Oct 29: Desk Briefing
Oct 29 security desk briefing covering 3 published reports, with links to the underlying coverage and available primary records.
- Artem Stryzhak, 35, sentenced to 70 months for Nefilim and Hive ransomware attacks on hospitals and corporations causing more than $100M in losses.
- CVE-2026-76418 lets unauthenticated attackers crash Cisco ASA and FTD firewalls via SSL VPN. Cisco confirmed active exploitation; patches released October 29.
- CISA added VMware ESXi CVE-2026-41709, a CVSS 2.7 logging flaw, to KEV after CrowdStrike tied it to Warp Panda zero-day use. Patch and review ESXi audit gaps.
Oct 29’s desk briefing covers 3 reports published that day. Follow each report for its sourcing and any later updates.
-
Ukrainian Hive and Nefilim Affiliate Gets 70 Months. Artem Stryzhak, 35, sentenced to 70 months for Nefilim and Hive ransomware attacks on hospitals and corporations causing more than $100M in losses.
-
Cisco Patches ASA/FTD VPN Zero-Day, Active Attacks. CVE-2026-76418 lets unauthenticated attackers crash Cisco ASA and FTD firewalls via SSL VPN. Cisco confirmed active exploitation; patches released October 29.
-
Low-Severity ESXi Logging Flaw Hits CISA KEV. CISA added VMware ESXi CVE-2026-41709, a CVSS 2.7 logging flaw, to KEV after CrowdStrike tied it to Warp Panda zero-day use. Patch and review ESXi audit gaps. Sources: CVE-2026-41709, CISA KEV catalog.