Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Hackers start exploiting critical WordPress flaw for code execution
Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. Initial attack traffic was only for...
Check Point Patches Exploited Management Server Zero-Day
Check Point on Tuesday announced urgent patches for a critical-severity vulnerability in Management Server that has been exploited in the wild as a zero-day. Tracked as CVE-2026-93616 (CVSS score of 9.8), the security...
ShinyHunters claims attack on FBI exposes almost all agents
The FBI is investigating an attack on its own systems after ShinyHunters claimed responsibility for the incident, putting the prolific cybercrime group in the most direct conflict yet with agents responsible for...
Canadian regulator opens probe of IDScan for allegedly violating data privacy laws
Image: Muhammed Ensar via Pexels Canadian regulator opens probe of IDScan for allegedly violating data privacy laws Privacy Commissioner of Canada Philippe Dufresne has launched a probe of IDScan.net in the wake of...
Microsoft Disrupts EvilTokens Device Code Phishing Service
Microsoft and a group of private and public sector organizations recently disrupted EvilTokens, a phishing-as-a-service (PhaaS) provider that rose to prominence earlier this year. EvilTokens is a cybercrime platform...
Relays Are Masking Chinese Access to Frontier AI Models in the US
A vast network of intermediary servers is enabling users in China to access frontier AI models in the US without revealing their identities and location, likely to circumvent potential access restrictions and...
After water attacks, Capitol Hill offers its own proposal for an AI-cyber test program
A House Democrat tapped to lead his party’s efforts on artificial intelligence has introduced legislation that would establish a test program within the Cybersecurity and Infrastructure Security Agency to give critical...
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
Update: Added the FBI's statement below. The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gaining access to internal services and stealing sensitive...
Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to steal sensitive data from 996 devices and more than 18,500 records stored in backend databases....
Sweden fines Miljödata $183,000 over breach affecting 2.2 million
Sweden’s data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for inadequate security measures leading to a breach in August 2025 affecting 2.2 million people....
Rogue external MFA providers can steal passwords during logins
Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts. The technique, dubbed TrustSink by...
Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals
Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals Microsoft took legal action this month against an AI-powered cybercriminal platform called EvilTokens, using court authorization...