cyber.hendryadrian.com is a cybersecurity news and threat intelligence aggregation platform. It collects external cybersecurity reporting and turns it into structured information that is easier to search, correlate, and explore.
FortiGuard Labs attributes a South Asia-focused campaign to suspected BITTER with high confidence. Three Windows infection chains use LNK, URL and VHDX lures to deploy PapRAT; a Rust variant adds commands and HTTPS C2.
Microsoft investigated two intrusions that began with attackers posing as IT support on Teams and abusing insecure AD CS configurations. In one, company data was copied to an external server; the amount was not disclosed.
Google and partners say they disrupted the XCPE backdoor, which enrolled more than 1.3 million set-top boxes. Mandiant details its persistence, MQTT command channel and affiliate modules used for ad fraud, proxying and additional malware.
IBM says critical Langflow flaws affect versions 1.0.0–1.12.8 and may enable authentication bypass or remote code execution. Version 1.13.0 fixes them; a Metasploit module for CVE-2026-93680 lists MCP tools but does not execute code.
Ivanti patched two Connect Secure zero-days in a three-flaw chain the company says was exploited against a limited number of customers. CISA added the flaws to KEV; affected users must upgrade.
Ivanti patched two Connect Secure flaws reportedly chained with an earlier authentication bypass in attacks since at least October 1. More than 5,000 internet-exposed instances are tracked, but how many are secured is unknown.
Prophet Security outlines SOC readiness checks for AI agents, including tool and data access, written investigation standards, baseline metrics and human-approval rules. Its 2026 survey of 250+ security leaders found 28% of alerts go uninvestigated.
The article outlines an Observe, Prove, Act, and Confirm workflow for validating security changes before enforcement, coordinating approvals, and verifying results. It reports remediation outcomes from the analyzed environments.
A practical guide to exporting Elasticsearch logs with Python, ES|QL, or Kibana Discover, including API-key permissions, format and row limits, and preparing log records for investigation in LogTotal.
Cloudflare reported 18.2 million network-layer DDoS attacks in Q3 2026, up from 13.2 million in Q2. Short-burst attacks surged 208%, while attacks exceeding 1 Tbps fell 69%.
Wiz’s survey of 100 senior IT and security decision-makers found widespread AI deployment but limited inventory and governance: 55% use agentic systems, while only 17% have a comprehensive AI asset inventory. The report recommends stronger visibility and controls.
A researcher reported finding 26,000 unique, valid credentials in 7.25 million public Gitee repositories, validating candidates against provider endpoints. About half dated to commits pushed in 2025; affected providers were notified.
Google says it disrupted a botnet affecting more than 1.3 million Android devices, mostly TV boxes, and accuses maker Videostrong of intentionally installing the x.cpe backdoor and selling criminal access.
SecurityWeek tracked 37 cybersecurity M&A deals announced in October 2026, including acquisitions and proposed deals involving Absolute Security, Cohere, Hex-Rays, IonQ, Proofpoint and other companies.
Dream Research Labs reports DarkBlinders activity targeting Israel and Iraqi Kurdistan from August to October 2026, including reported compromises of a high-profile Israeli individual and a regional government cloud environment.
Florida says hackers breached its student financial aid website, potentially exposing personal data of about 4.9 million people. The intrusion was discovered Oct. 19 and contained; the entry method and attackers remain unknown.
Revolve says attackers accessed some systems, including its shopping platform. Its investigation found customer names, addresses and saved payment-card details may have been accessed and exfiltrated; at least 179,259 people received notices.
Chainalysis says an external actor used offensive agentic techniques to access its systems and internal tools, exposing some customer identifiers and contact details. The company says credentials and investigation data were not compromised; its investigation continues.
Eclipse's leak site claims to hold 832 GB of Taiwan Otsuka Pharmaceutical data and shows a publication countdown. The claim, data volume and contents have not been independently verified.
Ransomware group N0n claims it compromised managed IT provider Chibitek and exposed client financial records, network credentials, configuration secrets, and internal documents. The claim is unverified.
Ransomware.live reports that actor N0n listed a Michigan cannabis operator as a victim and claims company data will be published on October 13. The claims are unverified.
CrowdStrike and NVIDIA's AgentWorks Hackathon showcased agents for MCP-server discovery, MFA-reset abuse, and detection-rule testing. The article distills lessons on deterministic tools, guardrails, measurable outcomes, and trace-based optimization.
The opinion argues that Microsoft’s 2026 Digital Defense Report overlooks legacy software and vendor-concentration risks, citing CISA vulnerability figures, VA software decisions, and prior government compromises to call for stronger product security.
A new onedump.py option outputs embedded files from multiple OneNote files as JSON. Piping the output to myjson-filter.py writes the files to disk using each file's SHA-256 hash as its name.
