Cybersecurity Intelligence Report 2026-07-31

Generated: 2026-07-31

CRITICAL SECTION

[13]Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data (TheHackerNews)

CVE-2026-20316

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation. The vulnerability, assigned CVE-2026-20316 (CVSS score: 5.3), could permit an unauthenticated, remote attacker to log

[11]JetBrains warns of critical TeamCity remote code execution flaw (BleepingComputer)

JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to achieve remote code execution. [...]

[11]Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers (BleepingComputer)

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. [...]

[11]VMware fixes three critical flaws allowing auth bypass, VM escapes (BleepingComputer)

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host. [...]

CISA KEV (Last 14 days)

No CISA KEV items in the last 14 days.

RANSOMWARE VICTIMS (Today)

ransomware.live/aurora: [RANSOMWARE] aurora leaked Pyramid Analytics B.V. , [RANSOMWARE] aurora leaked Van Eijck International Car Rescue , [RANSOMWARE] aurora leaked Evosys Laser GmbH

ransomware.live/thegentlemen: [RANSOMWARE] thegentlemen leaked Indus Protech Solutions , [RANSOMWARE] thegentlemen leaked Angel Hotel , [RANSOMWARE] thegentlemen leaked The Garfield County Sheriff Office , [RANSOMWARE] thegentlemen leaked Promatrix , [RANSOMWARE] thegentlemen leaked Malaysian Nuclear Agency , [RANSOMWARE] thegentlemen leaked Delkart Industries Pvt , [RANSOMWARE] thegentlemen leaked ETA Technology Pvt , [RANSOMWARE] thegentlemen leaked Kontact Consortium India Pvt , [RANSOMWARE] thegentlemen leaked Upanal CNC Solutions

ransomware.live/kyber: [RANSOMWARE] kyber leaked L3HARRIS

ransomware.live/genesis: [RANSOMWARE] genesis leaked Boyum IT Solutions (HOT!) , [RANSOMWARE] genesis leaked C.A. Walker Construction

ransomware.live/qilin: [RANSOMWARE] qilin leaked Audio Precision, Inc , [RANSOMWARE] qilin leaked TenSparrows , [RANSOMWARE] qilin leaked Db Tarimsal Enerji , [RANSOMWARE] qilin leaked Byonyks , [RANSOMWARE] qilin leaked Prenisac , [RANSOMWARE] qilin leaked Excel Consultores , [RANSOMWARE] qilin leaked Affinity Capital , [RANSOMWARE] qilin leaked Adpo , [RANSOMWARE] qilin leaked servitelco , [RANSOMWARE] qilin leaked Orimar , [RANSOMWARE] qilin leaked Indian Motos Inmot

ransomware.live/Gammax: [RANSOMWARE] Gammax leaked RE/MAX 1st Choice , [RANSOMWARE] Gammax leaked AguAseo

ransomware.live/securotrop: [RANSOMWARE] securotrop leaked MAG USA Inc

ransomware.live/incransom: [RANSOMWARE] incransom leaked PARTNERED HEALTH GROUP , [RANSOMWARE] incransom leaked sslf.local

ransomware.live/cmdorganization: [RANSOMWARE] cmdorganization leaked Contact Group , [RANSOMWARE] cmdorganization leaked Collge Mont Notre-Dame de Sherbrooke , [RANSOMWARE] cmdorganization leaked Rondout Electric

ransomware.live/pear: [RANSOMWARE] pear leaked Sonitor Technologies

ransomware.live/kairos: [RANSOMWARE] kairos leaked Warwick Fabrics

ransomware.live/gunra: [RANSOMWARE] gunra leaked Siam Stabilizers and Chemicals Co., Ltd. / SSC

ransomware.live/morpheus: [RANSOMWARE] morpheus leaked Yue Ki Industrial

ransomware.live/Loki: [RANSOMWARE] Loki leaked Credit Freedom & Restoration

ransomware.live/Zerolockersec: [RANSOMWARE] Zerolockersec leaked massar.men.gov.ma

ransomware.live/zerolockersec: [RANSOMWARE] zerolockersec leaked www.dgcx.ae

NEWS SECTION

[7]‘DangleGeddon’: AI Could Weaponize Forgotten DNS Records at Global Scale (SecurityWeek)

Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.

The post ‘DangleGeddon’: AI Could Weaponize Forgotten DNS Records at Global Scale appeared first on SecurityWeek.

[7][RANSOMWARE] aurora leaked Pyramid Analytics B.V. (ransomware.live/aurora)

Victim: Pyramid Analytics B.V. | Group: aurora | Website: Pyramid Analytics B.V. | Country: NL | Details: [analytics] Pyramid Analytics B.V. — a decision-intelligence platform company headquartered in Amsterdam, acquired by ServiceNow (NYSE: NOW) for hundreds of millions of dollars just four months earlier. We obtained the complete source code of the Pyramid Decision Intelligence Platform along with:

[7][RANSOMWARE] thegentlemen leaked Indus Protech Solutions (ransomware.live/thegentlemen)

Victim: Indus Protech Solutions | Group: thegentlemen | Website: indusprotech.com | Country: IN | Details: indusprotech.com zoominfo.com/c/indus-protech-solutions-ltd/1323287130 Indus Protech Solutions is a Chennai-based company specializing in comprehensive bulk MRO (Maintenance, Repair, and Operations) and supply chain services for global trade. Acting as a one-stop sourcing partner, they provide acces

[7][RANSOMWARE] thegentlemen leaked Angel Hotel (ransomware.live/thegentlemen)

Victim: Angel Hotel | Group: thegentlemen | Website: angelpershore.co.uk | Country: GB | Details: angelpershore.co.uk zoominfo.com/c/angel-hotel/1153643926 The Angel, Pershore is a historic Tudor-origin hotel and restaurant located in the heart of the market town of Pershore, Worcestershire, near the River Avon. It serves as a premier venue offering farm-to-table dining with locally sourced prod

[7][RANSOMWARE] thegentlemen leaked The Garfield County Sheriff Office (ransomware.live/thegentlemen)

Victim: The Garfield County Sheriff Office | Group: thegentlemen | Website: garcosheriff.com | Country: US | Details: garcosheriff.com The Garfield County Sheriff's Office is the primary law enforcement agency serving Garfield County, Colorado. Its mission is to deliver exceptional service and problem-solving solutions to the community through professional, ethical, and compassionate conduct. The office provides co

[6]Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database (TheHackerNews)

A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted query against a Gremlin database controlled by the attacker. From there, code execution on a

[6][RANSOMWARE] kyber leaked L3HARRIS (ransomware.live/kyber)

Victim: L3HARRIS | Group: kyber | Website: l3harris.com | Country: US | Details: L3Harris is a global aerospace and defense technology innovator that provides mission-critical solutions for government, defense, and commercial sectors.

[5]Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts (TheHackerNews)

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A compromised page could infect a system running a vulnerable AnySign4PC version without a prompt or

[5][RANSOMWARE] genesis leaked Boyum IT Solutions (HOT!) (ransomware.live/genesis)

Victim: Boyum IT Solutions (HOT!) | Group: genesis | Website: boyum-it.com | Country: DK | Details: A provider of IT services

[5][RANSOMWARE] genesis leaked C.A. Walker Construction (ransomware.live/genesis)

Victim: C.A. Walker Construction | Group: genesis | Website: cawalkerconstruction.com | Country: US | Details: A construction management company

[5][RANSOMWARE] qilin leaked Audio Precision, Inc (ransomware.live/qilin)

Victim: Audio Precision, Inc | Group: qilin | Website: www.ap.com | Country: US | Details: N/A

[5][RANSOMWARE] Gammax leaked RE/MAX 1st Choice (ransomware.live/Gammax)

Victim: RE/MAX 1st Choice | Group: Gammax | Website: www.remax-1stchoice.com | Country: CA | Details: RE/MAX 1st Choice Florida was established in 2005 and is managed by Katy and John Martinelli, who serve as the owners and operators and hold the compa...

[5][RANSOMWARE] Gammax leaked AguAseo (ransomware.live/Gammax)

Victim: AguAseo | Group: Gammax | Website: www.aguaseo.com | Country: CO | Details: AguAseo is a Panamanian organization dedicated to maintaining cleanliness in the province of Colón. It provides solid waste collection and cleaning of...

[5][RANSOMWARE] securotrop leaked MAG USA Inc (ransomware.live/securotrop)

Victim: MAG USA Inc | Group: securotrop | Website: www.magusainc.com | Country: US | Details: Status: AWAITING Size: 1871 GB

[5][RANSOMWARE] incransom leaked PARTNERED HEALTH GROUP (ransomware.live/incransom)

Victim: PARTNERED HEALTH GROUP | Group: incransom | Country: AU | Details: PARTNERED HEALTH GROUP — Australia ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Industry: Healthcare — Primary Care, Occupational Health, Psychology, Telehealth Headquarters: Australia (NSW, QLD, VIC, WA, ACT) Owner: Quadrant Private Equity Clinics:

[5][RANSOMWARE] cmdorganization leaked Contact Group (ransomware.live/cmdorganization)

Victim: Contact Group | Group: cmdorganization | Website: www.contactgroup.com.au | Country: AU | Details: Contact Group is a proudly Tasmanian company specializing in building services and multi-technology solutions. They offer award-winning services across various divisions, including electrical and communications, HVAC-R, infrastructure, fire, technology, security, plumbing, and facilities maintenance

[5][RANSOMWARE] pear leaked Sonitor Technologies (ransomware.live/pear)

Victim: Sonitor Technologies | Group: pear | Website: sonitor.com | Country: US | Details: Sonitor’s platform and technologies deliver the accurate and reliable data required to optimize care delivery

[5][RANSOMWARE] incransom leaked sslf.local (ransomware.live/incransom)

Victim: sslf.local | Group: incransom | Website: sslf.local | Country: US | Details: Samuels & Thornton is a law firm based in New Orleans, specializing in medical malpractice and personal injury cases. They provide personalized legal guidance to individuals, families, and businesses facing legal challenges, ensuring that each client receives dedicated attention from experienced att

[5][RANSOMWARE] qilin leaked TenSparrows (ransomware.live/qilin)

Victim: TenSparrows | Group: qilin | Website: www.tensparrows.com | Country: US | Details: N/A

[5][RANSOMWARE] cmdorganization leaked Collge Mont Notre-Dame de Sherbrooke (ransomware.live/cmdorganization)

Victim: Collge Mont Notre-Dame de Sherbrooke | Group: cmdorganization | Website: www.lemont.ca | Country: CA | Details: Le Mont Notre-Dame is a private secondary school for girls located in Sherbrooke, specializing in international education. With over 160 years of experience, it offers a unique pedagogy that emphasizes female success and empowerment. The school provides a wide range of programs, including arts, lang

[5][RANSOMWARE] qilin leaked Db Tarimsal Enerji (ransomware.live/qilin)

Victim: Db Tarimsal Enerji | Group: qilin | Website: www.dbtarimsalenerji.com.tr | Country: TR | Details: N/A

[5][RANSOMWARE] cmdorganization leaked Rondout Electric (ransomware.live/cmdorganization)

Victim: Rondout Electric | Group: cmdorganization | Website: www.rondoutelectric.net | Country: US | Details: Rondout Electric Inc. is a leading electrical contracting company with over 50 years of experience, specializing in a wide range of projects including health care facilities, schools, industrial complexes, and public sector projects. With a dedicated team of approximately 100 employees, they are kno

[5][RANSOMWARE] qilin leaked Byonyks (ransomware.live/qilin)

Victim: Byonyks | Group: qilin | Website: www.byonyks.com | Country: US | Details: N/A

[5][RANSOMWARE] qilin leaked Prenisac (ransomware.live/qilin)

Victim: Prenisac | Group: qilin | Website: www.prenisac.com | Country: US | Details: N/A

[5][RANSOMWARE] qilin leaked Excel Consultores (ransomware.live/qilin)

Victim: Excel Consultores | Group: qilin | Website: www.excel.com.mx | Country: MX | Details: N/A

[5][RANSOMWARE] qilin leaked Affinity Capital (ransomware.live/qilin)

Victim: Affinity Capital | Group: qilin | Website: www.affinitycorp.net | Country: US | Details: N/A

[5][RANSOMWARE] kairos leaked Warwick Fabrics (ransomware.live/kairos)

Victim: Warwick Fabrics | Group: kairos | Website: warwick.com.nz | Country: NZ | Details: As one of the world’s leading textile and soft furnishing wholesalers, Warwick is a family-owned company that has been committed to providing quality materials to New Zealanders since 1985. Warwick are driven to continuously meet the evolving needs of today’s global textile markets by constantly c

[5][RANSOMWARE] gunra leaked Siam Stabilizers and Chemicals Co., Ltd. / SSC (ransomware.live/gunra)

[5][RANSOMWARE] qilin leaked Adpo (ransomware.live/qilin)

Victim: Adpo | Group: qilin | Website: www.adpo.com | Country: BE | Details: N/A

[5][RANSOMWARE] qilin leaked servitelco (ransomware.live/qilin)

Victim: servitelco | Group: qilin | Website: www.servitelco.com | Country: CL | Details: N/A

[5][RANSOMWARE] qilin leaked Orimar (ransomware.live/qilin)

Victim: Orimar | Group: qilin | Website: www.orimar.be | Country: BE | Details: N/A

[5][RANSOMWARE] qilin leaked Indian Motos Inmot (ransomware.live/qilin)

Victim: Indian Motos Inmot | Group: qilin | Website: www.inmot.com.ec | Country: EC | Details: N/A

[5][RANSOMWARE] aurora leaked Van Eijck International Car Rescue (ransomware.live/aurora)

Victim: Van Eijck International Car Rescue | Group: aurora | Website: Van Eijck International Car Rescue | Country: NL | Details: [recovery, rescue] Van Eijck International Car Rescue B.V. — a family-owned Dutch towing and recovery company with 225+ vehicles, 180+ employees, and 20 branch offices across the Netherlands and Spain. The exposed material includes: 227 employee home directories (156 GB) containing pers

[5][RANSOMWARE] aurora leaked Evosys Laser GmbH (ransomware.live/aurora)

Victim: Evosys Laser GmbH | Group: aurora | Website: Evosys Laser GmbH | Country: DE | Details: [manufacturer] Evosys Laser GmbH — an Erlangen-based industrial laser welding systems manufacturer with ~130 employees, subsidiaries in the US, China, and a string of Tier 1 automotive customers. The dataset is the complete corporate repository, spanning every business function: 130 employees' com

[5][RANSOMWARE] thegentlemen leaked Promatrix (ransomware.live/thegentlemen)

Victim: Promatrix | Group: thegentlemen | Website: promatrixcorp.com | Country: US | Details: promatrixcorp.com zoominfo.com/c/promatrix-corp/347777611 Promatrix Corp is a rapidly growing IT consulting and outsourcing company based in New Jersey, USA. They deliver comprehensive global technology solutions, including web application development, managed IT services, and staff augmentation. Th

[5][RANSOMWARE] thegentlemen leaked Malaysian Nuclear Agency (ransomware.live/thegentlemen)

Victim: Malaysian Nuclear Agency | Group: thegentlemen | Website: nuclearmalaysia.gov.my | Country: MY | Details: nuclearmalaysia.gov.my zoominfo.com/c/malaysian-nuclear-agency/459120141 The Malaysian Nuclear Agency (Nuklear Malaysia) is the leading government research and development organization in nuclear science and technology. It focuses on the peaceful application of nuclear innovations to support nationa

[5][RANSOMWARE] thegentlemen leaked Delkart Industries Pvt (ransomware.live/thegentlemen)

Victim: Delkart Industries Pvt | Group: thegentlemen | Website: delkartindustries.com | Country: IN | Details: delkartindustries.com zoominfo.com/c/delkart-industries-pvt-ltd/471455561 Delkart Industries is an Indian manufacturing company established in 2017, specializing in custom felts, automobile carpets, and noise and thermal insulation parts. The company serves the automotive, home appliance, robotics,

[5][RANSOMWARE] thegentlemen leaked ETA Technology Pvt (ransomware.live/thegentlemen)

Victim: ETA Technology Pvt | Group: thegentlemen | Website: etatechnology.in | Country: IN | Details: etatechnology.in zoominfo.com/c/eta-technology-pvt-ltd/432054929 ETA Technology is a Bangalore-based manufacturing company founded in 1991, specializing in the design and production of advanced welding and forging equipment. They build rotary friction welders, friction stir welding systems, electric

[5][RANSOMWARE] thegentlemen leaked Kontact Consortium India Pvt (ransomware.live/thegentlemen)

Victim: Kontact Consortium India Pvt | Group: thegentlemen | Website: kontact.in | Country: IN | Details: kontact.in zoominfo.com/c/kontact-consortium-india-pvt-ltd/437934184 Kontact is an Indian engineering company with over 50 years of experience, specializing in electrical and mechanical solutions for the railway, infrastructure, and industrial sectors. They provide end-to-end services, including rai

[5][RANSOMWARE] thegentlemen leaked Upanal CNC Solutions (ransomware.live/thegentlemen)

Victim: Upanal CNC Solutions | Group: thegentlemen | Website: upanalcnc.com | Country: PE | Details: upanalcnc.com zoominfo.com/c/upanal-cnc-solutions/370526030 Upanal CNC Solutions is an Indian company specializing in advanced metal cutting and metal forming technologies, particularly CNC machinery. Beyond supplying equipment, they provide comprehensive services including machine modernization, 24

[5][RANSOMWARE] morpheus leaked Yue Ki Industrial (ransomware.live/morpheus)

Victim: Yue Ki Industrial | Group: morpheus | Website: yueki.com.tw | Country: TW | Details: **Website**: yueki.com.tw **Revenue**: $21 Million Yue Ki Industrial is a manufacturing company that creates high-quality industrial products for businesses. They work with metal, plastic, and other

[5][RANSOMWARE] Loki leaked Credit Freedom & Restoration (ransomware.live/Loki)

Victim: Credit Freedom & Restoration | Group: Loki | Website: creditfreedomrestoration.com

[5][RANSOMWARE] Zerolockersec leaked massar.men.gov.ma (ransomware.live/Zerolockersec)

Victim: massar.men.gov.ma | Group: Zerolockersec | Website: massar.men.gov.ma | Country: MA | Details: Data Size: 910.5 MB

[5][RANSOMWARE] zerolockersec leaked www.dgcx.ae (ransomware.live/zerolockersec)

Victim: www.dgcx.ae | Group: zerolockersec | Website: www.dgcx.ae | Country: AE | Details: Data Size: 300mb

SUMMARY

Total new items: 83 Critical: 4 KEV items: 0 Ransomware victims today: 41