All Articles
Security Intelligence
3414 articles · Updated every 8 hours
Advertisement
UNC5792 & UNC4221 Target US Officials via Messaging Apps
Russian state-linked groups UNC5792 and UNC4221 are actively targeting US government, military, and allied personnel through evolving messaging app attacks.
libssh2 1.11.1 RCE via CVE-2026-55200 — Mitigation Guide
Exploit analysis and mitigation for CVE-2026-55200, a critical client-side RCE in libssh2 affecting versions up to 1.11.1. Public PoC now available.
Microsoft Pulls 119 Malicious StegoAd Edge Extensions
Microsoft removes 119 Edge extensions linked to the StegoAd campaign, which used steganography in images and fonts to steal credentials and commit ad fraud.
WordPress Formidable Forms Abused to Distribute Malicious PDF Files
Attackers are leveraging the WordPress Formidable Forms plugin to host malicious PDF documents, bypassing security filters to deliver phishing and malware.
KDDI Data Breach Exposes 14.2 Million Email Logins Across Six ISPs
KDDI Corporation reports a massive data breach affecting 14.2 million email accounts across six Japanese ISPs following unauthorized shared system access.
YARA-X 1.18.0 & 1.19.0 Release: Enhancing Malware Detection
YARA-X versions 1.18.0 and 1.19.0 bring key improvements and bug fixes, enhancing malware analysis and threat hunting capabilities for security professionals.
Advertisement
Russian Intelligence Steals Messaging Credentials via SMS Lures
Ukraine and the FBI expose a long-running Russian intelligence campaign using fake support messages to compromise officials' messaging accounts.
_Aleksei_Gorodenkov_Alamy.jpg?width=720&quality=80&disable=upscale)
Education Sector Third-Party Risk: Protecting Student Data
The education sector confronts growing third-party breach threats, endangering student data.
AI Agent Malware Evasion: Hidden Payloads via GitHub Repos
Novel technique exploits AI coding agents to execute undetectable malware from clean GitHub repositories, bypassing security scanners and human review.
DCloud Uni-App Toolkit Abused to Launch 200,000 Scam Sites
Technical analysis of how threat actors leverage the DCloud Uni-App framework to deploy over 200,000 investment and pig-butchering scam websites globally.
OpenAI GPT-5.6 Sol Rollout: Technical Safeguards and Cyber Risk Mitigation
OpenAI limits the GPT-5.6 Sol rollout, introducing enhanced cyber safeguards and restricted access protocols to mitigate AI-driven security threats.
Cisco Secures Non-Human Identity with Astrix and WideField
Cisco's acquisition of Astrix and WideField signals a strategic shift toward Non-Human Identity (NHI) as a critical control plane for securing cloud access.
Declining Confidence in Autonomous Penetration Testing: 2024 Analysis
Security leaders are re-evaluating autonomous penetration testing due to accuracy concerns, shifting focus toward human-led automated security validation.
Cisco Unified Communications Manager: Urgent Patch for Active Exploitation
CISA mandates urgent patching for an actively exploited vulnerability in Cisco Unified Communications Manager, posing immediate risk to federal agencies and beyond.
SharkLoader Malware Delivers Cobalt Strike in StrikeShark Attacks
Analysis of SharkLoader malware, a new loader delivering Cobalt Strike Beacon to diplomatic and government entities in StrikeShark cyberattacks.
FBI Warns: Russian APTs Target Signal Backup Keys via Phishing
FBI and CISA warn of Russian intelligence targeting Signal users. Attackers phish for backup recovery keys, enabling full account takeover and message history access.
Meta's Facial Recognition Tech for Police & Military: Emerging Surveillance
Meta is developing facial recognition smart glasses with a Pentagon supplier for potential law enforcement and military applications, raising privacy and surveillance…
Quantum-Resistant Cryptography Migration: Challenges & Strategy
Preparing for quantum-resistant cryptography by 2030 presents significant challenges for IT/OT systems, demanding vast investments and complex integrations.
AI's Role in Cybersecurity Careers: Opportunities for Entry-Level Pros
AI is transforming entry-level cybersecurity roles, creating demand for human decision-making and critical thinking skills. Explore future career paths.
Klue-Salesforce Breach Exposes Competitive Data; Threat Actors Hacked
Klue's Salesforce instance breach exposed customer competitive intelligence and contact data via an API vulnerability.
Amazon Q Flaw: Cloud Credential Theft via Malicious Repositories
AWS patches a critical Amazon Q flaw enabling cloud credential theft via malicious repositories. Understand its impact and recommended mitigations.
Automating GRC: AI Agents for Continuous Control Monitoring
Explore how AI agents can automate GRC functions, continuously monitor controls, identify evidence gaps, and streamline remediation tasks for enhanced security…
Amazon Q Developer RCE via CVE-2026-12957 - Cloud Credential Theft
High-severity CVE-2026-12957 in Amazon Q Developer allowed malicious repositories to execute arbitrary code and steal cloud credentials upon workspace trust. Patch now.
CVE-2026-46331: Linux pedit COW Exploit Grants Root Access
A critical Linux kernel flaw, 'pedit COW' (CVE-2026-46331), allows local unprivileged users to gain root access via an out-of-bounds write. Public exploits exist.