@CIDC_Ops

This is a 'first look' at cybersecurity issues for the Cyber Intelligence Defence Centre, a sub-unit of https://xitter.cf/t.co/Hc9E3WlPhC

 CIDC is based in Canada
Joined June 2022
  • Tweets8.4K
  • Following12
  • Followers35
25Media
research.checkpoint.com/2026… #CyberSecurity #Trends #CSCIS

26th October – Threat Intelligence Report - Check Point Research

For the latest discoveries in cyber research for the week of 26th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Japanese cloud hosting provider Onamae Desktop...

research.checkpoint.com
9
spaceanddefense.io/eth-zuric… #CyberSecurity #Trends #CSCIS

ETH Zurich research finds 407 cyber incidents targeting the space sector in 2025

Research from the Center for Security Studies (CSS) at ETH Zurich has documented 407 cyber incidents affecting the global space sector in 2025, pointing to growing exposure across satellite communi...

spaceanddefense.io
10
sophos.com/en-us/blog/the-br… #CyberSecurity #Trends #CSCIS

The breachpocalypse is here

it's just hard to measure

sophos.com
4
Genesys Hack Exposes Customer Data From Internal Systems securityweek.com/genesys-hac… #CyberSecurity #Attacks #CSCIS
13
Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key thehackernews.com/2026/10/ke… #CyberSecurity #Attacks #CSCIS

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

Keystone says a website breach exposed its wallet authentication key and 25,964 buyer records, allowing counterfeit devices to pass verification.

thehackernews.com
9
theregister.com/security/202… #CyberSecurity #Attacks #CSCIS

LiteLLM supply chain attack started with an exposed master key

A 'strong illustration of the risks associated with failing to rotate a potentially exposed key'

theregister.com
9
securityaffairs.com/201748/h… #CyberSecurity #Attacks #CSCIS

PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts

Cyfirma links PHP2Shell scans of 216 vulnerable hosts to a suspected North Korean campaign using AI to rank public exploits.

securityaffairs.com
11
theregister.com/cyber-crime/… #CyberSecurity #Attacks #CSCIS

Attack on email hosting provider for German far right party AfD exposed 345k accounts

Alternative für Deutschland swats away scandals as reporters swarm leaked email tranche

theregister.com
12
Not Only ARTEX: The Different Levels AI is Used in Attacks Targeting Japan trendaisecurity.com/en-us/re… #CyberSecurity #Attacks #CSCIS

Not Only ARTEX: The Different Levels AI is Used in Attacks Targeting Japan | TrendAI (US)

In autumn 2026, companies and other organizations in Japan reported a succession of data leaks from their web systems. The Japanese government’s National Cybersecurity Office issued an alert to...

trendaisecurity.com
7
theregister.com/security/202… #CyberSecurity #Attacks #CSCIS

Japanese virtual desktop cloud hacked so hard it asks to be banned

CEO admits service used for foreign exchange trading had holes company was slow to fix

theregister.com
15
wsbtv.com/news/local/atlanta… #CyberSecurity #Attacks #CSCIS

Georgia Power parent company sued over data breach with 400,000 customers exposed

After the hack, the company said roughly 300,000 of the compromised accounts were Georgia customers.

wsbtv.com
8
theguardian.com/technology/2… #CyberSecurity #Attacks #CSCIS

Anthropic’s Claude AI model accessed Georgia voter data in US

Latest example of unauthorised behaviour shows AI model bypassed paywall to access data as part of statistics project

theguardian.com
8
cbsnews.com/baltimore/news/j… #CyberSecurity #Attacks #CSCIS

Johns Hopkins Bayview warns patients of data breach involving more than 3,100 people

Johns Hopkins Bayview Medical Center is notifying patients of a data breach that may have exposed the personal and medical information of more than 3,100 people after an employee uploaded a spreads...

cbsnews.com
14
953 Online Stores Infected in Long-Lasting Malware Campaign securityweek.com/953-online-… #CyberSecurity #Malware #CSCIS
16
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs thehackernews.com/2026/10/gh… #CyberSecurity #Malware #CSCIS

Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs

Gheist uses stolen GitHub tokens to extract secrets through Actions logs, planting over 13,500 branches across 850 compromised accounts.

thehackernews.com
11
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations thehackernews.com/2026/10/mi… #CyberSecurity #Malware #CSCIS

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

Attackers replayed stolen Microsoft 365 tokens to compromise 97 accounts at 79 organizations and registered 48 rogue Entra devices.

thehackernews.com
11
theregister.com/security/202… #CyberSecurity #Malware #CSCIS

Worm armed 42 GitHub repos by hiding a payload too big to fail

Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search

theregister.com
6
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts thehackernews.com/2026/10/uc… #CyberSecurity #Maaware #CSCIS

uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts

Rentable Android spyware kit uCreator uses tampered Telegram apps and a WeChat container to capture credentials and clone accounts.

thehackernews.com
13
AI-Generated Fake Login Pages Are Making Account Takeovers Easier thehackernews.com/2026/10/ai… #CyberSecurity #TTP #CSCIS

AI-Generated Fake Login Pages Are Making Account Takeovers Easier

Learn how AI-generated fake login pages steal passwords, MFA codes and session tokens, and how organizations can reduce the risk of account takeovers.

thehackernews.com
7
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware thehackernews.com/2026/10/ma… #CyberSecurity #TTP #CSCIS

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

A malicious AGENTS.md file led Codex to execute npm malware in over 90% of tests, while a separate Claude Code attack exposed login tokens.

thehackernews.com
8
Load more