Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

The Hacker News

Overview

Spanish police have apprehended a 16-year-old suspected of operating the KillSec ransomware group, which is believed to have targeted various organizations by stealing their data and threatening to release it unless a ransom was paid. The arrest occurred on September 30, alongside two other individuals, as authorities also seized control of KillSec's leak site. This group is known for its extortion tactics, which exploit vulnerabilities in organizations' data security. The incident raises concerns about the rising involvement of young individuals in cybercrime, as well as the ongoing challenges organizations face in protecting sensitive data from ransomware attacks. Authorities are continuing to investigate the extent of the group's activities and any additional individuals involved.

Key Takeaways

  • Timeline: Ongoing since September 30, 2023

Original Article Summary

Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organizations and threatening to publish it on its leak site unless they paid. The 16-year-old was one of 3 people arrested on September 30, when police also took control of that site. Investigators identified him as KillSec's suspected

Impact

Not specified

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Ongoing since September 30, 2023

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Ransomware, Exploit.

Related Coverage

Frontline Education breach exposes school district employee data

BleepingComputer

Frontline Education has reported a data breach affecting multiple school districts after hackers exploited a weakness in third-party software. The breach allowed unauthorized access to sensitive employee information, notably including Social Security numbers. This incident raises serious concerns about the security of personal data in educational institutions, which are often targeted due to the sensitive nature of their records. Affected districts will need to address potential identity theft risks and enhance their cybersecurity measures to protect against future breaches. School employees should remain vigilant for any unusual activity related to their personal information.

Oct 2, 2026

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

The Hacker News

GitLab has announced a significant security flaw in its AI Gateway that could allow a logged-in user with Duo Agent Platform access to execute commands on the gateway. This vulnerability affects organizations that self-host their GitLab instances, as the AI Gateway serves as the link between these instances and AI models. The issue has been addressed in the latest releases, specifically versions 19.2.4, 19.3.2, and 19.4.1. Users of the affected versions are urged to update promptly to mitigate any risks associated with this flaw. Failure to act could leave systems vulnerable to unauthorized command execution.

Oct 2, 2026

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

The Hacker News

Dell has issued security updates to fix several serious vulnerabilities in its Container Storage Modules (CSM), which could allow attackers to gain unauthorized administrative access and potentially control Kubernetes nodes. One of the most critical flaws, identified as CVE-2026-63688, has a CVSS score of 10.0, indicating its severity. These vulnerabilities could be exploited without authentication, putting systems at risk of being taken over. Organizations using Dell's CSM should prioritize applying these updates to protect their environments. The implications of these flaws are significant, as they could lead to unauthorized access to sensitive data and disruption of services.

Oct 2, 2026

Malicious Linux Implants Mimic Asian Mail Security Products

darkreading

Researchers have recently identified three backdoors that mimic legitimate Linux security products, specifically those used in mail systems. These malicious implants are designed to go unnoticed, making it challenging for users and security teams to detect them. This poses a significant risk, as attackers can gain unauthorized access to sensitive data and systems while masquerading as trusted solutions. Companies relying on these types of software should remain vigilant and monitor for suspicious activity. The discovery emphasizes the need for robust security measures to protect against such deceptive tactics.

Oct 2, 2026

Dell asks admins to patch max severity CSM flaws as soon as possible

BleepingComputer

Dell has issued a warning to administrators about two severe vulnerabilities found in their Container Storage Modules (CSM), which are used to connect Dell's enterprise storage systems to Kubernetes environments. These vulnerabilities could potentially allow attackers to gain unauthorized access or disrupt services, making it critical for affected users to act quickly. Dell emphasizes the urgency of applying the patches to ensure the security of their systems. This issue primarily impacts organizations utilizing Dell's enterprise storage solutions in conjunction with Kubernetes, highlighting the importance of maintaining up-to-date software in enterprise environments. Administrators are urged to prioritize these updates to safeguard their infrastructure from potential threats.

Oct 2, 2026

OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling

The Hacker News

OpenAI has dismissed three members of its safety team for leaking confidential information, which violated the company's internal policies. A spokesperson confirmed that the company conducted an investigation that validated these breaches. The incident raises concerns about how sensitive information is managed within organizations, especially those dealing with advanced technologies like AI. Maintaining strict protocols for handling confidential data is crucial to prevent potential misuse or breaches that could impact users and the industry at large. The actions taken by OpenAI highlight the importance of accountability in safeguarding sensitive information.

Oct 2, 2026