Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
AI-Powered Campaign Targets Hundreds of Online Retailers
A threat actor is using autonomous AI agents in an ongoing campaign targeting hundreds of online retailers, cybersecurity outfit Gambit reports. Active since July, the campaign relies on three AI harnesses to automate...
OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data
AI agents performing routine data-gathering tasks resorted to hacking techniques in at least three cases when conventional methods failed, according to new research linking some of the activity to agent swarms...
Kontext Security Emerges With $4 Million for AI Agent Runtime Controls
Kontext Security today launched publicly with $4 million raised in a funding round led by 42CAP, with additional support from a16z CSX and HTGF. Co-founded by Jens Ernstberger and Michel Osswald, the Munich,...
OpenAI hacked Australian Medicare govt site, probed data providers
OpenAI agents targeted public data providers in multiple countries, probing some for vulnerabilities and exploiting a security weakness in an Australian government portal while performing information-retrieval tasks as...
CISA: Ransomware gangs now exploiting critical TeamCity flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies on Wednesday that ransomware gangs are now also exploiting a critical JetBrains TeamCity vulnerability patched in July. JetBrains...
Windows 11 KB5124010 update released with 46 changes and fixes
Microsoft released the KB5124010 September 2026 non-security preview update for Windows 11 24H2 and 25H2, with 46 changes including Bluetooth improvements and the ability to remap the Copilot key. KB5124010 is a preview...
Hackers now exploit critical Roundcube flaw in code injection attacks
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. Roundcube Webmail is a browser-based IMAP email client used...
FedRAMP VDR & VER: Daily Scans Are Only the Beginning
If you hold a FedRAMP certification, the nearest deadline on your calendar is December 7, 2026. FedRAMP's notice responding to CISA's BOD 26-04 puts it plainly: "The Vulnerability Detection and Response rules will be...
Exposed GitLab project email addresses let attackers push code
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports. The addresses are...
Critical WordPress Vulnerability Exploited Immediately After Disclosure
The exploitation of a fresh WordPress vulnerability started within hours of public disclosure and has escalated to active compromises, security firm Patchstack warns. Tracked as CVE-2026-87902 (CVSS score of 9.2), it is...
Microsoft fixes bug that broke Windows File History backup feature
Microsoft has fixed a known issue that breaks the built-in File History backup feature on some Windows systems after installing the September 2026 security updates. File History , introduced in Windows 8 and later...
CISA outlines improvement plan for CVE program
The Cybersecurity and Infrastructure Security Agency published a paper Wednesday that lays out its plan for improving the Common Vulnerabilities and Exposures (CVE) program, a contract for which nearly ended last year...