ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Oct 10, 2026 · Krebs on Security

    FBI Arrests Co-Founder of Cybersecurity Firm Linked to ShinyHunters

    The FBI has arrested a co-founder of a Canadian cybersecurity firm as part of an investigation into the ShinyHunters hacking group, which recently compromised sensitive FBI data.

    What changed

    The FBI has taken significant action by arresting an executive from a cybersecurity firm involved in ransomware negotiations. This arrest is part of a broader investigation into the ShinyHunters group, which has been implicated in the theft of sensitive information from the FBI.

    This development raises concerns about the security practices of firms involved in negotiating with ransomware groups and their potential vulnerabilities.

    Who is affected

    The arrest may have implications for various stakeholders in the cybersecurity landscape, particularly those involved in ransomware negotiations.

    Key affected parties include:

    • Canadian cybersecurity firms involved in ransomware negotiations.
    • Organizations that may rely on these firms for incident response and threat mitigation.
    • Government agencies, including the FBI, which are directly impacted by data breaches.
    • Companies that have been targeted by the ShinyHunters group or similar hacking collectives.

    What to do

    Organizations should review their cybersecurity protocols and ensure that their incident response strategies are robust against ransomware threats.

    It is advisable to stay informed about the ongoing investigation and assess any potential risks associated with third-party cybersecurity firms.

    • Enhance monitoring of third-party vendors and their security practices.
    • Conduct thorough risk assessments related to ransomware negotiations.
    • Implement stronger data protection measures to safeguard sensitive information.

    Original report