Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Iranian cyber spies target aviation, fintech developers with new malware
Image: Getty via Unsplash+ Iranian cyber spies target aviation, fintech developers with new malware An Iran-linked cyberespionage group is targeting technology specialists in the aviation, aerospace and financial...
The Guardrails Debate: Security Researcher Changes His Mind
Four security experts took the stage, surrounded by massive skeletons, the theme for the capture-the-flag (CTF) competition that would commence later. A panel discussion about Anthropic's Claude model compromising...
ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain
Attackers have compromised at least 31 organizations through a ClickFix campaign that abuses the Polygon blockchain technology in a technique known as "EtherHiding" to obscure and automate its malicious activity. The...
Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots
A newly released whistleblower complaint reveals details about the “rushed” effort by the Trump administration and U.S. Postal Service to install three new restrictive IT systems that would potentially deny thousands of...
Ransomware Gang Claims Nutex Health Data Breach
Healthcare services and operations company Nutex Health has confirmed that personal and business information was stolen in a recently disclosed data breach. Last week, the company notified the US Securities and Exchange...
Five Venezuelans Plead Guilty in US Court to ATM Jackpotting
Five Venezuelan nationals have pleaded guilty in a US court to attempting to steal money from ATMs. The defendants, Luis Alberto Velasquez-Artigas, 27, Royder Adrian Figuera-Perez, 29, Javier Mejia, Jr, 27, Gabriel...
Hackers Start Exploiting Critical Langflow Vulnerability
Threat actors have started exploiting a critical-severity remote code execution (RCE) vulnerability in the AI low-code platform Langflow, vulnerability intelligence firm VulnCheck warns. Tracked as CVE-2026-0768 (CVSS...
Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars
Researchers at Forescout’s Vedere Labs used Anthropic’s Claude to port a working remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to another. They succeeded but only after extensive...
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks
Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerability that allows attackers to hijack all user mailboxes. Tracked as CVE-2026-62911 and...
Why Even the Best Edge Security Still Misses High-Risk Sessions
Security teams have more edge controls at their disposal than ever, and each plays an important role. Yet, despite the best request inspection, credential validation, device fingerprinting, and automation signals...
Novocure data breach affects more than 1,400 cancer patients
Healthtech company Novocure says the data of an undisclosed number of employees and more than 1,400 U.S. cancer patients has been exposed in a mid-August cyberattack. Novocure is a global oncology company with more than...
Hackers push malicious Virtualizor update in BGP hijacking attack
Hackers delivered malicious updates to the Virtualizor VPS management software after hijacking BGP routing for its update infrastructure and redirecting update requests to malicious servers. Virtualizor is a legacy web...