elitegeekZ

Reuters: belangrijke hacker ShinyHunters aangehouden, werkt samen met FBI

Aanvallers

NOS Nieuws · nederland · 03-10-2026

Een prominent lid van de hackersgroep ShinyHunters is deze week in Jordanië opgepakt, melden drie ingewijden aan het internationale persbureau Reuters. Het hackerscollectief claimde eind vorige maand de gegevens van duizenden medewerkers en sollicitanten van de Amerikaanse veiligheidsdienst FBI te hebben bemachtigd. Volgens twee bronnen werkt de verdachte inmiddels samen met de FBI bij het opsporen van andere leden van de hackersgroep. Het gaat volgens de bronnen om Saif al-Din Khader, die door de Jordaanse autoriteiten zou zijn opgepakt. Twee bronnen zeggen dat hij dinsdag is aangehouden. Het is niet bekend onder welke omstandigheden dat gebeurde en waar Khader, die binnen de groep opereert onder de alias Rey, zich momenteel bevindt. De FBI wil tegen Reuters niets zeggen over een specifieke arrestatie of operaties in het buitenland. Wel liet de dienst in een verklaring weten het recente cyberincident waarbij ShinyHunters betrokken zou zijn "onverminderd te onderzoeken". Volgens de FBI zijn in samenwerking met internationale partners al meerdere verdachten aangehouden. "We zullen alle beschikbare middelen inzetten om iedereen die verantwoordelijk is ter verantwoording te roepen", a...

Fake Zoom installer hides macOS backdoor CloudSyncD

Malware

Security Affairs · internationaal · 03-10-2026

Jamf Threat Labs details CloudSyncD, a fake macOS Zoom installer that hides a phished password using invisible zero-width Unicode characters. Jamf Threat Labs found CloudSyncD while doing routine scanning on VirusTotal, buried inside a disguised Zoom client. They first spotted it on September 15, clearly still under construction, and within two days watched it move from a private test address to live command-and-control infrastructure on real domains. That’s a fast turnaround for something that started as an obviously unfinished build. The delivery method is a classic macOS trick, made to look like a normal installer. The disk image opens as a volume called Zoom, with an app icon and an Applications shortcut. The background image then guides the victim step by step on how to bypass Gatekeeper, because the app is only ad-hoc signed and macOS would normally block it. After the app starts, a fake dialog asks for the user’s password, claiming it is needed to continue the installation. The prompt keeps appearing until the password is correct. “Once a password is entered, the dropper validates it against the local account using dscl and does not continue until the check succeeds.” reads ...

YARA-X 1.21.0 Release, (Sat, Oct 3rd)

SANS Internet Storm Center · internationaal · 03-10-2026

YARA-X&#;x26;#;39;s 1.21.0 release brings 5 improvements and 4 bugfixes.

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics

The Hacker News · internationaal · 03-10-2026

The U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing's state security service. In a "Security Service Espionage Alert" issued on September 30, 2026, MI5 said the "primary purpose of the China General Technology Research Institute (CGTRI) 中国通用技术研究院 is to fund research that

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

KritiekRansomwareAanvallers

The Hacker News · internationaal · 03-10-2026

The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and Carbon Black Threat Hunter Team, has hit critical infrastructure, government, and education organizations. "In the

Danish university DTU breach exposes data of up to 200,000 people

DatalekAanvallers

BleepingComputer · internationaal · 03-10-2026

The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data. [...]

doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures

SecurityWeek · internationaal · 03-10-2026

doxx.net’s new ADN platform prevents agentic misadventure while the agent is operating under the user’s authority. The post doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures appeared first on SecurityWeek.

Fortra Patches Critical Vulnerabilities in BoKS

KritiekPatch

SecurityWeek · internationaal · 03-10-2026

The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek.