Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead

2026-10-08T07:23:51Z•acd02c6104eb050dca17f1cc2f03aa7785646a373fe7cad5d1b2a6802a266265
CVE-2026-88779AI-securityAtlassianCitrix-NetScalerFortiBleedFortinet-FortiMailZimbraactive-exploitationcertificate-hijackingcybersecurity-newsdata-breachdomain-hijackingespionageidentity-datamalwarepatchingphishingprivacyprompt-injectionransomwaresupply-chain-riskvulnerability-managementzero-day

What happened

The document is a security-news feed covering ransomware fraud, domain and certificate hijacking, AI-agent and prompt-injection threats, data breaches, espionage, actively exploited vulnerabilities, zero-days, patching, and cyber-policy developments. The most urgent items concern ongoing exploitation of Fortinet FortiMail and FortiBleed vulnerabilities, critical Atlassian Data Center file-access flaws, Citrix NetScaler issues, pre-disclosure Zimbra exploitation, and malware affecting thousands of servers.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
theregister_security
Record identifier
acd02c6104eb050dca17f1cc2f03aa7785646a373fe7cad5d1b2a6802a266265
Enrichment time
2026-10-08T07:23:51Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.