Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus
Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus A California federal judge on Wednesday dismissed a lawsuit filed by a group of Salvadoran journalists whose devices were infected...
US sanctions Tren de Aragua gang members in ATM hacks crackdown
The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of dollars in ATM jackpotting attacks across the United States. In...
Alleged KillSec Ransomware Mastermind a 16-Year-Old
German authorities have identified a 16-year-old as the alleged mastermind of the KillSec ransomware operation, following a coordinated law enforcement operation that resulted in the arrests of three suspects and...
Malicious Linux Implants Mimic Asian Mail Security Products
Cutting-edge malware developers have been using their intimate knowledge of Korean and Taiwanese network edge appliances to build Linux implants that infect and mimic them to an extraordinary degree. It's common enough...
macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
A macOS dropper has been found inside a disguised Zoom client. The malware is tracked as CloudSyncD and is designed to deliver a persistent and stealthy backdoor. Researchers at Jamf first noticed this malware still in...
Microsoft says threat actors are ahead in the early AI race
Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and post-compromise activity...
Police disrupt KillSec ransomware, arrest suspected teenage leader
An investigator confiscates devices as part of Operation Killswitch. Image: Europol Police disrupt KillSec ransomware, arrest suspected teenage leader Spanish police announced the arrest Thursday of the 16-year-old...
ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)
Threat Actors do not always use top-notch techniques or very complex malware to perform their attacks. Sometimes, they just abuse of existing applications... I received a very simple phishing email: From:...
China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia, to deliver a previously...
US sanctions 10 over ATM malware scheme tied to Tren de Aragua
Images showing suspects installing malware onto ATMs. Image: Treasury Department US sanctions 10 over ATM malware scheme tied to Tren de Aragua The Treasury Department sanctioned 10 people for their role in a lucrative...
South Africa Seeks Help After Cyberattack Targets Air Traffic Control
The South African state-owned company that provides air traffic control (ATC) and weather operations for approximately 10% of the world's airspace discovered ransomware-linked malware in an operational technology (OT)...
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
A Russia-linked advanced persistent threat (APT) actor that was significantly disrupted by Microsoft and US officials two years ago is casting a wider net than ever with its phishing and malware-delivery tactics. In...