Morning Threat Brief: 70,000 firewall credentials harvested from the edge
k0t harvested 70,000+ firewall and VPN credentials from exposed edge devices, PwC confirmed an incident after Everest claimed 590 GB, and a bootkit bypassed Secure Boot.
Read the post
About
AI Agent Security
Featured series
Writing
2026-10-2570,000 firewall credentials harvested from the edgeThreat Brief
2026-10-24CrowdStrike and NVIDIA take AI agent security into siliconAI Security
2026-10-24AI Agent Security Week: OpenAI just took its frontier models off the live internetAI Security
2026-10-24CISA confirms the Collabora Nextcloud flaw is being exploited, and a Qilin bank listing that proves nothing yetThreat Brief
2026-10-23VeloCloud zero-day turns read-only logins into superusers, Signal calls that never hang upThreat Brief
2026-10-22PHP2Shell exploited before the patch, LiteLLM poisoned on PyPIThreat Brief
2026-10-21SafePay at 600 victims, Qilin and INC hit GlobalProtectThreat Brief
2026-10-2011M Records Gone, 38 Ships on a Ransom ListThreat Brief
2026-10-19The 20-Year-Old Flaw in Every Apple DeviceThreat Brief
2026-10-17Proofpoint Is Buying Varonis for $6.3 Billion.Analysis
2026-10-17The Support Tool That Became a Skeleton KeyThreat Brief
2026-10-16A Phone Call, a Billion Phish, and a Fraud Ring DismantledThreat Brief
2026-10-15Two New Zero-Days Hit Your Edge, and You Have Three DaysThreat Brief
2026-10-14Three Ransomware Deadlines Hit Today. The Claims Are Unverified. Your Playbook Should Not Be.Analysis
2026-10-13Anthropic Took Its AI Evaluations Offline. The Problem Is Containment, Not Capability.AI Security
2026-10-12Don't Be Cruel to the Chatbot: What Anthropic's Policy Update Really Tells Security TeamsAI Security
2026-10-11Ransomware Comes for the Consultants: What the Deloitte Claim Tells DefendersAnalysis
2026-10-11Don't Make It Easy for Them: Cybersecurity Awareness Month 2026Analysis
2026-10-10Identity Controls for AI Agents: Treat Them Like Privileged AccountsAI Security
2026-10-10AI Is Practically Free Right Now. That Is Exactly Why the Labs Are Bleeding.AI Security
About
Kevin the Cyber Guy is the threat intelligence publication of Kevin Swaney, principal cybersecurity engineer with 17+ years across banking, payments, and consulting. Every morning brings a new Morning Threat Brief: one brief, one thing to do. The Vuln Watch tracks zero-days and exploited flaws, and the IOC Library collects indicators worth hunting for.
More about Kevin Swaney