Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Microsoft enables Windows settings backup by default for orgs
Microsoft announced that Windows settings backup and restore is now enabled by default on all Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems upgraded to Windows 11 26H2. The Windows settings...
Kiteworks patches max severity code injection vulnerability
Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security solution. EPG is a...
The Day-One Hole in Zero Trust Architecture
Zero Trust principles are now commonplace in enterprise infrastructure; organizations have spent years investing in measures that secure identities and systems against sophisticated attacks. However, human error is...
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
An international law enforcement operation dubbed “Operation KillSwitch” seized the KillSec ransomware gang’s data leak site and servers, led to three arrests, and identified a 16-year-old as the group’s alleged...
Scans for Wordfence Protected Websites, (Tue, Sep 29th)
Starting yesterday, our sensors picked up a small number of scans for "wordfence-waf.php". This particular script is used by Wordfence, a solution to protect WordPress sites. During the Wordfence install, the...
Star Blizzard refines phishing and malware delivery with the RedFlick technique
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing campaigns, the use of accounts on compromised websites, and a...
Beyond source code: A path to the keys to the kingdom
What began as a single compromised identity quickly expanded into an organization’s development and cloud environments. In our latest Cyberattack Series report, we examine how the Microsoft Detection and Response Team...
Securing the keys to the kingdom: Announcing Executive Threat Detection
Attackers are using greater sophistication to gain access to high-yield targets like executives, and company-wide security measures can easily miss these subtle, personal attacks. Executive Threat Detection offers...
OperTraitors: How Kubernetes Operators Betray Your Security Posture
Executive Summary Kubernetes operators are coded to drastically reduce operational toil by acting as automated site reliability engineers. However, their reliance on highly privileged service accounts introduces a...
Arizona Supreme Court says hackers stole residents’ personal data
Arizona Supreme Court. Image: davidpinter via Wikimedia Commons (CC-BY-3.0)/photomosh Arizona Supreme Court says hackers stole residents’ personal data The Arizona Supreme Court announced Friday that the state’s court...
Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims
Image: Dodo Pizza (CC BY-SA 2.0) Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims Hackers breached the systems of popular Russian fast-food chain Dodo Pizza and gained access to some...
Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities
Nvidia on Monday announced a policing system that will watch and rein in AI agents before they go out of control. The Open Agent Safety Platform combines open source software and a reference system design to keep AI...