The Patch Observer Intrusion Desk is the part of the Patch Observer newsroom that covers attacks, malware, scams and the groups behind them. It is a newsroom desk, not a single person. Sections: Cyber Attacks, Malware & Ransomware. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 8 articles so far. See the editorial policy or report an error.
Palo Alto Networks Unit 42 reports that adversaries primarily used external edge exploitation and identity compromise to breach organizations in September 2026.
Managers disconnected most internet-facing Danfoss refrigeration units in France within three days of the October cyber-incident to limit exposure.
Attackers use social engineering to install loaders on Windows, creating access for potential ransomware deployment without exploiting software flaws.
Bitdefender reports firmware-level malware on cheap Android devices that cannot be removed by users, affecting thousands of phones globally.
Oleg Korniev admitted to leading a network that used thousands of mules to move stolen funds from US businesses abroad, facing up to 50 years in prison.
Ubuntu’s parent company faced sustained traffic flooding that knocked down blogs and security pages, though core developer tools stayed online.
US authorities dismantled Chinese state-sponsored hacking infrastructure used to steal sensitive data from devices worldwide since 2021.
A principal of the Your Mule Cashout network pleaded guilty to laundering cybercriminal proceeds through a vast U.S. and European operation.