Infosec bits for 2026 week 41

Zoya Vilakazi | Oct. 9, 2026, 3:56 p.m.

Cybersecurity News:

Hackers hijack Google domains after breaching ccTLD registries [Bill Toulas, Bleeping Computer]

University of Illinois Chicago affected by ransomware attack on medical school [Jonathan Greig, The Record]

Microsoft Teams to get support for third-party deepfake detection tools [Sergiu Gatlan, Bleping Computer]

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions [Ravie Lakshmanan, The Hacker News]

Vulnerabilities & Patches:

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins [Bill Toulas, Bleping Computer]

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication [Eduard Kovacs, Security Week]

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments [Ravie Lakshmanan, The Hacker News]

Cisco warns of critical flaws allowing Nexus switch takeover [Bill Toulas, Bleeping Computer]

SonicWall and Splunk Patch Critical Vulnerabilities [Ionut Arghire, Security Week]

Malware:

Low-cost Android phones ship with residential proxy malware [Lawrence Abrams, Bleeping Computer]

ClickFix Attacks Evolve to Better Hide Malicious Payloads [Alexander Culafi, Dark Reading]

PoeLLM malware infects exposed AI servers in cryptomining attacks [Bill Toulas, Bleeping Computer]

FakeGit malware campaign returns with 17,610 malicious GitHub repos [Bill Toulas, Bleeping Computer]

Data Breaches:

Oracle Health Data Breach Tally Climbs to Nearly 20 Million [Eduard Kovacs, Security Week]

ASOS links data breach to social engineering attack, credential theft [Bill Toulas, Bleeping Computer]

FBI Blames Contractor’s Missed Patch for ShinyHunters Breach [Eduard Kovacs, Security Week]