Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Only 13% of OT Network Segments Are Fully Isolated: Analysis
Most organizations running operational technology (OT) or connected medical devices do not keep those systems on their own dedicated network segments, according to new research from Forescout’s Vedere Labs. The...
Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity
The researcher known online as Nightmare Eclipse, who has spent months publishing a rapid string of Windows and Microsoft Defender proof-of-concept exploits, has revealed his identity and released another Defender...
Cyera Raises $400 Million at $12+ Billion Valuation
Data security company Cyera has received an additional $400 million in funding, bringing the company’s valuation to more than $12 billion. The new investment came from Goldman Sachs Alternatives as an extension of the...
D-Link warns of max severity zero-day bug in DIR-822A routers
D-Link warned customers of a maximum-severity vulnerability ( CVE-2026-86296 ) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers. This security flaw stems...
Webinar tomorrow: Inside real-world Google Workspace breaches
Google Workspace breaches don't always begin with sophisticated exploits or stolen passwords. Sometimes attackers simply convince users to grant them the access they need. Tomorrow, September 23, BleepingComputer will...
EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts
The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft’s Digital Crimes Unit (DCU). The phishing-as-a-service (PhaaS)...
Another worry for water systems: infostealer exposure
Nearly two of every 10 U.S. water and wastewater organizations have identity data actively exposed from infostealers harvesting their credentials, according to research published Tuesday. The study from identity risk...
Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme
Law enforcement and intelligence agencies from Japan, the United States, Australia and Germany have published a joint advisory attributing a long-running hiring scheme to a North Korean group they call WaterPlum, also...
WordPress Patches ‘Click2Shell’ Vulnerability
WordPress last week released patches for 11 vulnerabilities, including a flaw that could potentially lead to remote code execution (RCE). Dubbed Click2Shell , the flaw does not have a CVE identifier yet. In its...
CISA orders feds to patch Zyxel flaw exploited for data theft
Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw (tracked as CVE-2026-7273 )...
New Windows Defender zero-day blocks Microsoft antivirus updates
Over the weekend, security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) released another Microsoft Defender zero-day exploit that blocks antivirus updates. Naceri named it BigDiskBuster and said it is...
US Proposes AI Incident Alert System in Talks With China, Bessent Says
Treasury Secretary Scott Bessent said Sunday the U.S. has proposed a new “notification mechanism” for artificial intelligence incidents that could affect national security, part of weekend discussions ahead of talks at...