Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records. The campaign has been active since at least...
ShinyHunters claims attack on FBI exposes almost all agents
The FBI is investigating an attack on its own systems after ShinyHunters claimed responsibility for the incident, putting the prolific cybercrime group in the most direct conflict yet with agents responsible for...
Canadian regulator opens probe of IDScan for allegedly violating data privacy laws
Image: Muhammed Ensar via Pexels Canadian regulator opens probe of IDScan for allegedly violating data privacy laws Privacy Commissioner of Canada Philippe Dufresne has launched a probe of IDScan.net in the wake of...
Microsoft Disrupts EvilTokens Device Code Phishing Service
Microsoft and a group of private and public sector organizations recently disrupted EvilTokens, a phishing-as-a-service (PhaaS) provider that rose to prominence earlier this year. EvilTokens is a cybercrime platform...
Relays Are Masking Chinese Access to Frontier AI Models in the US
A vast network of intermediary servers is enabling users in China to access frontier AI models in the US without revealing their identities and location, likely to circumvent potential access restrictions and...
Sweden fines Miljödata $183,000 over breach affecting 2.2 million
Sweden’s data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for inadequate security measures leading to a breach in August 2025 affecting 2.2 million people....
Rogue external MFA providers can steal passwords during logins
Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts. The technique, dubbed TrustSink by...
Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals
Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals Microsoft took legal action this month against an AI-powered cybercriminal platform called EvilTokens, using court authorization...
Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real
The debate around AI governance heated up this past week as AI experts warned that the growing number of rogue AI agents and instances of misaligned behavior are merely a preface to worse threats in the future. On Sept....
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
An attacker stole about 170 private GitHub repositories from the French security firm CrowdSec after compromising a former employee's computer with the Shai-Hulud worm and stealing an OAuth token for his GitHub account....
Citing China, President Trump doubles down on hands-off approach to AI regulation
By Derek B. Johnson President Donald Trump continued to defend his administration’s hands-off approach to AI regulation in the wake of hacks carried out by U.S. commercial frontier models that have rattled policymakers...
BigCommerce Data Stolen via Ribon Apps Hack
Enterprise eCommerce platform BigCommerce fell victim to a supply chain attack that led to customer data theft. BigCommerce is a SaaS provider that enables merchants to build and manage online stores. It hosts the...