Ryuk ransomware member pleads guilty in the US, faces 15 years in prison
2026-07-10T19:23:31Z•760b3b55b8baffe3d81cdcf88d254fdc4ec80be793ba8285d62dbb05b30888b6
AiTMDockerForg365GiteaHelixInjective-SDKMFA-bypassPhishing-as-a-ServiceProgress-SoftwareShareFileStorage-Zone-ControllerXSSZimbraactive-exploitationauth-bypasscryptocurrencydevice-code-phishingidentity-theft','identity-security'npmpatch-nowphishingsupply-chainvishingvulnerable-packagewallet-stealer
What happened
Multiple high-risk incidents reported: attackers are actively exploiting a critical authentication-bypass flaw in the official Gitea Docker image enabling full user (including admin) impersonation, and Progress advised ShareFile Storage Zone Controller customers to immediately shut down on-prem servers after a “credible external security threat.” Other notable items include a malicious Injective SDK package on npm that steals crypto wallets, a critical XSS in Zimbra’s classic web client with an urgent patch, and new phishing/identity-theft campaigns (Helix vishing group and Forg365 PhaaS) that
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 760b3b55b8baffe3d81cdcf88d254fdc4ec80be793ba8285d62dbb05b30888b6
- Enrichment time
- 2026-07-10T19:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.