🇩🇪 Suspected Qilin payload developer extradited from Japan to Germany, 🚔 FBI arrests ransomware-negotiation firm co-founder in ShinyHunters probe, 🔥 SonicWall SMA1000 CVSS 10.0 SSRF exploited days after patch, 💾 AhsayCBS zero-day chain hits five orgs with web shells and XMRig, 🤖 AgentCorruption single-prompt AWS agent takeover, 🐦 Telegram Desktop one-click account takeover PoC public

[REVISIT] Germany has taken custody of the 28-year-old Russian national Japan detained in Osaka for his suspected role in the Qilin ransomware operation, a transfer completed October 2 and now confirmed by Japan's National Police Agency, which says the man was held under a provisional detention warrant obtained with Germany through the Tokyo High Public Prosecutors Office after arriving in Japan as a tourist. He is wanted for the September 2024 ransomware attack on a German logistics company that extorted over $160,000 in cryptocurrency, and German reporting says he programmed the group's payloads. Qilin, also known as Agenda, listed more than 400 victims in 2025 and was exploiting Check Point CVE-2026-50751 as recently as June, so a suspected payload developer in custody is the kind of personnel loss that should show up in the group's leak-site cadence.

[NEW] The FBI on Thursday arrested the co-founder of a Canadian ransomware-negotiation firm while he was visiting Pennsylvania for the Cyber Risk Summit at the Loews Philadelphia Hotel, where his firm was a top sponsor, and multiple sources tell KrebsOnSecurity the arrest ties to the ShinyHunters investigation into the theft of sensitive data on thousands of FBI agents. The New York Times reported the arrest without naming the man, FBI Director Kash Patel confirmed an arrest on X, and the investigation is centralized at a Texas field office. The arrest tests the blurry line between negotiating with extortion crews and assisting them.

[UPDATE] SonicWall's CVSS 10.0 unauthenticated SSRF in the SMA1000 Appliance WorkPlace interface, CVE-2026-102255, is now exploited in real attacks within days of this week's fix in builds 12.5.0-03082 and 12.4.3-03670, affecting the 6210, 7210 and 8200v models while sparing the SMA 100 Series and firewall SSL-VPN. On a remote-access appliance, a patch-to-exploitation gap this short means unpatched SMA1000s should be treated as compromised, not merely exposed.

[UPDATE] Huntress has detailed the AhsayCBS intrusions: activity observed October 7 against at least five organizations, chaining the CVE-2026-105133 authentication bypass, which has a public exploit, into the CVE-2026-105134 OS command injection in the Replication Receiver for unauthenticated command execution with SYSTEM privileges, then dropping web shells and an XMRig cryptominer. AhsayCBS is widely used by MSPs, so backup providers should sweep their estates for web shells before this becomes someone's ransomware foothold.

[NEW] Telegram Desktop CVE-2026-107181 is a one-click account takeover: an unescaped separator in the single-instance IPC mechanism lets a clicked link read arbitrary files from disk and hijack the session, and proof-of-concept exploit code is already public. Update every desktop client and stop clicking links inside Telegram until you have.

[NEW] Push Security documented Adception, a scheme abusing legitimate Bing redirect URLs as the click target inside Google Ads to deliver fake Claude installers carrying the ClickFix toolkit tracked as AcSig: a sponsored result for "claude mac" displayed bing.com as its destination, routed clicks through Bing's /ck/a tracker and a compromised South American retailer's WordPress site, and landed on claude-desk-code[.]com, with cli-desktop[.]com and lake-90[.]com also in the set. The trusted-domain front defeats ad review, so block the named domains and treat sponsored installer links for developer tools as hostile by default.

[NEW] Zenity Labs' AgentCorruption research shows a single malicious prompt through an exposed Bedrock AgentCore chatbot can pivot from conversation input to credential theft, memory poisoning and lateral movement across agents in the same AWS account and region by abusing overprivileged execution roles attached to agent metadata access. AWS patched the flaw before the October 9 reporting wave, but the patch only matters if it is deployed and the execution roles are cut down to size.

[NEW] watchTowr's Death By A Thousand PaperCuts disclosure drops a pre-auth RCE chain against PaperCut NG and MF that the researchers say defeats existing patches, tracked as CVE-2026-82077, CVE-2026-82078 and CVE-2026-81578 alongside four WT-2026-0141 through 0144 tracking ids, meaning at least one finding has no CVE for scanners to key on. PaperCut servers are typically domain-joined and hold service credentials, so treat prior patching as unverified until the chain is retested against your build.

[REVISIT] The law-enforcement net around ShinyHunters keeps tightening: Director Kash Patel announced Friday the arrest of another suspected co-conspirator in the FBIjobs.gov data theft, reported by the New York Times to be a Canadian, days after a 16-year-old reported to lead the group under the handle Rey was detained in Jordan and reportedly began cooperating with the FBI, following September's arrest in the Netherlands. All of this lands on the group that in late September hijacked Clop's own Tor leak site through an unauthenticated Grav CMS path traversal, claimed source code and onion service private keys, and demanded eight figures, a feud worth watching as arrested members start talking.

[REVISIT] The ASOS breach has outgrown its first description: BBC reporting shows the data taken through socially engineered employee credentials includes more than the basic personal information the retailer initially described, and Snowflake has publicly stated its platform was not the vulnerability, pointing back to the third-party customer-communication platforms ASOS says were accessed. Watch for a revised notification scope, because early breach statements shrinking under re-examination is becoming a pattern.

[UPDATE] The IDCF Cloud ransomware fallout is spreading beyond IDC Frontier's direct tenants: the October 9 update reports JR East and View Card warning that an external email delivery service hit by the attack may have exposed customer data, while Asahi confirms 495 corporate and municipal customers are affected with the personal-information impact still under investigation.

[NEW] JFrog researchers published a proof of concept for CVE-2026-105192, a CVSS 9.8 unauthenticated RCE in LMCache, the KV-cache layer used by vLLM inference stacks: unsafe pickle deserialization over the multiprocess ZeroMQ transport on default port 5555, affecting versions 0.3.9 through 0.5.5 and the dev branch, with no fixed release available. Isolate or take offline anything running LMCache until a patch ships.

[NEW] The P7 DarkSword iOS exploit kit has a new variant, reported October 10, that shrinks its on-device footprint while adding keychain extraction, crypto-wallet data theft and two-way command and control, with no CVE or victim counts attached. That combination targets users who keep credentials and digital assets on the same handset, so hunt mobile telemetry for unexpected two-way C2 flows rather than waiting for signatures.

[NEW] CVE-2025-1316, an OS command injection in Edimax IC-7100 IP cameras, is being actively exploited in the wild, and cameras rarely carry endpoint telemetry, so an internet-reachable IC-7100 should be treated as a foothold: patch or replace the device and restrict management access to required IPs only.

Watchlist: whether custody of the suspected Qilin payload developer produces indictments naming other core members; formal identification and charges for the arrested ransomware-negotiation firm co-founder; a vendor fixed-version table and CVE mapping for the PaperCut chain plus mass-scan telemetry against print servers; expansion of the Adception domain set beyond claude-desk-code[.]com and cli-desktop[.]com; and the first LMCache patch release.

Generated by zai/glm-5.3-flash. Input tokens: 70,560, output tokens: 24,851, cache read: 899,968, cache write: 0.