Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure
The UK Cyber Security and Resilience Bill (CSRB) has been given late amendments specifically targeting the supply chain threat against the nation’s critical infrastructure. The UK CSRB – not to be confused with the US...
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. The flaw is present in the default configuration of...
An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation
Unit 42 responded to an incident where a human attacker used frontier AI to breach an enterprise network autonomously as part of a ransomware attack. The agents breached the company's security layers in a methodical...
Sality, one of the longest-running botnets, finally gets disrupted
Image: Alex Shuper / Unsplash Sality, one of the longest-running botnets, finally gets disrupted U.S. and European authorities announced the disruption of Sality, one of the internet’s longest-running botnets, after...
Hackers expose donor data from Russian fundraisers for Ukrainians, political prisoners
Image: Anete Lusina / Pexels Hackers expose donor data from Russian fundraisers for Ukrainians, political prisoners Hackers reportedly gained access to payment accounts used by two Russian fundraising projects...
OpenAI’s Astra Crosses ‘Critical’ Cyber Threshold After Finding Zero-Days
OpenAI said its newest model, Astra, has reached the ‘Critical’ cybersecurity capability level under the company’s Preparedness Framework, the first time any of its models has been placed in that category. The...
Malicious Virtualizor Update Served via BGP Hijacking
Softaculous’ Virtualizor users were served malicious software updates for two days after a threat actor diverted internet traffic to attacker-controlled servers. A provider of applications for web hosting, Softaculous...
Anthropic Details Response to Security Incidents, Unveils Enterprise Safeguards
Anthropic has detailed its response to a series of unauthorized access incidents involving Claude models, along with a new enterprise product that combines data privacy with misuse monitoring. Anthropic’s Claude models...
Exploit Published for Fresh Cleo Harmony Vulnerability
Organizations are advised to immediately patch a fresh authentication bypass vulnerability affecting the file transfer application Cleo Harmony. Tracked as CVE-2026-84115 , the security defect impacts the JWT refresh...
Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products
Rockwell Automation on Tuesday informed customers that patches or workarounds are available for more than a dozen vulnerabilities discovered across its industrial automation products. Only one of the new advisories...
Microsoft Defender flags legitimate Google search links as malicious
Microsoft is investigating an issue causing the Defender for Office 365 security software to mistakenly flag legitimate Google search links as malicious. The company first acknowledged the incident (tracked under...
Dropbox accounts breached through Lenovo email verification flaw
Dropbox is warning some users that an unauthorized party accessed their accounts by exploiting a flaw in Lenovo’s email verification process to register fraudulent Lenovo IDs. Although some affected users did not have...