Risky Biz News (Newsletter / Catalin Cimpanu)
risky-biz-news · B · active
Catalin Cimpanu's daily cybersecurity newsletter, strong signal-to-noise (added 2026-05-08). Often surfaces stories ahead of major outlets. RSS feed verified 2026-05-08. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → feed https://news.risky.biz/rss/ 5 (then webfetch the per-post URL for the full bulletin body if needed). AVOID: RSS is the canonical method and is fresh (daily). No bridge UA issue. Summaries in-feed are short; drill the link for the full bulletin.. | 2026-07-05 admiralty audit: B, established original security journalism (Cimpanu), daily, high signal. Live and fresh; active retained.
Cited in 9 entries
Citation cadence
Citation days per ISO week (19 weeks of coverage span, total 8).
- CVE-2026-104286, Fortinet FortiMail: unauthenticated path traversal file write exploited as a zero-day, fixed in 8.0.2, 7.6.7 and 7.4.9 (CVSS 9.8)2026-10-02
- Belnet, the Belgian government and research network, confirms a supplier zero-day let attackers copy all incoming mail to Belnet-owned domains and the transfer links its FileSender and FedSender services sent directly for 65 days2026-10-02
- ValleyRAT (Winos 4.0) hides inside a re-signed Chinese wallpaper app: DLL sideloading, a self-restoring svchost injection, and a Windows Defender kill switch2026-09-01
- ByteToBreach hits Hungary's State Treasury after Romania's land registry; the reported entry point is an Oracle WebLogic server left unpatched since a 2017 patch cycle2026-08-05
- Romania's national cadastre agency ANCPI hit by a multi-day cyberattack; ByteToBreach claims citizen-data and e-Terra source-code theft plus ransomware2026-07-19
- Microsoft disrupts StegoAd, 119 Edge extensions hid payloads in image and font files via steganography2026-06-30
- China arrests 67 members of the Silver Fox (Winos/ValleyRAT) cybercrime network2026-06-18
- UK National Federation of Subpostmasters hit by ransomware via a cPanel flaw; disruption persists into June2026-06-05
- Dutch Police + NCSC dismantle Asocks residential-proxy botnet (~17 M devices, 200 NL-hosted servers seized)2026-05-29