ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Oct 16, 2026 · Help Net Security

    Surge in Phishing Attacks Disguised as Business Opportunities

    A significant rise in phishing attacks leveraging RFQ communications has been observed, posing serious risks to businesses and their email security.

    What changed

    Recent research indicates a dramatic increase in phishing attempts disguised as legitimate business requests, particularly those related to requests for quotations (RFQs). This tactic has seen a 12-fold rise in malicious emails over the past year, highlighting a growing trend in cyber threats targeting business communications.

    The majority of these phishing emails lead to credential-stealing pages, putting sensitive company information at risk.

    Who is affected

    Businesses across various sectors are vulnerable to these phishing attacks, particularly those with active sales and procurement departments.

    Organizations that frequently engage in RFQ processes are at heightened risk, as attackers exploit the familiarity of such communications.

    • Companies in manufacturing and supply chain sectors.
    • Organizations with established procurement processes.
    • Businesses utilizing email as a primary communication tool for quotes and proposals.

    What to do

    Organizations should enhance their email security measures to detect and block phishing attempts. Regular training for employees on recognizing phishing tactics is essential.

    Implementing multi-factor authentication (MFA) can provide an additional layer of security against unauthorized access.

    • Conduct regular cybersecurity awareness training for all employees.
    • Utilize advanced email filtering solutions to identify and quarantine suspicious messages.
    • Encourage reporting of phishing attempts to IT departments for further investigation.

    Original report

  2. Oct 16, 2026 · SecurityWeek

    BAE Systems Cyber Incident Disrupts Bankruptcy Court Notifications

    A recent cyber incident involving BAE Systems has caused significant disruptions in the Bankruptcy Noticing Center, affecting notifications across the United States.

    What changed

    A cyber incident at BAE Systems has led to the temporary shutdown of the Bankruptcy Noticing Center, resulting in a nationwide halt of notices for a week. This disruption has significant implications for legal and financial processes reliant on timely notifications.

    • The Bankruptcy Noticing Center is currently unable to process or send out notifications.
    • The incident has raised concerns about the security measures in place for critical infrastructure.
    • Legal proceedings may be delayed due to the lack of notifications.

    Who is affected

    The impact of this incident extends to various stakeholders within the legal and financial sectors.

    Entities relying on the Bankruptcy Noticing Center for timely notifications are particularly vulnerable.

    • Bankruptcy courts across the United States.
    • Legal professionals who depend on timely notifications for case management.
    • Financial institutions involved in bankruptcy proceedings.

    What to do

    Organizations and individuals relying on the Bankruptcy Noticing Center should prepare for potential delays in notifications and adjust their timelines accordingly.

    It is advisable to monitor updates from BAE Systems and relevant legal authorities regarding the restoration of services.

    • Stay informed about the status of the Bankruptcy Noticing Center's operations.
    • Consider alternative methods for tracking bankruptcy notifications during this downtime.
    • Review internal processes to mitigate the impact of such disruptions in the future.

    Original report