All Articles
Security Intelligence
3410 articles · Updated every 8 hours
Advertisement
DOJ Disrupts Southeast Asia Crypto Fraud and Seizes $3.8 Million
US DOJ Disruption Week dismantles millions of accounts used in Southeast Asia crypto fraud, freezing assets and disrupting infrastructure targeting Americans.
CVE-2026-45247: Magento Mirasvit Cache Warmer RCE Exploit Analysis
CISA adds CVE-2026-45247, a critical Mirasvit Cache Warmer RCE flaw impacting Magento sites, to the KEV catalog following reports of active exploitation.
Pakistan-Linked Espionage Targets Afghan Finance Ministry via Xeno RAT
Analysis of a Pakistan-linked cyber espionage campaign targeting the Afghan Ministry of Finance using the Xeno RAT malware and malicious LNK files.
Attackers Automate EDR Evasion Testing with Python Scripts
Attackers are automating EDR evasion testing using Python scripts against major platforms like Sophos, CrowdStrike, and Windows Defender, challenging defenses.
Atlas RAT Deployment: Chinese Actors Target European Defense
Chinese-speaking threat actors are deploying the new Atlas RAT and exploiting CVE-2023-43208 to target European government and defense organizations.
Cyber Insurance Market Shifts: Rates Drop, Exclusions Widen
Organizations face reduced cyber insurance coverage despite dropping rates. Exclusions for social engineering attacks like ClickFix are widening, demanding policy…
Advertisement
China-Linked APTs Target Latin American Critical Infrastructure
China-linked APTs are conducting widespread cyber espionage against maritime shipping, oil production, and government sectors in Latin America, impacting over a dozen…
CISA Warns: Critical Infrastructure ATG Systems Under Attack
CISA, FBI, and NSA warn of active cyberattacks targeting internet-exposed Automatic Tank Gauge (ATG) systems in critical infrastructure. Learn to defend.
OFAC Sanctions Nobitex: Disrupting Ransomware & Terror Finance
The U.S. Treasury sanctions Nobitex, Iran's largest crypto exchange, for facilitating terrorist financing and ransomware payments.
Abusing Google DoubleClick for DesckVB RAT Delivery — Detection Guide
A new malspam campaign leverages Google DoubleClick redirects to bypass security filters and distribute DesckVB RAT, highlighting trust-based evasion tactics.
Google Gemini Hijacked on Android via Poisoned Notifications
Researchers demonstrate how WhatsApp and Slack notifications can trigger indirect prompt injection in Google Gemini, leading to memory poisoning.
CVE-2026-45247: Mirasvit Full Page Cache Warmer Exploited — Patch Now
CISA adds CVE-2026-45247, a deserialization vulnerability in Mirasvit Full Page Cache Warmer for Magento, to the KEV catalog after reports of active exploitation.
Coralogix Secures $200M Series D to Scale AI Observability Platform
Coralogix raises $200M to expand its AI-driven observability and security platform, addressing rising data costs and monitoring complexity for modern SOCs.
Continuous Security Testing: Closing the 345-Day Exposure Gap
Analyze why annual penetration tests leave 345 days of risk and how continuous security validation for financial institutions improves resilience.
Android and Linux Kernel Exploitation: CVE-2024-36971 and CVE-2024-21626
CISA adds Android CVE-2024-36971 and Linux CVE-2024-21626 to its KEV catalog following reports of active exploitation by sophisticated threat actors.
Detecting API Discovery Scans for swagger.json: Security Guide
Analysis of automated scans for swagger.json and OpenAPI files. Learn how to secure RESTful APIs against discovery-based attacks and reconnaissance.
AI Cryptanalysis of Historical Ciphers: Implications for Security
Researchers use machine learning to automate the decryption of medieval ciphers, signaling a shift in how legacy encryption and manual schemes are analyzed.
Finance Executive Email Compromise via Native Windows Tools
A monthslong campaign targeted a global stock exchange executive, leveraging native Windows tools for persistence and unauthorized email monitoring.
Google Gemini Indirect Prompt Injection via Malicious Notifications
Security researchers demonstrate how malicious notifications can manipulate Google Gemini's voice assistant to perform unauthorized tasks or exfiltrate data.
Evaluating AI Agent Security: 100 Agents Tested for Vulnerabilities
An industry-first evaluation of 100 AI agents highlights critical security gaps in defense and the high impact of potential agentic compromises.
WordPress Sites Targeted via Kirki and Burst Statistics Vulnerabilities
Attackers are exploiting unauthenticated stored XSS in Kirki and Burst Statistics plugins to achieve privilege escalation and website takeover.
Europol Dismantles 9 IPTV Piracy Groups in Global Crackdown
Law enforcement agencies across 11 countries dismantle 9 organized crime groups involved in illegal IPTV streaming, seizing servers and 100TB of data.
Acer Wave 7 Router RCE via CVE-2024-41591 and CVE-2024-41592
Acer addresses two critical 10.0 CVSS zero-day vulnerabilities in Wave 7 mesh routers that allow unauthenticated remote code execution and full takeover.
Shrinking IAM Attack Surface via Identity Visibility Platforms (IVIP)
Enterprise security teams must tackle Identity Dark Matter using IVIP to eliminate blind spots in fragmented identity and access management environments.