Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Flock can now issue CVEs for its own products. Should we trust it?
Flock, the controversial public safety company entangled in controversy amid recurring law enforcement abuse of its products, gained authority to assign CVE IDs to vulnerabilities in its own products and grade those...
Ledger confirms spy chip implant behind wallet crypto thefts
Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets. The company has been...
Anthropic takes risky AI tests offline after models breach govt sites
Anthropic announced that its internal AI models under “high-risk and cybersecurity evaluations” no longer have internet access following incidents involving U.S. government websites at the federal, state, and local...
Yandex confirms service outage as users lose access to cloud files
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third. Yandex customers are experiencing service...
Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
Norway’s Data Protection Authority (Datatilsynet) has fined Xandr, a Microsoft-owned advertising company, $9.6M (NOK 92 million) for unlawfully processing and sharing sensitive data belonging to Grindr users in the...
Ukraine strikes third Yandex data center, disrupting digital services across Russia
Photo of Yandex main office in Moscow. Image: WikiFido via Wikimedia Commons / CC BY-SA 4.0 Ukraine strikes third Yandex data center, disrupting digital services across Russia A third Yandex data center in Russia was...
Passing the Baton: Dark Reading Names New Editor-in-Chief
Dark Reading has been a cornerstone of cybersecurity journalism for 20 years , emphasizing deep technical coverage and insights for security professionals charged with defending their organizations. During that time, we...
Your AI agent is only as safe as the packages it downloads
Strip away the model names and the headlines, and this year’s AI agent incidents share a feature that has little to do with how capable the models are. Nearly all of them ran through the software supply chain. Start...
Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Open Certificate Authority (CA) Let’s Encrypt is taking the first step towards reducing the validity period of the certificates it issues. Beginning February 10, 2027, it will issue certificates with 64-day lifetimes by...
Critical SonicWall Vulnerability Exploited Days After Disclosure
Threat actors started exploiting a recently patched critical vulnerability in SonicWall SMA1000 appliances within days after public disclosure. Tracked as CVE-2026-102255 (CVSS score of 10), the security defect is...
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
A Canada-based cybersecurity expert was arrested last week in the United States on suspicion of being involved in ShinyHunters attacks, including the recent hacking of FBI systems. FBI director Kash Patel announced on...
iRhythm Data Breach Impacts at Least 360,000 People
Medical equipment provider iRhythm is notifying more than 360,000 people that hackers stole their personal information. The data breach was identified on June 8 and involved third-party-hosted business applications that...