Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

cyberint

Grandoreiro Malware: An Evolving Threat to Banking Customers

Oct 25, 2026 By Adi Bleih In Cyberint
Grandoreiro is a malware family classified as a backdoor and spyware, first seen in April 2020, and is consistently described as a banking trojan focused on credential theft, remote fraud enablement, and control of compromised Windows systems. It has remained active through recurring campaigns, including a renewed wave in May and June 2026 that concentrated heavily on Latin America, especially Mexico, while also reaching parts of Europe and North America.
Read Post
safeaeon

Healthcare Ransomware Attacks: Risks, Prevention, and Protection Strategies

Oct 22, 2026 By SafeAeon Inc. In SafeAeon
Ransomware attacks are on the rise, and no industry is safe. The motive behind such attacks is to encrypt confidential business data and demand a ransom to restore access. Many industries, including healthcare, experience ransomware attacks regularly. Patients’ records, critical operations, and life-saving systems are targeted by attackers. They can lock down data and systems within minutes, disrupting healthcare services.
Read Post
aikido

LiteLLM compromised again: infostealer and RAT found in version 1.107.0

Oct 21, 2026 By Ilyas Makari In Aikido
On October 21, 2026, version 1.107.0 of LiteLLM (a popular open source proxy that lets developers route requests across dozens of LLM providers) was found to be compromised by an attacker who injected malicious code into its published Python wheels on PyPI. The official Docker image for the same version is also compromised.
Read Post
sophos

BRONZE SANDCASTLE deploys modified Meterpreter shells

Oct 20, 2026 By Sophos Counter Threat Unit Research Team In Sophos
The China-based threat group uses DLL sideloading in these attacks Counter Threat Unit (CTU) and SophosLabs researchers investigated a cluster of incidents attributed to the BRONZE SANDCASTLE threat group. The most distinctive technical marker for BRONZE SANDCASTLE is its consistent use of Sandboxie DLL sideloading.
Read Post
cyberint

RevStealer Malware: A Hidden Data Heist Behind the Promise of Free AI

Oct 18, 2026 By Adi Bleih In Cyberint
RevStealer is an infostealer first observed in September 2026 that targets Windows systems, with reported 64-bit execution and JavaScript-based components. It is built to steal authentication credentials and other sensitive user data while emphasizing stealth through anti-debugging, anti-sandbox, anti-VM, and evasion features. Its threat significance comes from a short, theft-focused execution model that pairs broad data collection with concealed command-and-control and exfiltration behavior.
Read Post

Rubrik MSP Unscripted Episode 7 - Featuring Rajat Shah

Oct 16, 2026 By Rubrik In Rubrik
In this episode of MSP Unscripted, Nawaz Ali sits down with Rajat Shah, Product Manager at Rubrik, to talk about the launch of multi-tenancy and what it means for managed service providers. Nawaz and Rajat discuss how shared infrastructure can help MSPs improve service economics while maintaining strong tenant isolation, expand opportunities across SMB and mid-market customers, and make services such as Backup as a Service, Disaster Recovery as a Service, isolated recovery environments, and advanced cyber recovery capabilities more scalable.
View Video
knowbe4

Report: Ransomware Attacks Involving Data Theft Are Surging

Oct 13, 2026 By KnowBe4 Team In KnowBe4
Ransomware attacks involving data theft have surged by 275% in 2026, according to a new report from Zscaler. Attackers exfiltrated more than 896.2 terabytes of data from victim organizations, more than seven times the amount stolen during the 2023–2024 reporting period.
Read Post
The Video Game Market on Its Way to $300 Billion

The Video Game Market on Its Way to $300 Billion

Oct 13, 2026 By SecuritySenses In SecuritySenses
According to industry experts, annual revenue in the gaming industry is projected to exceed $300 billion by 2028. This represents more than double the figures recorded in 2019. The key growth drivers remain the expansion of online services and the rapidly growing global player base. However, alongside money and audiences, the industry is also attracting those who seek to profit through illegal means.
Read Post

Ep. 86 - Flax Typhoon Ran on 1,300 Scripts and a 12-Year-Old Bug Nobody Patched

Oct 11, 2026 By SafeBreach In SafeBreach
Ten government agencies across seven countries put their names on one advisory. AA26-281A profiles Integrity Technology Group — a China-based, for-profit contractor that builds, sells and hosts the tooling behind large-scale intrusions, and whose domains the FBI seized on October 8. Tova Dvorin and Adrian Culley break down MicroScan’s 1,300 pentest scripts, the eBurst spray that tries ten interfaces into one Microsoft 365 mailbox, SoftEther VPN hiding behind trusted Windows process names, and a 12-year-old Bash CVE still exploited in the wild.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.