Australia severs Amadey control of about 180,000 infected computers
ASD operators accessed the Amadey backend and cut controller links without touching the infected machines.
74
Country
Australia
- Mentions · 7d25
- Mentions · 30d107
- All mentions241
- First seenAug 11, 2026
- Last mentioned1d ago
Timeline
241 articles · newest firstADEX: 52% of 2026 ad-fraud schemes use AI as cloaking share falls
Across 1.2 million campaigns, iOS scripts and messenger phishing rose while cloaking’s share of suspensions fell to about 45%.
44
Ofcom shortlists four age checks for UK under-16 social media ban
Photo ID, banking, digital ID and facial estimation remain; about 150,000 teens aged 16–17 lack photo ID.
52
Malformed WAP Push SMS crashes Android telephony, dropping calls
Google's Android VRP marked the zero-click bug non-security and will not fix it; no CVE was issued.
66
US seizes Virtualine bulletproof hosting domain used by cybercriminals
TRM Labs says the provider took nearly one-fifth of tracked illicit bulletproof-hosting inflows in 2026, and the seizure may not kill the infrastructure.
62
Discord will let search engines index public server messages
About 63,000 Discoverable Servers get public web pages from November 16; new-message indexing starts mid-December.
52
US sanctions Russians and North Koreans over IT-worker laundering
Treasury says two Russians each moved about $3.5 million in crypto tied to North Korean IT workers in Russia.
64
FBI seizes Virtualine bulletproof hosting domain
Prosecutors say the host ignored abuse notices, offered to move infrastructure after law-enforcement requests, and took unhosted Bitcoin payments.
62
NT Health retreats from claim only five patients hit in RDH leak
A visiting doctor posted pregnant patients’ records to an Instagram account with 28,000 followers; more women say they were never notified.
52
Nefilim and Hive affiliate Artem Stryzhak sentenced to nearly six years
The State Department is offering up to $11 million for co-conspirator Volodymyr Tymoshchuk; Hive hit about 1,500 victims worldwide.
62
FBI seizes Virtualine bulletproof hosting domain
A court authorized seizure of virtualine.net; prosecutors allege it kept serving a forum after child-abuse complaints and have not charged operators.
58
Nefilim and Hive ransomware affiliate sentenced to 70 months
Artem Stryzhak pleaded guilty after attacks on hospitals and large firms; an alleged accomplice remains at large.
58
Nefilim and Hive affiliate sentenced to 70 months
Artem Stryzhak pleaded guilty in December 2025; the FBI says the groups caused more than $100 million in losses.
58
ASD chief warns AI will drive more disruptive cyberattacks
The annual report also covers an Amadey network of 180,000 computers and ASD wiping about 4.8 million stolen files.
62
Nefilim and Hive affiliate Artem Stryzhak sentenced to 70 months
He pleaded guilty after extradition from Spain for attacks from 2018 through 2021; prosecutors still seek co-conspirator Volodymyr Tymoshchuk.
46
Australia’s ASD issued more than 4,400 cyber warnings in a year
Victim reports helped disrupt an August 2025 Akira campaign linked to a known SonicWall flaw.
52
Australia cyber threat report 2025-26 says incidents rose 20%
The captured page is site navigation and does not include the report’s sectors, causes, or response details.
36
ASD cuts an Amadey operator off from 180,000 infected computers
The disruption does not recover credentials already stolen, and ASD’s annual report does not describe the operation.
74
Cybersecurity job openings listed for October 27, 2026
Roles span penetration testing, cloud networking, ISSO compliance and SOC 2 work across eight countries.
18
Solar electricity generation is overtaking nuclear worldwide
Ember data shows solar narrowly surpassed nuclear generation in 2025 and is expected to exceed it in 2026.
4
Victoria judge rejects prisoner's bid to eat Vegemite
Andre McKechnie argued the ban breached cultural rights; the court said drug and alcohol controls justified it.
2
Suspected North Korean campaign targets 216 vulnerable PHP hosts
Cyfirma links a Lazarus-linked group using AI-ranked public exploits to monitor and scan 216 unpatched PHP hosts via private I2P channel.
75
Tesla cancels Cybertruck reservations in Australia and New Zealand
Holders get deposits refunded within 30 days and a free year of FSD (Supervised) if they order a Model 3 or Model Y.
4
Brotli bug CVE-2026-111497 draws patches beyond Node.js
Trail of Bits released an audit tool; Node.js credited OpenAI researchers, and real-world exploitation is not stated.
73
PHP2Shell exploited at a European government entity, Unit 42 says
Within two hours the attackers reached password hashes, MFA secrets, and an NTLM-relay path toward Domain Admin.
86
Everest claims 590GB theft from PwC learning systems
The unverified listing cites 108,426 files and a roughly five-day publication countdown; encryption is not shown.
64
Everest claims it stole 590 GB from PwC; firm has not confirmed
Hackmanac reported 108,426 files and one HR set of 213,084 records, but those figures are unverified.
56
PHP2Shell takes 32 UK government services offline
AWS says the two critical PHP bugs were exploited four days before disclosure; no public-sector compromise is confirmed.
88
PHP2Shell exploit attempt hit Amazon honeypot before disclosure
CVE-2026-109618 and CVE-2026-109619 allow pre-auth code execution on PHP 7.x and 8.x, both scored 9.2.
91
Sites go offline as two critical PHP bugs draw early attacks
Fixes are out only for PHP 8.2 and newer; Cloudflare and watchTowr report emerging attacks dubbed PHP2Shell.
90
CISA says SafePay hit at least 600 critical infrastructure organizations
A US, German and UK advisory says the group, active since August 2024, uses double extortion across four regions.
86
SafePay Ransomware Affects 600+ Organizations
SafePay ransomware has compromised at least 600 organizations since August 2024 by exploiting exposed VPNs, remote access and backup servers.
90
CISA says SafePay ransomware hit 600+ organizations and wiped backups
The October 20 joint advisory covers activity since August 2024 and five exploited CVEs, including critical CVE-2024-40711.
86
AOMEI Backupper update servers briefly hijacked to push a backdoor
Tampered configs sent Backupper 8.3.0 and later a dropper that installed Radmin and SHINYROAD.
78
Attackers use AI pen-test tool Cairn against e-commerce sites
NorForge says a Chinese-speaking operator ran over 1,100 projects across dashboards aimed at stealing payments.
74
AOMEI has not notified customers after update-server malware hijack
Attackers briefly swapped update configs from April to July so Backupper fetched malware, and already infected PCs stay infected.
74
Autonomous AI agents used to breach more than 1,200 websites
NorForge says exposed Cairn panels tied a Chinese-language cluster to web shells at named firms, with data theft unconfirmed.
78
AOMEI Backupper updates briefly served malware in 2026
UNC7017 used five-to-ten-minute windows to deliver CrossRoad and the ShinyRoad backdoor to anyone fetching packages.
78
Attackers used open-source Cairn against over 100 organizations
Norforge found three exposed-panel clusters; Reuters names John Deere and SharkNinja, and about 10% of attempts succeeded.
78
Bullhorn takes recruitment platform offline after a cyberattack
Services are back in the UK, US and Australia, but SSO, password resets and several products were still degraded as of Tuesday.
74
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2015-330699%10.0Arbitrary file read/write via ProFTPD 1.3.5 mod_copy
- CVE-2021-319930%9.8Path Traversal RCE in ONLYOFFICE Document Server
- CVE-2016-308197%8.1Command injection RCE in Apache Struts Dynamic Method Invocation
- CVE-2015-5477100%7.5Remote denial of service in ISC BIND via TKEY queries
- CVE-2023-228944%4.9Sensitive-data leak in Strapi admin query filters (through 4.5.5)
- CVE-2026-8877182%9.5Unauthenticated RCE in Citrix NetScaler ADC and Gateway
- CVE-2026-2158999%9.3Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2023-2026927%9.1Unauthenticated Brute-Force VPN Access in Cisco ASA and Firepower Threat Defense
Appears with
- OpenAIorganization · 65
- OpenAIvendor · 63
- FBIorganization · 36
- Microsoftvendor · 31
- Hugging Faceorganization · 25
- Googlevendor · 24
- Anthropicorganization · 22
- Microsoftorganization · 19
- Anthropicvendor · 18
- Services Australiaorganization · 16
- Metavendor · 16
- CISAorganization · 16
- TeamPCPthreat actor · 13
- Australian Institute of Health and Welfareorganization · 13
- Transluceorganization · 13
- Metaorganization · 12
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.