root@ransomvault:~$ tail -f threat_intel.log

RANSOMVAULT

Topics

Patch10Threat Intelligence8Vulnerability7Ransomware3Zero-Day3Malware1Knowledge1
Subscribe to the newsletter →

Threat Intelligence

FAA Grounds All U.S. Flights Over Nationwide Air Traffic Control Communications Failure

Darkintel Team1 min read

On Friday afternoon, the Federal Aviation Administration (FAA) ordered a nationwide ground stop at every U.S. airport, citing "extraordinary circumstances" and safety concerns.

U.S. Transportation Secretary Sean Duffy said a communications problem was affecting all Air Route Traffic Control Centers across the country. "FAA technicians are investigating the issue. We will provide immediate updates as we have them," Duffy wrote on X.

Departing flights must stay on the ground until further notice. The FAA will decide on inbound international flights case by case. Before the nationwide order, the agency had already stopped traffic in Chicago because of air traffic control communications problems.

Was it a cyberattack? Federal officials haven't said what caused the outage, and there's no word yet on whether a cyberattack is being looked into. It's still unclear whether the disruption is the result of a technical failure or malicious activity.

Air Route Traffic Control Centers manage high-altitude traffic between airports. An outage hitting all of them at once is unusually widespread. The last nationwide ground stop came in January 2023, when the FAA's NOTAM pilot-alert system failed.

Travelers should check with their airline for flight updates before going to the airport.

This is a developing story and will be updated as more information becomes available.

ShareXLinkedInReddit

Newsletter

Get the latest cyber news in your inbox

Ransomware, breaches and exploited vulnerabilities, delivered by RansomVault.

Free. No spam. Unsubscribe in one click.

Latest news

How PHP2Shell Works, and Why It Gives Attackers Access Before Your Code Even Runs

Knowledge

PHP2Shell, the pair of critical PHP vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619, has become one of the most heavily exploited bugs of the year. It was exploited four days before PHP released patches on October 21, added to CISA’s Known Exploited Vulnerabilities catalog, and most recently used to break into Check Point Security Gateways and wipe VMware ESXi hosts. But how does it actually work? This post explains the vulnerability in plain terms, using technical research on th

PHP2Shell Attacks on Check Point Gateways Deploy Data Wiper on VMware ESXi Hosts

Zero-Day / Threat Intelligence

Threat actors are exploiting vulnerable Check Point Security Gateways in a campaign that ends with data-wiping malware on VMware ESXi hosts. According to Check Point Research, the attacks began on October 30, 2026, first against Israeli organizations. A single actor ran the whole operation, from initial access to lateral movement and destruction. Background: PHP2Shell PHP2Shell is the name for two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that allow unauthenticated remo

Microsoft Rules Out Cyberattack Behind Major Microsoft 365 Outage

Threat Intelligence

Microsoft has said there is no indication that the major Microsoft 365 outage that began on November 12 was caused by malicious or cyber activity. The company has publicly expressed regret over the disruption, which affected Outlook, Teams, Exchange Online, and other services for users worldwide. Statement from Microsoft leadership On November 13, at about 03:37 GMT, Charles Lamanna, Microsoft’s Executive Vice President of Copilot, Agents, and Platform, posted on X: “We regret that today’s out