Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
How One Kubernetes YAML Can Hand Over a GCP Organization
When a developer needs to create a cloud resource — a database, a storage bucket, or a virtual machine — they need credentials to authenticate to the cloud provider. In Google Cloud, that often means a service account...
InfraTrust report warns network management systems under attack
Attackers are increasingly targeting the management systems used to control enterprise infrastructure, with several critical vulnerabilities actively exploited before or shortly after vendors disclosed them. This was...
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records. The campaign has been active since at least...
Hackers start exploiting critical WordPress flaw for code execution
Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. Initial attack traffic was only for...
Check Point Patches Exploited Management Server Zero-Day
Check Point on Tuesday announced urgent patches for a critical-severity vulnerability in Management Server that has been exploited in the wild as a zero-day. Tracked as CVE-2026-93616 (CVSS score of 9.8), the security...
ShinyHunters claims attack on FBI exposes almost all agents
The FBI is investigating an attack on its own systems after ShinyHunters claimed responsibility for the incident, putting the prolific cybercrime group in the most direct conflict yet with agents responsible for...
Canadian regulator opens probe of IDScan for allegedly violating data privacy laws
Image: Muhammed Ensar via Pexels Canadian regulator opens probe of IDScan for allegedly violating data privacy laws Privacy Commissioner of Canada Philippe Dufresne has launched a probe of IDScan.net in the wake of...
Microsoft Disrupts EvilTokens Device Code Phishing Service
Microsoft and a group of private and public sector organizations recently disrupted EvilTokens, a phishing-as-a-service (PhaaS) provider that rose to prominence earlier this year. EvilTokens is a cybercrime platform...
Relays Are Masking Chinese Access to Frontier AI Models in the US
A vast network of intermediary servers is enabling users in China to access frontier AI models in the US without revealing their identities and location, likely to circumvent potential access restrictions and...
After water attacks, Capitol Hill offers its own proposal for an AI-cyber test program
A House Democrat tapped to lead his party’s efforts on artificial intelligence has introduced legislation that would establish a test program within the Cybersecurity and Infrastructure Security Agency to give critical...
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
Update: Added the FBI's statement below. The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gaining access to internal services and stealing sensitive...
Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to steal sensitive data from 996 devices and more than 18,500 records stored in backend databases....