/
countries_code:NL × victim_sectors:agriculture × limpar

Resultados

4 casos · pág. 1/1

krebsonsecurity.com · critical

ShinyHunters Suspect Arrested in Netherlands as Group Mass-Exploits Oracle PeopleSoft CVE-2026-35273 and Breaches FBI Jobs Site

Dutch authorities arrested a 24-year-old, reportedly Pepijn van der Stap (alias "Umbreon"), around Sept. 16, 2026 on suspicion of aiding data thefts and extortions by ShinyHunters. Van der Stap was previously convicted in 2023 for data theft and extortion. Days after the arrest, remaining ShinyHunters members escalated, breaching the FBI …

bitdefender.com · · 2 fontes · 2 atualizações high

FBI urges ShinyHunters members to surrender after Dutch arrest of alleged leader; group escalates with FBI portal breach and Cl0p extortion

The FBI has publicly called on remaining ShinyHunters members to surrender. Cyber division assistant director Brett Leatherman released a video thanking Dutch police for arresting a 24-year-old in Amsterdam. The FBI calls him "one of the alleged leaders" of the group, while Dutch police say only that he played a role. He is also suspected…

securelist.com · high

MovieReaper modular malware spreads via compromised itorrents.org torrent repository, using Solana blockchain for C2

Kaspersky identified MovieReaper, a previously unknown modular, multi-stage crimeware framework distributed since mid-August 2026 through movie-themed torrents, including fake "The Odyssey (2026)" releases. Rather than compromising individual trackers, the actor modified the public torrent file repository itorrents.org, so trackers relyin…

theregister.com · · 31 fontes · 49 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline; separate unpatched CVE-2026-115560 disclosed

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…