Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Video Call Exploit Chains Two Flaws in Unisoc Modems
Researchers have uncovered a new flaw in Unisoc T612 modem firmware that, when chained with a previously disclosed remote code execution (RCE) vulnerability, could allow an attacker to gain privileged access to the...
'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture
Threat actors can trick a Copilot instance into giving up details about its own architecture, paving the way for a novel prompt injection attack. That's according to Varonis Threat Labs, which today published new...
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
A critical-severity security vulnerability in GitLab CE/EE could allow a remote attacker with no account or login credentials to manipulate or delete publicly accessible projects and user data by exploiting the...
The long tail of Clop’s PTC hack is just beginning to emerge
A notorious cybercrime group has once again exploited a critical zero-day vulnerability on a large scale, claiming it stole data from dozens of organizations, including some of the world’s largest publicly traded...
Webinar Today: Rethinking Cyber Defense for AI-Speed Attacks
Rethinking Cyber Defense for AI-Speed Attacks | August 18, 2026 at 1PM ET- Register to Attend Artificial intelligence is fundamentally changing cybersecurity. As patch-to-exploit timelines shrink and attackers move at...
Chrome, Firefox Updates Patch Dozens of Vulnerabilities
Google and Mozilla on Tuesday announced fresh Chrome and Firefox security updates that address multiple critical- and high-severity vulnerabilities. Firefox 154 was released to the stable channel with patches for 58...
CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday called for the immediate patching of four vulnerabilities in Microsoft, VMware, and Apple products that have been exploited in the wild. CISA’s...
Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign
The Cl0p ransomware group has named more than 40 organizations allegedly targeted in the recent campaign that exploited a vulnerability in PTC’s product lifecycle management (PLM) platforms Windchill and FlexPLM. The...
CISA: Windows Task Host flaw now exploited by ransomware gangs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April....
Clop created custom web shell for Windchill data theft attacks
A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal...
Critical RCE flaw in Windows IKE Extension now actively exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote code execution (RCE) flaw in the Windows Internet Key Exchange (IKE) Service Extensions...
Password spraying attacks surge 155x as hackers exploit MFA gaps
Huntress has observed a 155x increase in password spraying attacks in the first half of 2026. Brute force is old news, but the spin driving that spike is new. One major contributor was a campaign targeting Microsoft's...