Every ZeroDayFeed story on FBI — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
A joint FBI and Secret Service advisory says the FortiBleed credential campaign against FortiGate firewalls and SSL VPNs is still active. Attackers are locking out real admins, and brokers are passing the access to INC/Lynx and Payload ransomware affiliates.
Read the story →Federal prosecutors allege MonsterCloud owner Zohar Pinhasi sold ransomware victims decryption technology he did not have, secretly paying attackers more than $8 million while billing clients more than $19 million; he has pleaded not guilty to wire fraud charges.
DOJ unsealed a 14-defendant Ohio indictment over a North Korean remote IT-worker scheme that reached 70+ US employers, the FBI seized about 187 laptops and KVMs from 40+ Texas homes, and a companion FBI PSA says the workers are using more facilitators, smaller laptop farms and extortion.
The Justice Department and FBI seized domains behind China-based Integrity Tech's MicroScan scanner and FishHub phishing tool on Oct 8, the same day as advisory AA26-281A from 10 agencies in seven countries, which lists exploited CVEs and the mitigations defenders should apply.
A joint FBI-CISA alert, I-101626-PSA, warns election officials, candidates and political groups that phishing, smishing and deepfake impersonation aimed at stealing credentials are rising before the 2026 midterms. It urges phishing-resistant MFA first.
Free daily briefing — breaches, actively exploited bugs, ransomware, and the patches to prioritize.
You're in. ✓
Check your inbox to confirm your subscription.No spam. Unsubscribe any time. Read our privacy policy.
