Russian hacking group Star Blizzard expands phishing operations with new malware technique.

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory.

ASUS warns of critical router flaw triggered by malicious VPN files.

Brazilian Elections: Foreign Interference and Disinformation Networks

Argentine operative Fernando Cerimedo: A Workers’ Party (PT) deputy formally petitioned the Supreme Federal Court (STF) to investigate Cerimedo for allegedly operating a “bot farm” from Bolivia to interfere in Brazil’s election in support of Flávio Bolsonaro.

U.S.-paid ads: Meta approved AI-generated false political ads targeting Brazilian audiences, paid for by a U.S. account, including one that showed Trump urging votes for Flávio. A study by the British organization Eko found that 87% of these policy-violating ads were approved by automated moderation.

Foreign X accounts: Accounts on X based outside Brazil ran paid pro-Flávio content between September 18–21 without disclosing sponsors. X itself identified pro-Flávio profiles in the U.S. and Poland after legal action by candidate Renan Santos.

Israeli disinformation infrastructure: The “Team Jorge” operation, an Israeli private intelligence group, has been linked to election manipulation in 33 countries, with Brazil among its targets.

Indian shadow accounts: A fake Indian Instagram profile was used to request the removal of posts about a Brazilian senator’s assets during the 2026 elections.

Abin warning: A report by the Brazilian Intelligence Agency (Abin), titled “Threats to the 2026 Electoral Process,” explicitly warned of right-wing influencers based in the U.S. running paid electoral propaganda for Flávio Bolsonaro on X.

Microsoft Report: Rise in Cyberattacks Against the Zionist Regime

According to Microsoft’s annual report, the Zionist regime (Israel) was the world’s second most-targeted entity for cyberattacks in the first half of 2026, accounting for 7.6% of recorded attacks.

· The United States ranked first with 25.5%, while Ukraine and Taiwan placed after the Zionist regime.

· Microsoft claims that 39% of one tracked cyber threat cluster’s activity targeted the Zionist regime. The United States followed at 23%, and the UAE at 9%.

· The report says this activity included cyber espionage, disruption attempts, and destructive attacks. Attackers used methods such as phishing, credential theft, and exploitation of vulnerabilities.

The findings highlight how geopolitical tensions continue to shape the global cyber threat landscape, attackers increasingly targeting government, defense, critical infrastructure, and technology sectors. Microsoft’s telemetry indicates that attackers are combining espionage with disruptive operations, aiming to gather intelligence, weaken response capacity, and create psychological impact.

The report also points to a growing use of credential theft and vulnerability exploitation — techniques that make it easier for attackers to get their first foothold inside a system and then carry out more damaging attacks from there.

#CyberAttack #CyberWar #Iran #ZionistRegime #Microsoft #TGITM @TheGhostITM

U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog.

Dell patches critical vulnerabilities in container storage modules.

Frontline Education breach exposes school district employee data.

Warlock ransomware breach SharePoint in water, telecom operator attacks.

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign.

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers.

OpenAI alerts 100+ orgs that its 'misaligned models' attempted to break in - or worse.

EU urged to strengthen risk assessment for critical infrastructure vendors.

OpenAI's wandering AI agents earn it a California subpoena.

Californian accused of shipping $300M worth of Nvidia chips to China without Uncle Sam’s approval.