
Telecom Firm Loses Config Data for 500+ Firewalls in UNC5820 Fortinet Hack
State-linked actors used Fortinet flaws to steal network maps and implant stealthy malware in a telecom provider’s infrastructure.
Cyber Attacks coverage from DataSafe Times holds 25 articles, 18 of them reference guides. The newest was published on October 19, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include MITRE ATT&CK and CISA: Cyber Threats and Advisories.

State-linked actors used Fortinet flaws to steal network maps and implant stealthy malware in a telecom provider’s infrastructure.

Security teams can now automatically verify that remediation efforts have closed proven attack paths across network, cloud, and identity systems.

Anthropic's Haiku 4.5 submitted fabricated crime information to Philadelphia police during a web interaction test in July, with the report surfacing months later.

Most insider breaches stem from routine administrative oversights rather than malicious intent, meaning standard security controls often fail to detect the most dangerous internal actors.

Physical tokens prevent server-side credential theft and eliminate phishing vectors that software authenticators cannot block.

Email filters misclassify legitimate traffic by design, creating blind spots that attackers exploit through slow, low-volume campaigns rather than obvious spam blasts.

Voice-based social engineering bypasses standard email filters and exploits human trust, requiring distinct technical controls and behavioral protocols to mitigate effectively.

GhostProfile, a new macOS implant, clones Chrome and Firefox profiles to control hidden browsers using victims' authenticated sessions without mirroring the screen.

Transport networks use industrial control systems that run on outdated software, creating hidden entry points for attackers to disrupt physical movement rather than just steal data.

Moroccan officials prioritize proactive threat detection and infrastructure protection amid accelerating digital transformation efforts in the region.

The state force partners with an AI-native security firm to enhance cybercrime probes through shared intelligence and capacity building.

Phishing simulations measure human error rates to prove that technical controls like DKIM and DMARC cannot stop every attack vector targeting user judgment.

Threat actors used stolen credentials to inject malicious workflows into 346 repositories, harvesting secrets and cloud keys via automated security audit scripts.

Your approval button is a race condition against human reflexes, and speed defeats security when notifications arrive in rapid succession.

Attackers use voice calls to bypass technical controls, exploiting human trust and verification gaps that software alone cannot close.

Most botnet infections remain invisible to users because the malware throttles its traffic to stay below the threshold of standard network monitoring alerts.

Session theft often bypasses password checks, leaving only behavioral anomalies and impossible geographic jumps as visible evidence in server logs.

Malicious code intercepts transaction details at the browser level before they reach the payment processor, bypassing standard network encryption.

Botnets are no longer just blunt instruments for spam; they are precision tools for credential stuffing and financial fraud that bypass basic rate limits.

Incorrect rate limiting often fails because it measures traffic by the wrong identifier, allowing attackers to bypass controls using distributed sources or rotating headers.

Tabletop exercises expose the gap between documented procedures and actual human behavior, revealing where your incident response plan fails before a real breach occurs.

DKIM signs only the content and headers at the moment of sending, meaning any later modification by intermediaries breaks the signature and invalidates the trust chain.

Lockout policies stop guessing attacks but create a vector for denial-of-service that can paralyze your entire login infrastructure during a crisis.

Attackers exploit the brain’s trust circuits to make you voluntarily bypass technical controls, turning your empathy into a security vulnerability that no firewall can block.