Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Sweden fines Miljödata $183,000 over breach affecting 2.2 million
Sweden’s data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for inadequate security measures leading to a breach in August 2025 affecting 2.2 million people....
Rogue external MFA providers can steal passwords during logins
Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts. The technique, dubbed TrustSink by...
Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals
Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals Microsoft took legal action this month against an AI-powered cybercriminal platform called EvilTokens, using court authorization...
Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real
The debate around AI governance heated up this past week as AI experts warned that the growing number of rogue AI agents and instances of misaligned behavior are merely a preface to worse threats in the future. On Sept....
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
An attacker stole about 170 private GitHub repositories from the French security firm CrowdSec after compromising a former employee's computer with the Shai-Hulud worm and stealing an OAuth token for his GitHub account....
Citing China, President Trump doubles down on hands-off approach to AI regulation
By Derek B. Johnson President Donald Trump continued to defend his administration’s hands-off approach to AI regulation in the wake of hacks carried out by U.S. commercial frontier models that have rattled policymakers...
Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects
Volexity researchers spotted another state-aligned Chinese threat group exploiting a triple-link chain of zero-day vulnerabilities across multiple campaigns, the company said in a blog post Monday. The threat group it...
BigCommerce Data Stolen via Ribon Apps Hack
Enterprise eCommerce platform BigCommerce fell victim to a supply chain attack that led to customer data theft. BigCommerce is a SaaS provider that enables merchants to build and manage online stores. It hosts the...
Check Point warns of Management Server zero-day exploited in attacks
Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. The Security Management Server is a central repository that...
Reducing shadow IT visibility gaps with Wazuh
Shadow IT includes hardware, software, and services running outside IT and security teams' visibility or approval. It can include unapproved applications employees install, browser extensions with excessive permissions,...
New ClosedQuorum Windows malware uses AI for attack decisions
A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack. The Go-based malware acts with...
Russia's internet shutdowns disrupt warnings about incoming drone attacks
Fire at Moscow Oil Refinery, on June 16, 2026 / Image by Rotafinus via Wikimedia / CC0 1.0 Russia's internet shutdowns disrupt warnings about incoming drone attacks Russia’s growing restrictions on mobile internet and...