Threat Intelligence

Cybersecurity 6 min Unit 42 Links Fortinet Path-Traversal Bug to Memory-Only FortiGate Implant in Telecom Intrusion Attackers stole the configurations of 500+ firewalls from one FortiManager, then planted PEERSTITCH. CISA adde... KE Kenji Tanaka 20 Oct Cyber Threat Intel 4 min The FBI Seized a Chinese Contractor's Hacking Tools Used Against Taiwan, Japan and the US Integrity Technology Group ran a vulnerability scanner and a phishing kit linked to Flax Typhoon. About 20 Tai... PR Priya Nair 12 Oct Cyber Threat Intel 5 min Hijacked Domain Registries Let Attackers Get Real HTTPS Certificates for Google Domains The operators behind Ghana, Sierra Leone and American Samoa's domains were compromised. Chrome has blocked the... PR Priya Nair 8 Oct Cyber Threat Intel 4 min The Warlock Ransomware Group Still Breaks In Through SharePoint, Now at a Water Utility Symantec says the China-linked group hit a water company, a telecom operator, a regional government and a univ... PR Priya Nair 3 Oct Cyber Threat Intel 4 min Police Shut Down the KillSec Ransomware Group. Its Suspected Leader Is 16. Operation KillSwitch seized the gang's leak site and servers and made three arrests. Investigators link it to... PR Priya Nair 2 Oct Cyber Threat Intel 5 min Three Agencies Blamed Iran for CHOSEN BRICK. Only the FBI Named the Ministry. CHOSEN BRICK gives every victim their own Telegram bot. The NCSC, FBI and AIVD signed one advisory and stopped... PR Priya Nair 17 Sep Cyber Threat Intel 6 min BambooToken Malware Takes Its Orders Over MQTT, the Smart-Device Protocol Infected machines never connect to the attacker. They subscribe to a topic on a message broker and wait. About... PR Priya Nair 17 Sep Cyber Threat Intel 6 min The CVSS score was never meant to be your patch queue Patch everything above 9.0 is the most common vulnerability rule there is, and FIRST — who publish CVSS — writ... PR Priya Nair 16 Sep Cyber Threat Intel 6 min AI Agents Compromised 440 PaperCut Servers. Only Twelve Became Domain Admin. Eleven organisations fell in 26 seconds, and schools took 204 of the 395 victims. The gap between landing on a... PR Priya Nair 16 Sep Cyber Threat Intel 6 min A 30,000-User Twitch Ad-Blocker Was Sending Live Login Sessions to a Bot Service The extension blocked ads by routing traffic through its own proxies, and forwarded each viewer's login token... PR Priya Nair 15 Sep Cyber Threat Intel 6 min A Million Fake CEO Emails in Three Days, Written by a Model Microsoft says the operators used generative AI to tailor each one and filled the signatures with real executi... KE Kenji Tanaka 13 Sep Cyber Threat Intel 6 min Three Unrelated Groups Walked Through the Same Cisco Flaw Talos found Sandworm's implant, Qilin ransomware and a third intruder inside Secure Firewall Management Center... KE Kenji Tanaka 12 Sep Cyber Threat Intel 7 min The Backdoor Came Through Sogou, Which Sees Every Key You Press A crafted link was enough. An input method editor is downstream of every application on the machine, and this... PR Priya Nair 12 Sep Cyber Threat Intel 6 min Chrome's Sixth Zero-Day of 2026, and Browser Zero-Days Keep Falling CVE-2026-85046 is a V8 type confusion patched in Chrome 152 with a CISA deadline of 18 September. Across all b... KE Kenji Tanaka 7 Sep Cyber Threat Intel 7 min 700 AI Agents Coordinated in the Hugging Face Breach Without Being Told To The exploits were ordinary: a token-refresh flaw, an HDF5 bug, a template injection. What was not ordinary was... PR Priya Nair 1 Sep Cybersecurity 7 min TerminalFix Hides Malware in PNGs. It Still Needs You to Paste the Command. An executable in one image and a DLL split across two more. Every clever stage is post-compromise; the entry p... PR Priya Nair 1 Sep ASEAN Tech 7 min Two Incidents Account for Half of the Philippines' 335 Million Exposed Records Credentials are not records, records are not people, and 255 incidents are not evenly distributed. Reading Vie... SA Sarah Chew 26 Aug Cyber Threat Intel 6 min Can You Prove an Attack Was Prevented? Early warning is what threat intelligence is sold on, and prevention is the least verifiable claim in security... PR Priya Nair 19 Aug Cyber Threat Intel 5 min Who Sells Threat Intelligence Four quite different businesses use the same phrase, which is most of why the market is confusing. A map of th... PR Priya Nair 19 Aug Cyber Threat Intel 5 min What a Threat Actor Name Buys You Reporting names adversaries with real confidence — APT29, Lazarus, Sandworm — and it is worth asking how much... KE Kenji Tanaka 19 Aug Cyber Threat Intel 5 min From Feed to Decision Buying a threat feed is the easy part. We work through the filtering that free public data already does to a s... PR Priya Nair 19 Aug Cyber Threat Intel 6 min What Threat Intelligence Actually Is 380,235 vulnerabilities have been published. 1,670 are confirmed to be exploited in the wild — about one in 22... PR Priya Nair 19 Aug Cybersecurity 6 min Most of an AI Attack Is an Ordinary Attack MITRE's AI threat matrix, ATLAS, shares 13 of its 16 tactics with classical ATT&CK. Only two are genuinely new... PR Priya Nair 19 Aug Cybersecurity 8 min Poland's Power Plants Were Reached Through the Mobile Network Nobody Watches CERT Polska has documented the first real-world use of a private APN as a route into operational technology. T... CY Cyber Team 11 Aug