#AgendaCrypt
LightNews LightNews
threadlinqs.bsky.social
Qilin suspect extradited to Germany, but its affiliates were already riding a Check Point VPN zero-day. https://intel.threadlinqs.com/threat/TL-2026-3004 #ThreatIntel #CVE_2026_50751 #AgendaCrypt #SystemBC
Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany; Qilin Affiliate Exploited Check Point VPN Zero-Day CVE-2026-50751
October 7, 2026 at 2:14 PM
threadlinqs.bsky.social
Healthcare is ransomware's favorite target - Qilin and Akira walk in through edge devices and stolen sessions. https://intel.threadlinqs.com/threat/TL-2026-3127 #ThreatIntel #CVE_2024_1708 #CVE_2024_55591 #AgendaCrypt
Healthcare Sector Ransomware Targeting and Expanding Attack Surface (Qilin, Akira, DragonForce, LockBit, The Gentlemen)
October 9, 2026 at 11:07 AM
threadlinqs.bsky.social
Record quarter: Clop is back, hitting PTC Windchill via CVE-2026-12569 as Qilin leads ransomware claims. https://intel.threadlinqs.com/threat/TL-2026-3135 #ThreatIntel #CVE_2026_12569 #CVE_2025_3248 #AgendaCrypt
Q3 2026 Record Ransomware Surge: 2,627 Claimed Attacks, Qilin and The Gentlemen Lead, Clop Resurgence via PTC Windchill CVE-2026-12569
October 9, 2026 at 12:17 PM
threadlinqs.bsky.social
Storm-2570 runs one playbook, then picks its ransomware last: Qilin, DragonForce, Anubis, or BERT. https://intel.threadlinqs.com/threat/TL-2026-2729 #ThreatIntel #AgendaCrypt #DragonForce #anubis
Microsoft Tracks Storm-2570 Ransomware Affiliate Behind Qilin, DragonForce, Anubis, and BERT Deployments
September 28, 2026 at 2:45 AM
threadlinqs.bsky.social
Check Point's VPN just gave attackers a way into Security Gateways with zero credentials needed. https://intel.threadlinqs.com/threat/TL-2026-2463 #ThreatIntel #CVE_2026_85102 #CVE_2026_85103 #AgendaCrypt
Dutch NCSC Warns of Critical Check Point VPN Flaws (CVE-2026-85102, CVE-2026-85103) - Exploitation Expected Imminently
September 12, 2026 at 2:45 PM
threadlinqs.bsky.social
France's dark web activity is exploding - ransomware gangs and pro-Russian hacktivists are both cashing in. https://intel.threadlinqs.com/threat/TL-2026-2564 #ThreatIntel #AgendaCrypt #MedusaLocker #LockBit
France Dark Web Threat Landscape: Ransomware and Hacktivist Activity Surges 4x Over 24 Months
September 18, 2026 at 11:51 AM
threadlinqs.bsky.social
A ransomware gang claims it breached the ATF. No proof shown - but the agency confirms a real incident. https://intel.threadlinqs.com/threat/TL-2026-2201 #ThreatIntel #AgendaCrypt #Agenda #wikileaksv2
Qilin Ransomware Gang Claims Breach of US ATF; Agency Confirms 'Major Incident' on Isolated Investigations System
August 29, 2026 at 7:43 AM
threadlinqs.bsky.social
Qilin ransomware claims it breached a DOJ ATF system holding files on active investigation targets. https://intel.threadlinqs.com/threat/TL-2026-2192 #ThreatIntel #AgendaCrypt #Agenda #MimiKatz
Qilin Ransomware Group Claims Cyberattack on ATF (DOJ) - Standalone Investigation-Target System Breached, Attribution Unconfirmed
August 28, 2026 at 9:08 PM
threadlinqs.bsky.social
Blanket patch cycles can't outrun AI-assisted exploitation anymore, Rapid7 warns. https://intel.threadlinqs.com/threat/TL-2026-2058 #ThreatIntel #AgendaCrypt #DragonForce #Qilin
Rapid7 Q2 2026 Threat Landscape Report: Vulnerability Disclosures Double, AI-Assisted Exploitation Compresses Patch Timelines
August 18, 2026 at 2:40 PM
threadlinqs.bsky.social
A hospital system shut most of its doors after a ransom note appeared on its own screens. https://intel.threadlinqs.com/threat/TL-2026-1727 #ThreatIntel #RansomHub #AgendaCrypt #LockBit
AnMed Health Ransomware/Malware Disruption Closes 79-83 South Carolina/Georgia Facilities, Extortion Note Demands Payment Within 72 Hours
July 27, 2026 at 10:46 PM
threadlinqs.bsky.social
France is under siege - Qilin ransoms town halls while pro-Russia NoName057 floods EDF and La Poste offline. https://intel.threadlinqs.com/threat/TL-2026-1652 #ThreatIntel #AgendaCrypt #MedusaLocker #LockBit
France Threat Landscape: Qilin/MedusaLocker/LockBit Ransomware and NoName057(16) Hacktivist DDoS Campaign Amid 4x Dark Web Activity Surge
July 23, 2026 at 8:14 AM
threadlinqs.bsky.social
AI is now writing exploits faster than defenders can patch: 51% more CVEs in just six months. https://intel.threadlinqs.com/threat/TL-2026-1614 #ThreatIntel #AgendaCrypt #Akira #CVESurge
Forescout 2026H1 Threat Review: 51% Surge in Published Vulnerabilities as AI and Supply-Chain Attacks Drive Threats Across IoT/OT/IoMT Infrastructure
July 22, 2026 at 8:44 AM
threadlinqs.bsky.social
Ransomware just shut down Coca-Cola's fairlife US dairy production - no group has claimed it yet. https://intel.threadlinqs.com/threat/TL-2026-1506 #ThreatIntel #AgendaCrypt #Akira #Clop
Ransomware Attack on Coca-Cola's Fairlife Dairy Halts U.S. Production Systems
July 19, 2026 at 6:02 AM
threadlinqs.bsky.social
Qilin Ransomware: Custom Rust Loader and Kernel-Level EDR Killer. https://intel.threadlinqs.com/threat/TL-2026-1453 #ThreatIntel #CVE_2025_7771 #AgendaCrypt #Gentlemen
Qilin Ransomware: Custom Rust Loader and Kernel-Level EDR Killer via Weaponized ThrottleStop Driver (CVE-2025-7771)
July 17, 2026 at 2:58 PM
threadlinqs.bsky.social
SAP just patched 3 critical bugs - one lets an unauthenticated attacker smuggle requests and hijack BTP sessions. https://intel.threadlinqs.com/threat/TL-2026-1302 #ThreatIntel #CVE_2026_44747 #CVE_2026_27690 #AgendaCrypt
SAP Patches Critical NetWeaver, Approuter, and Commerce Cloud Flaws (CVE-2026-44747, CVE-2026-27690, CVE-2026-44761)
July 14, 2026 at 12:03 PM
threadlinqs.bsky.social
US and UK sanction the no-log VPN and cryptor sellers that quietly powered the ransomware economy. https://intel.threadlinqs.com/threat/TL-2026-1295 #ThreatIntel #anubis #AgendaCrypt #Sinobi
US Treasury Sanctions VPN Provider 1VPNS and Crypter Seller for Enabling Ransomware Operations
July 14, 2026 at 10:05 AM