Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
SectopRAT Returns, Hiding Inside a Legitimate Application
Researchers discovered a variant of the SectopRAT post-compromise backdoor and infostealer hidden inside legitimate software from an Italian digital-audio company. The operators appear to have added the remote access...
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Vulnerabilities in Salesforce Agentforce, collectively dubbed "Salesbleed" by researchers, could expose customers' internal data and, worse, allow attackers to phish employees from within trusted company channels. As so...
Autonomous AI Hacks Raise Thorny Questions of Legal Accountability
The Justice Department has a long history of investigating and prosecuting hackers who break into a private company’s network. But what happens when the hackers aren’t human? That’s the question at the center of a...
New Carbonato malware uses AI agents to hijack exposed Docker hosts
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. The malware features worm-like capabilities and was discovered in an...
MacSync malware uses public iCloud calendars to deliver new payloads
A new variant of the MacSync info-stealing malware targeting macOS systems now uses public iCloud calendar events to deliver fresh payloads. MacSync is a Swift-based malware that emerged in April 2025 and has been...
OpenAI agent breached Australian government health website, Albanese says
Australian Prime Minister Anthony Albanese addresses the U.N. Climate Summit on September 24, 2025. Credit: UN Photo/Manuel Elías OpenAI agent breached Australian government health website, Albanese says An OpenAI agent...
Astrana latest healthcare tech firm to report data breach to SEC
Image: Tima Miroshnichenko / Pexels Astrana latest healthcare tech firm to report data breach to SEC The healthcare company Astrana warned regulators this week that a recent cyberattack exposed confidential information....
Kyiv internet providers report major outages after Russian attacks damage data centers
Missile strikes on Kyiv this week. Image: ДСНС Києва Kyiv internet providers report major outages after Russian attacks damage data centers Russian drone strikes damaged data centers and telecommunications...
Rydox cybercriminal marketplace operator pleads guilty following co-conspirator brothers’s deportation
Image: Unsplash/Photomosh Rydox cybercriminal marketplace operator pleads guilty following co-conspirator brothers’s deportation One of the key figures behind the Rydox cybercriminal marketplace pleaded guilty this week...
SASE Converges Network & Security Into One Cloud Solution
Hybrid cloud systems and the adoption of edge computing among enterprises has solved a number of modern problems, from the latency demands of real-time applications to the regulatory demands of data privacy in a global...
Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'
A simple but powerful prompt-injection vulnerability in a popular AI platform, Manus, could have opened the door for data theft and compromise —- and showcases the ongoing risk that users face from prompt injection....
Ghost Service Accounts Enable M365 Data Theft in Chile
Hackers are leveraging overlooked machine accounts in Microsoft 365 (M365) to steal enterprise data from organizations in Chile. Within any organization's M365 environment, there are accounts that belong to humans,...