n0n extortion operator exposed AI-aided attack files on open server
SOCRadar says every examined break-in used weak or stolen credentials, not a software vulnerability.
74
Country
Sweden
- Mentions · 7d3
- Mentions · 30d17
- All mentions33
- First seenAug 11, 2026
- Last mentioned6h ago
Timeline
33 articles · newest firstSweden blocks ChatGPT and Claude on government staff computers
Staff are directed to approved tools such as Copilot, whose security was tightened after a review.
48
Cybersecurity job openings listed for October 27, 2026
Roles span penetration testing, cloud networking, ISSO compliance and SOC 2 work across eight countries.
18
Swedish government offices block ChatGPT and Claude on work computers
Staff must use approved tools such as Copilot, while some keep access through an internal assistant platform.
54
Encryption Is Getting Squeezed From All Sides
Canada's C-22 bill could force encryption backdoors and metadata retention, prompting Signal and Psiphon to threaten exit.
62
Targeted ads delivered 0-click exploits to install mercenary malware
Citizen Lab says Discover-Tech ads delivered Candiru zero-click exploits that installed mercenary spyware.
82
NVIDIA Expands Advanced Technology Access for Europe’s Scientific Community Through Open Learning Resources, Collaborations and Compute
NVIDIA pledged open models, training, and compute to Europe's AI-in-science initiative.
56
The Nordics and NVIDIA Show What’s Possible When a Region Commits to Advanced Computing
NVIDIA highlights Nordic AI infrastructure, supercomputers, and startups building on its models and GPUs.
38
TV4 postpones show after AI agent erases edited material
TV4 delayed The Challenge after a backup failure and denied that an AI agent deleted the edit.
8
Agent erased full season of "The Challenge Swe": "Hundreds of days of work gone"
A thin Hacker News post claims an AI agent erased TV4's edited season of The Challenge.
6
European Cities Deploy NVIDIA-Powered AI Agents to Run Smarter Urban Operations
European cities and partners are piloting NVIDIA AI agents and digital twins for urban operations.
44
Cerebras CEO pushes back on AI doomsday warnings
Cerebras CEO Andrew Feldman says AI leaders overemphasize doom and should stress benefits while regulating risks.
34
Scandinavia's first farmers slaughtered hunter-gatherer population, DNA suggests
Ancient DNA shows Scandinavia's first farmers replaced hunter-gatherers within a few generations about 5,900 years ago.
4
Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure
Hunt.io says BraZetsu access-broker infrastructure kept stable TLS and hosting patterns months before public IOCs.
60
Red Lion Controls N-Tron 700 Series
CISA says Red Lion N-Tron 700 switches through firmware 3.11.0 have hardcoded credentials and authentication flaws.
55
Nobel Prize in Chemistry 2026 to Henri B. Kagan and Kenso Soai
The 2026 Nobel Prize in Chemistry went to Henri Kagan and Kenso Soai for asymmetric synthesis.
2
Savannah lwIP SMTP client
CISA reports a critical buffer overflow in Savannah lwIP SMTP client 2.2.1 that may allow remote code execution.
62
Cybersecurity jobs available right now: September 29, 2026
A September 29, 2026 roundup lists cybersecurity jobs at banks, vendors, and tech firms across eight countries.
16
Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims
New ransomware gang n0n threatens to destroy backups and has listed more than a dozen victims.
72
Europe’s technology backbone is becoming a cyber target
ENISA’s 2026 report says DDoS and supplier compromises drove 8,257 EU cyber incidents in 2025.
64
Burnham announces plan for new UK center to fight disinformation
UK Prime Minister Andy Burnham ordered a new national centre to detect and disrupt hostile disinformation.
54
Sweden fines Miljödata $183,000 over breach affecting 2.2 million
Sweden's IMY fined IT provider Miljödata $183,000 under GDPR for security failures behind an August 2025 breach affecting 2.2 million people.
45
lwIP TCP/IP Stack MQTT Client Application
CISA warns lwIP MQTT client versions 2.0.1 through 2.2.1 have critical CVE-2026-87121.
68
lwIP (Lightweight IP)
CISA warns lwIP 2.0.1–2.2.1 has a double-free that can crash devices or enable code execution.
46
Small AI models let drones autonomously identify and attack battlefield targets
NATO-backed startup Scaleout Systems uses federated learning and small edge AI models to let military drones autonomously identify, prioritize, and attack battlefield targets.
45
Trezor: 347,000 users targeted in phishing attacks after Brevo breach
Trezor reported phishing after the Brevo breach targeted 347,000 newsletter subscribers, with 2,500 users clicking before the domain was taken down.
65
UK Council Attack Linked to Mass Exploitation of SonicWall Flaw
Hunt.io links a UK council attack to mass exploitation of SonicWall SMA1000 flaw CVE-2026-15409 (CVSS 10.0), enabling credential and Active Directory theft.
90
Trezor warns users of email provider breach, phishing attacks
Trezor says attackers breached its third-party email provider and are phishing customers with fake STM32 entropy vulnerability alerts.
58
Trezor customers hit with phishing calls and letters after shipping-partner breach
A breach at shipping partner ShipMonk exposed data for about 67,000 additional US Trezor customers, who now face phishing calls and QR scam letters.
50
Trezor data breach impact now reaches 81,000 customers
Trezor's ShipMonk breach now affects 81,000 customers, adding 67,000 US customers after Metabase exploitation by ShinyHunters-linked attackers.
70
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
CERT Polska and CISA report active exploitation of Zimbra RCE CVE-2026-73570, with 267 instances compromised per Shadowserver.
75
Analysis of Smoke Loader in New Tsunami Campaign
Fake Japanese Meteorological Agency tsunami warning emails delivered Smoke Loader and AzoRult malware to steal credentials from targets in Japan.
45
ExfilSquad Targets New Victims, Shares Data via Torrents
Extortion group ExfilSquad lists 13 new US, UK and Swedish victims and now distributes stolen data via peer-to-peer torrents.
48
Related CVEs
by mentions- CVE-2026-154097%10.0Unauthenticated SSRF in SonicWall SMA1000 Appliances
- CVE-2026-7357072%8.9Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
- CVE-2025-6637620%6.1Stored Cross-Site Scripting in Synacor Zimbra Collaboration Suite Classic UI
- Buffer Overflow in lwIP SMTP Client from Unchecked Input Sizes
- Weakly Encrypted Credentials in Red Lion N-Tron 700 Series Switches
- Unauthenticated SNMP Admin Access in Red Lion N-Tron 700 Series Switches
- Plaintext Credential Storage and Unauthenticated SNMP Config Export in Red Lion N-Tron 700 Series Switches
- Double Free Vulnerability in lwIP System
- Authenticated URL-Triggered Reboot DoS in Red Lion N-Tron 700 Series Switches
- Factory-Reset Boot Bypass in Red Lion N-Tron 700 Series Switches
Appears with
- CISAorganization · 6
- Metabasevendor · 4
- Claudeai model · 3
- Microsoftvendor · 3
- NVIDIAvendor · 3
- ShinyHuntersthreat actor · 3
- ShipMonkvendor · 3
- Metabaseproduct · 2
- Hunt.ioorganization · 2
- NVIDIA Nemotronai model · 2
- lwIPvendor · 2
- Swedish Tax Agencyorganization · 2
- TV4organization · 2
- Government Offices of Swedenorganization · 2
- ChatGPTai model · 2
- NATOorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.