Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
New ClosedQuorum Windows malware uses AI for attack decisions
A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack. The Go-based malware acts with...
Another worry for water systems: infostealer exposure
Nearly two of every 10 U.S. water and wastewater organizations have identity data actively exposed from infostealers harvesting their credentials, according to research published Tuesday. The study from identity risk...
Cybercriminals Are Hiding New Malware in Torrents for Popular Films
PRESS RELEASENAIROBI, Kenya , September 21, 2026 — Kaspersky 's Global Research and Analysis Team (GReAT) has uncovered a sophisticated new multi-stage campaign targeting both individual users and organisations. The...
ShinyHunters Hacked Clop. Now What About Clop's Victims?
ShinyHunters apparently breached rival ransomware gang Clop last week, and the incident could pose additional risks to victim organizations caught in the middle. ShinyHunters is a financially motivated cybercrime group...
ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment
ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment The ShinyHunters extortion group hijacked the dark web leak site of the prolific Cl0p ransomware gang, according to material posted...
RatHat Android Trojan Uses AI for Automation
A newly discovered Android trojan relies on generative AI to more intelligently navigate and control the infected devices, mobile security company Zimperium reports. Dubbed RatHat , the malware has been distributed...
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer
A fake LastPass Authenticator distributed via GitHub has led to the discovery of a broad impersonation campaign delivering infostealer malware, LastPass reports. As part of the campaign, the attackers impersonated at...
Malicious npm packages evade install-script defenses at runtime
An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than in installation...
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation's data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service. The attack began...
MFA Won't Save You From OAuth Consent Abuse
OPINION Attackers can gain persistent software-as-a-service (SaaS) access through a single convincing consent prompt, without needing passwords or malware. Security teams have long treated multifactor authentication...
Researchers use AI to find widespread software decoder flaw
Researchers said they used Anthropic’s Claude and OpenAI’s Codex to identify a damaging flaw embedded in a popular software decoding tool that could leave major internet platforms, enterprise services, and web...
In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated...