Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Canada’s Hospital for Sick Children attacked by cybercriminals again as employee data stolen
Canada’s Hospital for Sick Children attacked by cybercriminals again as employee data stolen Canada’s largest pediatric health center suffered a recent cybersecurity incident that exposed the personal information of...
U.S. Bank says breach claims related to fourth-party incident
Image: Urvish Oza via Unsplash U.S. Bank says breach claims related to fourth-party incident U.S. Bancorp said recent claims of data theft by a ransomware gang are related to a breach involving a contractor for a...
Lawmakers seek watchdog review of federal hacking of Americans
A pair of lawmakers wants a watchdog agency to probe how the federal government hacks Americans, including with the use of spyware, and deliver a report to the public. Sen. Ron Wyden, D-Ore., and Rep. Greg Casar,...
New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets
iAuthFlow V2 is a new phishing toolkit demonstrating the rapidly improving sophistication of phishing techniques. iAuthFlow V2 is a malware toolkit first seen on a Russian-language cybercrime forum. It is an advanced...
Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight
Cybersecurity companies this week shared information about new and updated banking trojans targeting users worldwide. These types of malware can enable their operators to phish credentials, steal sensitive user data,...
Hackers abuse FTP server banners to deliver new Windows malware
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE. MalwareHunterTeam observed this unusual technique in July in an attack that...
New SynkLoader malware pushed in Microsoft Teams phishing campaign
A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen. The attacker impersonates the target company's IT help desk,...
Hackers infect Android car head units with proxy botnet malware
A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud. Kaspersky researchers...
ToxicPanda Android malware uses VPN permissions to block Google Play
The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote commands. The malware now requests VPN service permissions to...
Rogue ransomware affiliate poses as recovery firm to steal payments
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting victims before the attacks become public and claiming it can provide decryption keys and delete stolen data...
SilkParasite Threatens Central Asian Orgs With Flurry of RATs
A Chinese-nexus cyber-espionage operation is actively targeting government organizations across Central Asia with a collection of mostly previously unidentified remote access Trojans (RATs) from seven different malware...
The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)
Executive Summary The security of the npm ecosystem reached a critical inflection point in September 2025. The Shai-Hulud worm, a self-replicating malware that automated the compromise and redistribution of malicious...