Activity Summary - Week Ending on 18 September 2026
- Red Sky identified 21,114 connections from ‘new’ and unique, compromised IP addresses
- Vultr Holdings, LLC in Northern Ireland , hit 52x
- 227 new APT Botnet IP’s – Mirai / AsyncRAT
- CISA Alert: CN Based AI Targeting US
- JungleBamboo and BlueMoon
- CVE-2026-85046; CVE-2026-87491 and CVE-2026-85880
- UTA0560, UNK_LateNight, and UNK_DoubleCheck
- UK - HCRG Care Group Breach
- US Law Firm Attacks
- Targeteer – DeepSeek
Link to Full Report: IR-26-261-001_weekly261.pdf
