FBI and CISA warn SafePay hit at least 600 organizations
The independent group uses stolen or brute-forced credentials and VPN access, then steals data and appends .SafePay.
76
Malware
Mimikatz
- Mentions · 7d0
- Mentions · 30d4
- All mentions5
- First seenAug 12, 2026
- Last mentioned8d ago
Timeline
5 articles · newest firstOperators hit FortiGate, FortiWeb and GlobalProtect to steal stored passwords
Group-IB and NyxLab tie the edge-device campaign to k0t and report more than 70,000 exposed credentials.
78
AI Decision Models and Their Impact on AI SOC Platforms
Decision models from TypeSafe, OpenAI, and Cribl offer scored answers aimed at SOC alert triage.
52
Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel
Attackers abused a Viva Aerobus SQL Server to run commands and steal files, then exposed tools and data online.
62
Three intrusions at UK criminal records office went undetected for two years
UK ICO reprimands ACRO criminal records office after three undetected intrusions over two years exposed thousands of records, including domestic violence victims.
55
Related CVEs
by mentions- CVE-2025-6444691%9.8Unauthenticated Path Traversal in Fortinet FortiWeb Enables Admin Command Execution
- CVE-2026-025795%7.8Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
Appears with
- Fortinetvendor · 1
- NetExecmalware · 1
- GlobalProtectproduct · 1
- k0tthreat actor · 1
- Palo Alto Networksvendor · 1
- Decisions APIproduct · 1
- CISAorganization · 1
- Group-IBorganization · 1
- Jevproduct · 1
- NyxLaborganization · 1
- Impacketmalware · 1
- MeshCentralmalware · 1
- Meterpretermalware · 1
- Jevai model · 1
- FBIorganization · 1
- Rclonemalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.