
Check Fortinet Devices for PeerStitch Implant After Telecom Breach
A state-linked group used patched Fortinet flaws to steal firewall configs and install a hidden memory-resident tool on network gear.
Cyber Attacks coverage from DarkWeb Dispatch holds 30 articles, 18 of them reference guides. The newest was published on October 19, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include NIST Cybersecurity Framework and MITRE ATT&CK.

A state-linked group used patched Fortinet flaws to steal firewall configs and install a hidden memory-resident tool on network gear.

Dubai Police arrested eight people for a scheme that swapped foreign licences for UAE permits without tests, charging customers AED 10,000 each.

Compromised vendor credentials allow attackers to access Microsoft 365 data across many tenants. Users should disable the application immediately to stop unauthorized access.

Arch Linux users who installed fake yay or paru packages may have granted attackers full root control of their systems via malicious scripts.

Attackers installed unauthorised bandwidth-sharing apps on compromised network gear across 34 countries to resell internet connections.

Malwarebytes has launched a free utility that scans URLs for phishing and malware threats before users click, helping to protect personal data and accounts.

This attack intercepts live traffic to bypass multi-factor authentication by reflecting credentials in real time between the victim and the legitimate service.

Open recursive resolvers and weak source validation allow attackers to turn small queries into massive traffic floods that overwhelm your bandwidth.

Attackers exploit human psychology and configuration gaps that standard email filters cannot detect, turning minor oversights into full system compromises.

Your browser executes code before you click anything, turning routine browsing into a silent infection vector that bypasses standard security warnings.

A real-time relay attack targets Taiwan researchers, stealing sessions by mirroring Google’s login process via WebSockets.

Bloomberg reports that artificial intelligence is lowering costs for fraudsters, allowing them to move fake investment schemes out of fortified Asian compounds.

French grocers report frozen goods spoiled after attackers hijacked remote controls for cooling systems.

Password managers shift the risk from dozens of weak secrets to one strong vault, but they become a single point of failure if you skip multi-factor authentication.

Russian tech giant Yandex says its Sasovo cloud zone is offline following a drone attack, with no near-term fix confirmed for affected users.

US authorities seized hacking tools linked to China’s Integrity Tech, which scanned critical infrastructure using a massive botnet of infected IoT devices.

Financial controls fail when verification relies on digital channels alone, allowing attackers to bypass standard authentication through social engineering.

Most damage from rogue access points comes from cached credentials, not just the initial connection, requiring a full credential rotation.

Email addresses are not identity proofs, so attackers can mimic trusted contacts to bypass your natural caution and steal data.

Most intrusion detection systems fail not because the technology is flawed, but because administrators misconfigure noise filters and ignore context.

Restoring network access before verifying certificate integrity allows the attacker to maintain persistent control over your data stream.

A SYN flood exhausts server resources by opening half-finished connections, leaving no room for legitimate users to connect.

Routine maintenance prevents systemic failure by reducing the attack surface available to automated threats before human intervention is required.

Intrusion detection systems act as silent watchers, flagging suspicious network behaviour that firewalls often miss, turning invisible data flows into actionable alerts for your security team.