ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Oct 16, 2026 · The Record

    Anne Arundel County Confirms Data Breach Following Ransomware Incident

    Anne Arundel County, Maryland, has confirmed a data breach linked to a ransomware attack, with investigations underway to determine the extent of the data exposure.

    What changed

    Anne Arundel County officials have confirmed that a data breach occurred in August, resulting from a ransomware attack. An unauthorized intruder accessed and stole files from the county's government systems.

    The county is currently conducting a thorough investigation to assess the full scope of the data compromised during this incident.

    Who is affected

    The breach primarily impacts the residents and employees of Anne Arundel County, as sensitive government data may have been exposed. Additionally, the incident raises concerns for other local government entities that may face similar threats.

    The potential exposure of personal information could affect various stakeholders, including local businesses and community organizations relying on county services.

    • Residents of Anne Arundel County, Maryland
    • County government employees
    • Local businesses interacting with county systems
    • Community organizations dependent on county services

    What to do

    Residents and employees are advised to monitor their personal information closely for any signs of misuse. The county is expected to provide updates on the investigation and any necessary protective measures.

    Organizations should review their cybersecurity protocols and consider additional training for staff to prevent similar incidents in the future.

    • Monitor personal information for unusual activity
    • Stay informed through official county communications
    • Review and enhance cybersecurity measures
    • Consider staff training on data protection and incident response

    Original report

  2. Oct 16, 2026 · Infosecurity Magazine

    Ransomware Gangs Escalate Tactics with Threats of Physical Violence

    Recent reports indicate a troubling trend where ransomware gangs are resorting to threats of physical violence to ensure payment from their victims.

    What changed

    A new report highlights a disturbing shift in ransomware tactics, where attackers are increasingly using threats of physical violence against employees to compel organizations to pay ransoms. This escalation in intimidation tactics marks a significant change in the landscape of cyber extortion.

    The report underscores the evolving nature of ransomware attacks, indicating that traditional methods of coercion are being supplemented with more aggressive and threatening approaches.

    Who is affected

    Organizations across various sectors are at risk as ransomware gangs adapt their strategies. This trend poses a serious threat to employee safety and organizational integrity.

    Companies that have previously been targeted by ransomware are particularly vulnerable, as attackers may leverage past incidents to escalate threats.

    • Businesses in the healthcare sector, where patient data is critical.
    • Financial institutions that manage sensitive customer information.
    • Manufacturing companies with operational dependencies on technology.
    • Public sector organizations that may face heightened scrutiny and pressure.

    What to do

    Organizations should enhance their security protocols and employee training to mitigate the risks associated with ransomware attacks. It is crucial to develop a comprehensive incident response plan that includes measures for dealing with threats of violence.

    Regular risk assessments and updates to security infrastructure can help in identifying vulnerabilities that may be exploited by ransomware gangs.

    • Implement robust cybersecurity measures to protect sensitive data.
    • Conduct regular training sessions for employees on recognizing and responding to threats.
    • Establish clear communication channels for reporting threats or suspicious activities.
    • Collaborate with law enforcement and cybersecurity experts to develop a proactive response strategy.

    Original report