Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Critical WordPress Vulnerability Exploited Immediately After Disclosure
The exploitation of a fresh WordPress vulnerability started within hours of public disclosure and has escalated to active compromises, security firm Patchstack warns. Tracked as CVE-2026-87902 (CVSS score of 9.2), it is...
Microsoft fixes bug that broke Windows File History backup feature
Microsoft has fixed a known issue that breaks the built-in File History backup feature on some Windows systems after installing the September 2026 security updates. File History , introduced in Windows 8 and later...
CISA outlines improvement plan for CVE program
The Cybersecurity and Infrastructure Security Agency published a paper Wednesday that lays out its plan for improving the Common Vulnerabilities and Exposures (CVE) program, a contract for which nearly ended last year...
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
It turns out that cyber-threat actors can do quite a bit of damage with nothing more than an email address. New research from Aikido Security published today examines how a GitLab incoming email address acts as a highly...
EDR Evasion Stack Helps Process Injection Slip Past Defenses
An emerging EDR evasion technique has proved significantly harder to detect when researchers combined it with additional methods for sidestepping endpoint security tools. Flashpoint just published research on "process...
Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack
Nearly nine out of 10 federal civilian executive branch agencies failed to meet last summer’s deadline to implement cloud security directives from the Cybersecurity and Infrastructure Security Agency, a watchdog report...
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of its Security Gateway...
New RemControl Android banking malware targets users in Europe and Canada
A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. Although the infrastructure has been active since at...
Placeholder domain used in dev docs now serves ClickFix attacks
The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into executing PowerShell...
Burnham announces plan for new UK center to fight disinformation
UK Prime Minister Andy Burnham addresses the United Nations General Assembly on September 22, 2026. Credit: UN Burnham announces plan for new UK center to fight disinformation British Prime Minister Andy Burnham said...
Latvia arrests suspected hacker for electronics repair company breach
Latvian state police arrested a suspected hacker on September 15 in connection to a series of breaches. Credit: Tony Webster / Flickr Latvia arrests suspected hacker for electronics repair company breach Latvian police...
FBI investigating alleged ShinyHunters breach of its jobs site
Image: David Trinks / Unsplash FBI investigating alleged ShinyHunters breach of its jobs site The Federal Bureau of Investigation is investigating a breach of its job applications platform after a cybercriminal group...