Feds Issues Advisory About SafePay Ransomware Group

Phishing Campaign Hijacks Ngrave Push Notifications, Drains About $2.56 Million From Users

October 22, 2026

Attackers abused Ngrave's third-party push-notification service to send phishing alerts that led users to disclose wallet recovery credentials, with approximately $2.56 million traced as stolen.An INFOADVISOR™ professional can assess notification-channel governance, third-party access controls, alert approval workflows, and incident shutdown procedures to reduce trusted-channel phishing risk.Contact: Support@MyINFOADVISOR.com for more information.

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

October 21, 2026

CISA warns that attackers are actively chaining Plex2Shell flaws in unpatched Plex Media Server installations to obtain administrative tokens and execute elevated code.An INFOADVISOR™ professional can help inventory affected services, assess exposure and privileged access, strengthen patch accountability, and prepare investigation and remediation procedures.Contact: Support@MyINFOADVISOR.com for more information.

“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities

October 21, 2026

Unit 42 found that a threat actor used jailbroken Hermes Agent and DeepSeek V4 tools to support credential attacks, PII database exfiltration, VoIP fraud planning and Wi-Fi password cracking.An INFOADVISOR™ professional can help organizations assess AI-enabled attack exposure, govern agent use, classify sensitive data, and strengthen access, monitoring and incident-response controls.Contact: Support@MyINFOADVISOR.com for more information.

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

October 21, 2026

CISA and international law-enforcement partners say SafePay ransomware has breached at least 600 critical-infrastructure organizations since August 2024, using stolen credentials, VPN and edge-device weaknesses, phishing, and double extortion.An INFOADVISOR™ professional can assess identity, access, backup, data-classification, and incident-recovery governance to reduce SafePay-style ransomware exposure and improve response readiness.Contact: Support@MyINFOADVISOR.com for more information.

Central Ohio Primary Care Physicians Data Breach Affects 1.4 Million Patients

October 20, 2026

A voice-phishing attack on Central Ohio Primary Care Physicians led to the exfiltration of sensitive data affecting approximately 1.4 million current and former patients.An INFOADVISOR™ professional can help healthcare organizations strengthen identity controls, sensitive-data governance, phishing resilience, and breach-response readiness.Contact: Support@MyINFOADVISOR.com for more information.

WhatsApp Help Pages Hid AI Instructions to Avoid Regulators

October 20, 2026

WhatsApp removed publicly exposed support-chatbot instructions that reportedly discouraged discussion of regulators and named privacy laws after Redact identified them in Help Center code.An INFOADVISOR™ professional can assess customer-support AI prompts, privacy-rights escalation paths, publication controls, and audit evidence to prevent hidden guidance from undermining transparency or consumer trust.Contact: Support@MyINFOADVISOR.com for more information.

Feds Issues Advisory About SafePay Ransomware Group

Share

Phishing Campaign Hijacks Ngrave Push Notifications, Drains About $2.56 Million From Users

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities

Phishing Campaign Hijacks Ngrave Push Notifications, Drains About $2.56 Million From Users

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

Central Ohio Primary Care Physicians Data Breach Affects 1.4 Million Patients

WhatsApp Help Pages Hid AI Instructions to Avoid Regulators

Every second this year counts. Govern your info before it’s too late.