Index live· 822 files indexed

Search the index

Search files, actors, editions, indicators and standards4 results

Try

Results for “Cross-sector”Newest first

Citrix NetScaler Zero-Days Were Exploited for Three Weeks Before the Patch, With Root Access

Root on the front door for three weeks, a shell that hides in headers, and a cleanup crew. The patch closes the door with them inside.

Suspected state-sponsored (vendor)CVE-2026-88772 DTLS heap corruptionCross-sectorEdge devices

Sev 427 September 2026TargetCitrix NetScaler operatorsActorSuspected state-sponsored (vendor)

Ryuk Conspirator Extradited From Ukraine Got 24 Months for a Campaign of 2,400 Attacks

Two years for the participant who travelled, seven years after the conduct. The operators who built what came next were not in the room.

RyukProsecutionCross-sectorEnforcement

Sev 322 September 2026TargetRyuk conspiracyActorRyukUSA

Four China-Aligned Clusters Used the Same Chrome and Windows Zero-Day Chain Within a Week

Same code, same comments, four operators, one week. The fix was public in the source tree for a month before it reached the browser.

APT31 and China-aligned clusters (vendor)Chrome and Windows zero-day chainCross-sectorExploitation

Sev 49 September 2026TargetNGOs, defence contractors, SE Asian governmentsActorAPT31 and China-aligned clusters (vendor)

Updated Medusa Advisory Puts Victims Past 500, and HHS Joins the Signatories

Two hundred more victims between two revisions of the same advisory. The health department signing on is the substantive part.

MedusaVariousCross-sectorEnforcement

Sev 418 August 2026TargetMedusa ransomware victimsActorMedusaUSA

ForensicPost

Independent reporting on digital forensics and incident response.

SectionsBreaches Ransomware Nation-state Cloud AI Insurance

DataCase files Data export Actor index Glossary Methodology

ContactSecure tips Corrections The desk Ethics

© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging