Cybersecurity radar on

Multiple SharePoint CVEs in active use. Confirmed KEV entries by CISA.

Important elevation of privilege, CVSS 8.8. Affects on-prem versions, Exchange Online protected.

Files encrypted and operational disruption reported at US agricultural nursery.

Critical API authentication bypass vulnerability (CVSS 9.8) allows unauthenticated admin access. No workaround. Affects on-prem deployments.

Files encrypted and potential manufacturing disruption in California operations.

The Agency for Safety, Energy and Environment confirms compromise of @agencia_asea and asks to ignore posts.

Threat actors claim to sell database via SQL injection; includes DNI and personal data. No official confirmation.

Actor KAZU offers sale of provincial platform repository; no official verification.

Underground forum post reports database of 3M+ student and guardian records. Not officially confirmed.

X post confirms data leak of former employees from Chilean company Forus by LockBit.

Unconfirmed claim on underground forums with published data samples.

Victim listed on threat actor's leak site on October 4, 2026.

Underground forum post claims mass exfiltration and extortion; status unconfirmed.

Threat actor Krybit lists superpack.com.co as victim on their leak site on October 4, 2026.

Actors Frouzenx, Yar1ner, KerberusCrow and H3arth claim leak with user IDs, names, emails and administrative accounts.

Threat actors Frozenx/Frouzenx and Yar1ner claim to sell full database linked to gob.mx/cultura.

First half 2026 analysis confirms corporate network compromises with simple methods.

Warning on unauthorized channels impersonating institutional identity for phishing and financial frauds.

Information leak by Frouzenx, Yar1ner and KerberusCrow per shared alert.

Actor Synq1xxss claims possession of traffic fines, vehicle and municipal court records. Unverified.

Storm ransomware gang added the US precision tooling manufacturer from Ohio to its October 2026 victim list.

Saif Al-Din Khader aka 'Rey', founding member of the group, is assisting US authorities.

7.34 TB of data compromised per threat intelligence alert.

Complaint filed over leak of confidential medical information following cyber incident.

Group Wallstreet lists St. Francis Healthcare Systems of Hawaii (US) as victim in daily ransomware digest on October 3, 2026.

US company reported incident disrupting systems and data availability.

3,946 online purchase scams and 539 phishing cases reported; verify websites recommended.

Claim based on DailyDarkWeb post, dated September 29.

China-linked activity with SparroWocky backdoor reported on government entities.

Threat actor added the US construction company to its dark web leak site on October 3, 2026.

Actor 'zfo' claims possession of ~1.06M student records (from ~95M historical database), offering data for $5. Unverified.

Session fixation leading to RCE, chainable with CVE-2026-102490; update immediately.

Operations disrupted and possible data exposure; 100 GB at risk per group claim.

Zero-day with CVSS 9.8 allows arbitrary file write; patch mail servers and hunt for IOCs recommended.

Data on prevention measures against phishing in Mexico according to recent survey.

Actor claims administrative account access and extraction of 3,042 citizen records including names, phones and ID cards.

Frouzenx, H3arth and Yar1ner offer database with Argentine DNI and personal data.

Criminals could take your number and access accounts.

Actor Skull1172 / EsqueleSquad posts on underground forums a 2026 leaks compilation with data from Colombia (government and state), Argentina, Ecuador, Spain and Mexico. Unconfirmed.

Actor Skull1172 / EsqueleSquad announces 2026 leaks compilation affecting Argentine government and sectors.

Alert on scam via email impersonating AFP Provida.

Approval of article 403 Bis with penalties of up to 5 years in prison for using official government image in frauds.

Jury found Meta violated state consumer protection law through deceptive statements about data privacy.