ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Oct 16, 2026 · Dark Reading

    BeyondTrust Remote Support Zero-Day Vulnerability Discovered

    A newly identified zero-day vulnerability in BeyondTrust Remote Support highlights ongoing security concerns with edge devices, following similar issues reported by Ivanti, Cisco, and Palo Alto Networks.

    What changed

    A zero-day vulnerability has been discovered in BeyondTrust Remote Support, contributing to a troubling trend of security flaws in edge devices. This vulnerability poses significant risks to organizations relying on these tools for remote support and management.

    Who is affected

    Organizations utilizing BeyondTrust Remote Support are at risk, particularly those in sectors that depend heavily on remote access solutions. The vulnerability could potentially allow unauthorized access to sensitive systems.

    This issue is part of a broader pattern, as similar vulnerabilities have recently been identified in products from other vendors.

    • BeyondTrust Remote Support users
    • Organizations using Ivanti products
    • Cisco edge device customers
    • Palo Alto Networks clients

    What to do

    Security teams should prioritize monitoring for any unusual activity related to BeyondTrust Remote Support. Immediate steps should include reviewing access logs and ensuring that all systems are updated with the latest security patches.

    Organizations should also consider implementing additional security measures, such as network segmentation and enhanced authentication protocols, to mitigate potential risks.

    Original report

  2. Oct 16, 2026 · DataBreaches.net

    Detention of DataSuckers Hackers Following Major Breach

    Russian authorities have detained members of the DataSuckers hacking group linked to significant data breaches affecting customer information in Ukraine and Russia.

    What changed

    Recent developments in Moscow have led to the detention of three individuals suspected of being part of the DataSuckers hacking group. This group is believed to be responsible for a cyberattack on Dodo Pizza, a well-known restaurant chain, resulting in the exposure of sensitive customer data.

    The Moscow court has placed one of the suspects, 19-year-old Denis Fridman, under house arrest as investigations continue into the breach.

    Who is affected

    The breach has raised concerns among various stakeholders, particularly those connected to the affected restaurant chain and its customers. The implications of this incident extend beyond just the immediate victims.

    The following groups are notably impacted:

    • Dodo Pizza, a popular restaurant chain in Russia and Ukraine.
    • Customers of Dodo Pizza whose personal information may have been compromised.
    • Cybersecurity professionals monitoring the activities of the DataSuckers group.
    • Law enforcement agencies in Russia and Ukraine involved in cybercrime investigations.

    What to do

    Organizations should remain vigilant and review their cybersecurity measures in light of this incident. It is crucial to assess potential vulnerabilities that could be exploited by similar groups.

    Additionally, affected customers should be informed about the breach and advised on steps to protect their personal information.

    • Conduct a thorough security audit to identify and mitigate vulnerabilities.
    • Implement enhanced monitoring for unusual activities within networks.
    • Educate employees about phishing and other social engineering tactics that may arise from this incident.
    • Consider notifying affected customers and providing guidance on safeguarding their data.

    Original report