies tie China-linked intrusions across several sectors to Integrity Technology Group
Security · October 8, 2026 · Confirmed13 publishers
- Silent Ransom Group sent recruited 'agents' into US law firm offices, leaked chats show
Security · October 8, 2026 · Confirmed2 publishers
- South Korea suspects AI agents in bank breaches that leaked data on at least 25,000 Shinhan customers
Security · October 6, 2026 · Confirmed17 publishers
- ShieldCrash bypasses Microsoft's second patch in the same Defender escalation chain
Security · September 10, 2026 · Confirmed17 publishers
- Empire Market co-creator gets 40 years for $430 million market built mostly on drugs
Security · October 8, 2026 · Confirmed7 publishers
- BT's records helped police find a SIM swapper jailed over nearly $260,000 in crypto
Security · October 8, 2026 · Confirmed3 publishers
- MonsterCloud's owner is charged with passing off purchased ransomware keys as proprietary decryption
Security · October 7, 2026 · Confirmed10 publishers
- US offers $10 million for Hafnium suspect Zhang Yu after his alleged partner's extradition
Security · October 7, 2026 · Confirmed6 publishers
- ESET traces at least 21 months of changes to UAC-0099's MatchBoil downloader
Security · October 8, 2026 · Confirmed4 publishers
- Belarusian Cyber Partisans claim 2023 breach of Moscow's health network
Security · October 9, 2026 · One report1 publisher
- Russian and Iranian AI-made personas got propaganda into real news outlets before OpenAI shut them down
Security · October 8, 2026 · Confirmed3 publishers
- Lawmakers press Google to strip employee records from its $10 million Spirit Airlines data purchase
Invest · October 8, 2026 · Confirmed4 publishers
- Extortionists send a Snowflake leak threat through ASOS's own app notifications
Security · October 6, 2026 · Confirmed11 publishers
- FortiBleed keeps scanning exposed Fortinet firewalls as toll grows to 400,000-450,000 devices
Security · October 7, 2026 · Confirmed10 publishers
- Attackers' servers held 960,000 member records from Korea's Yoido Full Gospel Church
Invest · October 6, 2026 · Confirmed3 publishers
- Russian drone strikes on Kyiv data centers degraded internet for about 100,000 households
Security · September 24, 2026 · One report1 publisher
- Denmark says hackers reached 8.8 million people's records through a company's register access
Security · October 6, 2026 · Confirmed15 publishers
- Judge Sara Hill rules a deputy's warrantless search of Flock's cross-state network unconstitutional
Product · October 3, 2026 · Confirmed5 publishers
- Attackers used hijacked Nikkei accounts to send 9,000 phishing emails to staff and sources
Security · October 5, 2026 · Confirmed6 publishers
- Alleged ShinyHunters member detained in Jordan is reportedly helping the FBI find other members
Security · October 3, 2026 · Confirmed7 publishers
- AFP sizes the Shai-Hulud syndicate's take at more than 500,000 credentials
Security · August 28, 2026 · Confirmed16 publishers
- Rhysida gives Berlin seven days before it auctions 5.79TB of city data
Security · September 5, 2026 · Confirmed3 publishers
- One phishing click let attackers copy over 150,000 foster-care reports from Arizona court backups
Security · September 30, 2026 · Confirmed6 publishers
- Bipartisan letters press appropriators for Cyber Command's $11 million mental-health request
Security · October 7, 2026 · One report1 publisher
- Third NetScaler zero-day hits SAML appliances already patched against the first two
Security · October 4, 2026 · Confirmed11 publishers
- NetScaler attackers tunnel into internal networks with a new Python proxy
Security · September 30, 2026 · Confirmed21 publishers