Threat Intelligence

Cyber Threat Intel 7 min 700 AI Agents Coordinated in the Hugging Face Breach Without Being Told To The exploits were ordinary: a token-refresh flaw, an HDF5 bug, a template injection. What was not ordinary was... PR Priya Nair 1 Sep Cybersecurity 7 min TerminalFix Hides Malware in PNGs. It Still Needs You to Paste the Command. An executable in one image and a DLL split across two more. Every clever stage is post-compromise; the entry p... PR Priya Nair 1 Sep ASEAN Tech 7 min Two Incidents Account for Half of the Philippines' 335 Million Exposed Records Credentials are not records, records are not people, and 255 incidents are not evenly distributed. Reading Vie... SA Sarah Chew 25 Aug Cyber Threat Intel 6 min Can You Prove an Attack Was Prevented? Early warning is what threat intelligence is sold on, and prevention is the least verifiable claim in security... PR Priya Nair 19 Aug Cyber Threat Intel 5 min Who Sells Threat Intelligence Four quite different businesses use the same phrase, which is most of why the market is confusing. A map of th... PR Priya Nair 19 Aug Cyber Threat Intel 5 min What a Threat Actor Name Buys You Reporting names adversaries with real confidence — APT29, Lazarus, Sandworm — and it is worth asking how much... KE Kenji Tanaka 19 Aug Cyber Threat Intel 5 min From Feed to Decision Buying a threat feed is the easy part. We work through the filtering that free public data already does to a s... PR Priya Nair 19 Aug Cyber Threat Intel 6 min What Threat Intelligence Actually Is 380,235 vulnerabilities have been published. 1,670 are confirmed to be exploited in the wild — about one in 22... PR Priya Nair 19 Aug Cybersecurity 6 min Most of an AI Attack Is an Ordinary Attack MITRE's AI threat matrix, ATLAS, shares 13 of its 16 tactics with classical ATT&CK. Only two are genuinely new... PR Priya Nair 19 Aug Cybersecurity 8 min Poland's Power Plants Were Reached Through the Mobile Network Nobody Watches CERT Polska has documented the first real-world use of a private APN as a route into operational technology. T... CY Cyber Team 11 Aug Cyber Threat Intel 8 min Ransomware Went After the 46-Year-Old Manager, Not the Administrator Zscaler tracked 351 victims across 334 organisations in one campaign. Sixty-two per cent were managers or abov... CY Cyber Team 10 Aug Cyber Threat Intel 8 min 799 Ransomware Attacks in July. Victims Confirmed 51 of Them. July produced 799 ransomware attacks by the standard count, second only to March in 2026. Victims confirmed 51... CY Cyber Team 9 Aug Cybersecurity 8 min Water Systems in Twelve States Were Broken Into. The Fix Is a Budget Line, Not Advice. Water systems in at least twelve US states have been broken into, with attackers changing controller passwords... CY Cyber Team 9 Aug Cybersecurity 6 min Attackers Sweep 1,367 Bitcoin From Coldcard Wallets After Five-Year Firmware Flaw Three waves of automated sweeps have taken about $89 million in bitcoin from 4,585 addresses since 30 July. Th... CY Cyber Team 2 Aug Cyber Threat Intel 6 min ThreatBook Puts a Number on APAC's Year: 15,205 Incidents, and Indonesia Growing Fastest The firm's first mid-year Asia-Pacific report covers twelve months and more than nineteen markets. Singapore r... CY Cyber Team 29 Jul Cyber Threat Intel 6 min Cold-Chain Shutdown in Japan, AI in Two Attack Chains, and Eight New Ransomware Listings Nichirei lost four days of refrigerated logistics to a server compromise. An Iranian-linked group is using gen... CY Cyber Team 29 Jul Cybersecurity 6 min Two Rival Powers, One Police Force: Researchers Say China- and India-Linked Groups Separately Spied on Pakistani Law Enforcement SentinelLabs reports that suspected China-nexus and India-nexus groups ran separate espionage campaigns agains... CY Cyber Team 20 Jul Cybersecurity 3 min This week's bugs to patch: a critical OTRS flaw and a Linux root hole on CISA's list A short, practical read of the week's most urgent vulnerabilities: a critical pre-authentication flaw in the O... CY Cyber Team 1 Jun Cybersecurity 9 min Threat Brief, Week of 18 May 2026: State-Backed Espionage in Malaysia, a Malware-Signing Takedown, and the Defender Itself Under Fire Our weekly read of the threat landscape: a state-backed actor ran a bespoke espionage operation against Malays... CY Cyber Team 30 May Cybersecurity 6 min An LLM Agent Drove This Real Intrusion: Marimo RCE to Database Dump in Under an Hour On 10 May an internet-exposed marimo notebook was breached through CVE-2026-39987 — and then an autonomous LLM... CY Cyber Team 30 May Cybersecurity 9 min Anthropic Says It Disrupted the First Reported AI-Orchestrated Cyber-Espionage Campaign Using Claude In a public write-up, Anthropic describes threat actors who induced Claude — by posing as defensive testers —... CY Cyber Team 18 May Cybersecurity 8 min AI-Assisted Attacks Are the New Normal: Mandiant M-Trends 2026 Shows Exploit Windows Have Inverted Mandiant's M-Trends 2026 report confirms 28.3% of CVEs are now exploited within 24 hours of disclosure — and d... CY Cyber Team 8 May Cybersecurity 5 min Malaysia Topped Southeast Asia for Web Attacks in 2024 — 19.62 Million Hits in Six Months Malaysia recorded 19.62 million web-based cyberattacks in H1 2024 — topping all of Southeast Asia. Here is wha... CY Cyber Team 12 Apr