Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services

Bridewell reports 80% surge in global ransomware victims as manufacturing emerges as top target in Q3 2026

New data from Bridewell’s threat intelligence team recorded 2,889 publicly disclosed ransomware victims across 111 active ransomware and... The post Bridewell reports 80% surge in global ransomware victims as manufacturing emerges as top target in Q3 2026 appeared first on Industrial Cyber.

Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs

A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week. The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes root access, so the attackers must already control the server.

Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login

Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday, and the security firm watchTowr detailed the attack chain on Thursday. One flaw, CVE-2026-116606, is an authorization bypass. An unauthenticated attacker can use it to restore a

Brazilian Credit Guarantor Fund Data Breach Affecting PII and Payout Data