Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
VectraRAT Can Hack Windows Enterprises for $250 per Month
An original, full-stack malware-as-a-service (MaaS) platform gives cyberattackers all they need to compromise an organization's enterprise networks, demonstrating how it's becoming less expensive to develop a...
Cisco warns customers of actively exploited zero-day in email gateways
Attackers of unknown origins and motivations are exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway, authorities and researchers said Monday. The vulnerability — CVE-2026-76461 — was exploited...
Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data
Texas utility CenterPoint Energy confirmed on Monday that a threat actor has obtained customers’ personal information. The disclosure comes just days after a hacker claimed to have stolen millions of records....
Exein Secures $270M at $1.7B Valuation for Physical AI Security
IoT cybersecurity startup Exein today announced raising $270 million in an oversubscribed funding round that brings the total raised to over $600 million and its valuation to $1.7 billion. The investment round was led...
$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws
A two-week focused sandbox bug-bounty program resulted in 1,285 filings, but none that could access customer data. The Vercel sandbox, a Firecracker‑based microVM environment, is an isolation tool for untrusted AI‑agent...
What Zero-Day Response Should Be in the Post-Mythos Era
By Sila Ozeren Hacioglu , Security Research Engineer at Picus Security. If you run PaperCut NG or MF, the last week of August showed what vulnerability response looks like when AI speeds up vulnerability discovery. On...
Hackers target WordPress sites via third-party WooCommerce plugin
Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor. The flaw is tracked as CVE-2026-27540 and impacts plugin versions...
BambooToken malware controls Windows and Linux systems via MQTT
A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux systems. The malware...
CenterPoint Energy confirms customer data stolen in cyberattack
CenterPoint Energy disclosed a breach compromising some customers’ personal information after an attacker leaked data allegedly stolen from the utility company. An investigation started after the company discovered an...
Manhattan DA takes down 12 AI deepfake porn sites
Image: Office of Manhattan District Attorney Alvin Bragg Manhattan DA takes down 12 AI deepfake porn sites Twelve AI deepfake sites were taken offline this week after a New York district attorney seized their domain...
China spy chief points at US AI models in cyber threat warning
Credit: chris wang / Unsplash China spy chief points at US AI models in cyber threat warning The Chinese Communist Party’s top intelligence official named two U.S. artificial intelligence models as cybersecurity risks...
Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack
Hackers compromised the official HBO Max account on Reddit and used it in a malvertising campaign leading to a ClickFix landing page. During a 48-hour window, the attackers pushed 108 malicious advertisements across...