Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office
A contractor has leaked Scottish government employees' personal information, and the full scope of the breach may be far greater than what is currently being reported. On Aug. 13, Scotland's Crown Office and Procurator...
Amid AI-Driven Bug-Hunt Tsunami, NIST Looks to … AI
The National Institute of Standards and Technology (NIST) is seeking guidance on the future of the National Vulnerability Database (NVD) and to what degree AI should be integrated into its management of the service and...
Mission-Driven Security: Inside a Global Bank's Defense
In an era where cyber threats evolve at breakneck speed and financial institutions remain prime targets for sophisticated adversaries, the role of the chief information security officer (CISO) has never been more...
Linux Botnet Evooo1Bot Expands Mirai Capabilities Well Beyond DDoS
Yet another Mirai-derived botnet is on the loose, targeting Linux systems by exploiting flaws in various Internet-facing devices to combine distributed denial of service (DDoS) attacks with a broader set of malicious...
Hugging Face Breach Raises Big Questions About AI Security Controls
OpenAI's rogue agents have sparked a new set of questions and concerns for cyber defenders, and Dark Reading's senior news director Rob Wright sat down at the News Desk with threat modelling expert Adam Shostack to find...
'Turf War' Between Claude Agents Leads to Self-Replicating Malware
It turns out that AI agents don't always play nice together. In the latest episode of agentic AI producing unexpected results , Anthropic recently observed "a multiagent turf war" between three instances of the same...
Video Call Exploit Chains Two Flaws in Unisoc Modems
Researchers have uncovered a new flaw in Unisoc T612 modem firmware that, when chained with a previously disclosed remote code execution (RCE) vulnerability, could allow an attacker to gain privileged access to the...
'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service
A ransomware affiliate is approaching victims of the attacks it may have helped carry out, in an interesting technique that actually undermines its own business model. According to the GuidePoint Research and...
Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud
A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, researchers have...
CISOs Break Their Silence in 'Declassified' Docuseries
Most RSAC and Black Hat conference attendees go to network and learn about emerging threats. But Danielle Lewan, Clint Howard II, and 11 long-time chief information security officers (CISOs) arrive with cameras rolling...
'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture
Threat actors can trick a Copilot instance into giving up details about its own architecture, paving the way for a novel prompt injection attack. That's according to Varonis Threat Labs, which today published new...
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
A critical-severity security vulnerability in GitLab CE/EE could allow a remote attacker with no account or login credentials to manipulate or delete publicly accessible projects and user data by exploiting the...