Cyber Dispatch™️
前往频道在 Telegram
The definitive source for critical cybersecurity news. When a major threat breaks, we dispatch. #CyberDispatch
显示更多未指定国家未指定类别
404
订阅者
无数据24 小时
+37 天
+830 天
吸引订阅者
十月 '2610月 '26
十月 '26
+4
在1个频道中
九月 '26
+17
在4个频道中
Get PRO
八月 '26
+15
在4个频道中
Get PRO
七月 '26
+12
在1个频道中
Get PRO
六月 '26
+27
在4个频道中
Get PRO
五月 '26
+28
在3个频道中
Get PRO
四月 '26
+63
在4个频道中
Get PRO
三月 '26
+161
在5个频道中
Get PRO
二月 '260
在4个频道中
Get PRO
一月 '26
+121
在4个频道中
Get PRO
十二月 '250
在4个频道中
Get PRO
十一月 '25
+2
在8个频道中
| 日期 | 订阅者增长 | 提及 | 频道 | |
| 12 十月 | 0 | |||
| 11 十月 | 0 | |||
| 10 十月 | 0 | |||
| 09 十月 | +1 | |||
| 08 十月 | 0 | |||
| 07 十月 | +2 | |||
| 06 十月 | +1 | |||
| 05 十月 | 0 | |||
| 04 十月 | 0 | |||
| 03 十月 | 0 | |||
| 02 十月 | 0 | |||
| 01 十月 | 0 |
频道帖子
Mossad emailed vx-underground offering 47 of Netanyahu's toenail clippings for 8,000 shekels.
He says the https://mossad.gov[.]il sender is not spoofed, but it was from a compromised Israeli government domain.
| 2 | Victims named:
* Deloitte (global)
* KFC (global)
* MoneyGram (US/global)
* Confluent (US)
* BigID (US)
* Placer AI (US)
* Royal Thai Air Force (Thailand)
* North Philadelphia Health System / Behavioral Wellness Center at Girard (US)
* Datacomm Services (US)
* MercyMed of Columbus (US) | 16 |
| 3 | THE GENTLEMEN RANSOMWARE GROUP LISTS 10 NEW VICTIMS, INCLUDING DELOITTE, KFC AND MONEYGRAM
The Gentlemen ransomware group has added a new batch of alleged victims to its leak site. Each listing carries a countdown before data is due to be published. | 16 |
| 4 | • CVE-2026-97229 — integer overflow in the CI/CD Regular Expression Compiler; CVSS 10.0
• Unauthenticated attacker can execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration
• Impacted: CE/EE from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2
• Fixed: upgrade to 19.4.2, 19.3.5, or 19.2.8 immediately
• http://GitLab.com is already running the patched version; GitLab Dedicated customers need no action
• Same release also fixes additional High/Medium/Low issues (XSS, authz, Pages token exposure, and more) | 17 |
| 5 | GITLAB CRITICAL PATCH: UNAUTHENTICATED RCE VIA CI/CD REGEX COMPILER (CVE-2026-97229)
GitLab released Critical patch versions 19.4.2, 19.3.5, and 19.2.8 on October 12, 2026 for Community Edition and Enterprise Edition. | 13 |
| 6 | • Attack paths named: exploitation of web-system vulnerabilities, compromise through the supply chain, and poorly secured data management
• Companies holding large amounts of personal or sensitive data are asked to urgently tighten defenses, including at contractors
• Web systems: patch OS, middleware, CMS and apps quickly, drop end-of-life products, enforce MFA, disable unused accounts, keep and monitor logs
• Supply chain: check contractors' security, write security requirements into contracts, share only the minimum data
• Data: inventory and minimize holdings, separate access rights, encrypt stored data, review access logs
• "Cyberattack damage is no longer just an IT department problem": executives are told to fund it as a management risk
• Victims are asked to share technical attack details with the NCO, ministries and expert bodies quickly | 12 |
| 7 | Japan's National Cybersecurity Office (NCO, Cabinet Secretariat) published an advisory on Oct 9, 2026 saying it has confirmed multiple cases in which attackers broke into the systems of companies handling large volumes of personal data and stole it. | 13 |
| 8 | Polish Prime Minister Tusk called revelations about Israeli spyware Pegasus a “crime against the state” after prosecutors found that sensitive data on Polish citizens was transferred outside Poland, potentially allowing Israeli manufacturer NSO Group access.
Tusk accused the previous government of exposing thousands of citizens’ private details to Israel without oversight, calling it one of Poland’s biggest post-communist scandals. | 10 |
| 9 |  German police have released a photo of the suspect. | 7 |
| 10 | German police seized a robot that sexually assaulted a 16-year-old girl by touching her ass and making thrusting motions at her.
Officers found it stashed in the boot of a Volkswagen.
Its 16-year-old owner and a 19-year-old companion allegedly livestreamed it. | 7 |
| 11 | Microsoft’s Xandr fined €8.6M over Grindr user data exposure. | 7 |
| 12 | Yandex confirms service outage as users lose access to cloud files. | 8 |
| 13 | Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted. | 8 |
| 14 | Chinese Cars in Norway Stored Military Exercise Footage and Access Codes. | 9 |
| 15 | The username is admin, and the password automatically changes every day to the current date. | 11 |
| 16 | Hundreds of supermarkets in France were hit by cyberattacks on Sunday night that disabled refrigeration systems and forced stores to throw out damaged food, following warnings that hackers are seeking to cause physical damage.
Around 150 Intermarché stores were hit, a spokesman for owner Groupement Mousquetaires told Bloomberg. Hackers accessed cooling systems and set them to defrost, with refrigerators and freezers heating to 50C (122F) for around six hours. Meat, frozen items and vegetables had to be tossed out. | 11 |
| 17 | French food store attack was not new, used a previously exploited vulnerability. | 10 |
| 18 | Google awarded $90,000 for a flaw that let anyone run code on https://developers.google.com without an account.
DevSite signed its session cookies with a secret it also handed out inside the cookie, so researcher Simon Köck could forge his own. | 10 |
| 19 | Authentication can pass from a compromised real mailbox, so passing SPF/DKIM/DMARC does not prove a legitimate human sent it. Raw headers and tenant telemetry are needed for definitive attribution. | 9 |
| 20 | Int Cyber Digest is right about a separate, serious problem: gov.il reportedly publishes SPF and DMARC, but DMARC is p=none, monitor-only, not quarantine or reject. So failed or unaligned mail can still be delivered, making the government domain broadly spoofable.
But “no SPF or DMARC” is too strong: the parent gov.il has records, and DMARC can be inherited by subdomains. Correct framing: this email was likely sent from a compromised real account; separately, weak enforcement makes spoofing gov.il-branded mail too easy. | 11 |
