BlockSpam · Relcom
Investigation practice, security news and platform knowledge.
Industry news
The US federal courts' Bankruptcy Noticing Center (BNC) is operating again after a cybersecurity incident halted bankruptcy notices for more than two weeks. Contractor BAE Systems says no data was stolen but has not disclosed the cause.
Industry news
According to ESET, UAC-0099 breached a Ukrainian logistics company through phishing and deployed a new backdoor, MythicRatatoskr, whose C2 server sits in the Yggdrasil mesh network. Access was then handed to Sandworm, which destroyed data.[^1]
Industry news
According to SOCRadar, affiliates of the INC and The Gentlemen ransomware groups used AI agents to break in through vulnerable edge systems, with a human operator reviewing every step; the outcome of the ransom demands is unknown[^1].
Blog
On 21 October 2026, PHP released emergency updates 8.5.12, 8.4.27, 8.3.36 and 8.2.35. They fix two critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow unauthenticated code execution on a server. Researchers from Wiz, Calif and OpenAI found the flaws with the help of AI. Details leaked before the release, and exploitation attempts are already under way. Site owners need to update PHP itself, not WordPress or plugins.
Industry news
According to Cloudflare, the Transformers feature in Logpush is now generally available. It lets users filter records, redact sensitive data and reshape fields with SQL before logs are sent to SIEMs, analytics platforms and storage[^1].
Industry news
On October 8, Canonical confirmed a sustained DDoS attack on its websites[^1]. According to OMG! Ubuntu, downtime lasted a little over four hours, and Launchpad and the Snap Store did not appear to be affected[^1].
Industry news
According to SecurityWeek, US authorities announced the disruption of Integrity Tech's MicroScan and FishHub tools, which the US says were used against critical infrastructure, and seized related domains[^1].
Industry news
A partner piece published by The Hacker News on 9 October 2026 summarises SailPoint's "Horizons of Identity Security" report. According to the company, 54% of organisations sit at the lowest maturity level for AI agent identity security, compared with 23% for employee identities[^1].
Blog
Microsoft has launched a PQC TLS pilot with ML-DSA-87 roots for testing in closed environments. We look at what is confirmed, how authentication challenges differ from encryption challenges, the pilot's limitations and where to start preparing.
Blog
What the hijacking of three national domain registries reveals, and how blockchain-held names with owner-published keys close the gap
Blog
An analysis of Google's announcement that it is donating its open-source zero-knowledge proof library Longfellow to the Post-Quantum Cryptography Alliance under Linux Foundation Europe. It separates confirmed facts from company claims and covers the mechanism, limitations and practical steps.