Bare Metal Cyber Weekly Roll-Up — October 9, 2026
This week’s roll-up opens with a cloud ransomware outage that disrupted hundreds of companies and local governments in Japan, showing how one provider incident can spread across many operations. A sweeping FortiGate campaign also shows the danger of stolen privileged credentials, persistent administrator accounts, and ransomware access at the network edge. In Denmark, misuse of a trusted company’s registry access exposed identity data tied to millions of people. The issue also tracks active NetScaler compromises that can outlive patching and attacks against self-hosted Atlassian systems within hours of disclosure. Together, these stories make one theme clear: resilience depends on third-par…
This week's stories:
- Japan cloud ransomware outage disrupts 495 organizations
- Stolen FortiGate access locks out admins and fuels ransomware
- Denmark registry breach exposes data tied to 8.8 million people
- NetScaler attacks disrupt remote access and leave hidden control
- Sensitive Atlassian files face attacks within hours of disclosure
- FBI disrupts China-linked attacks on critical infrastructure
- Pentagon breach creates long-term identity risk for millions
- Old SharePoint gaps drive ransomware into critical services
- Country-code registry breaches enable trusted website impersonation
- South Korean bank breaches expose customer and worker data
- Developer secrets exposed by a compromised Tensorlake package
- Developer access turns into cloud exposure through GitHub workflows
- GitHub users face malware across 17,610 FakeGit repositories
- Helpdesk breach reaches full server control in seconds with AI
- Exposed AI servers become cryptomining and attack launchpads
More cybersecurity coverage at BareMetalCyber.com.
