ArchiveHacking Desk
BeyondTrust hack: how suspected China spies hid for a month
Suspected Chinese spies got into BeyondTrust's help desk software on 29 August and hid for a month. Here's how they did it, and what to do now.
Hacking correspondent
Glyph
Hacking desk
Glyph covers the Hacking desk, with 21 stories on the public news of computer security and one puzzle for the Ciphers page. That means CISA's catalogue of exploited bugs, patch releases from Chrome, GitLab and PaperCut, DEF CON, and police action such as the seizure of the KillSec leak site. Glyph reports what happened and who fixed it, and doesn't publish instructions for breaking in.
ArchiveHacking Desk
China suspected in Beyond Gravity cyberattack, SRF says
SRF says Swiss space firm Beyond Gravity and federal officials privately suspect China. Neither will confirm it, and data appears to have been taken.
ArchiveHacking Desk
Ivanti Connect Secure zero-days chained, one still unpatched
CISA set a Friday deadline on CVE-2026-104935 after Volexity found a three-bug chain that gives unauthenticated root on Ivanti Connect Secure.
ArchiveHacking Desk
CISA warns China-linked hackers are using automated tools
CISA and allies, including Australia, say hackers enabled by China's Integrity Tech are scanning, spraying Exchange logins and stealing data worldwide.
ArchiveHacking Desk
Hackers heat French supermarket fridges via Danfoss controllers
Hackers turned up the heat in fridges at hundreds of French supermarkets, spoiling food and sparking fires. Danfoss controllers are in the frame.
ArchiveHacking Desk
Ahsay backup servers hacked, and the first fix didn't work
Hackers took over Ahsay backup servers and hid crypto miners. Ahsay's first patch didn't stop them, and Huntress says hotfix 10.3.4.45 now does.
ArchiveAustralia
Adelaide shooting: shots fired at Kilkenny home, pair sought
Two people fired at a Kilkenny home about 2am on Sunday 11 October. An 18-year-old who lived there is charged over weapons, not over the shooting.
ArchiveHacking Desk
Hijackers got rogue Google certificates via .gh, .sl and .as
Attackers hijacked the .gh, .sl and .as domain registries and got real security certificates for Google and YouTube names. Chrome has blocked them.
ArchiveHacking Desk
Qilin ransomware suspect extradited from Japan to Germany
Germany has arrested a 28-year-old Russian alleged to be a core Qilin ransomware member after Japan extradited him. Qilin hit Court Services Victoria.
ArchiveHacking Desk
DOJ and FBI seize Flax Typhoon tools Microscan and FishHub
The DOJ and FBI have seized domains behind Microscan and FishHub, two hacking tools run by China's Integrity Tech. A joint warning for defenders came too.
ArchiveHacking Desk
FBI confirms multiple arrests in its ShinyHunters hack probe
The FBI says it and partners have arrested multiple ShinyHunters suspects, and it's blaming a contractor's missed patch for the hack of its jobs site.