Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service
A ransomware affiliate is approaching victims of the attacks it may have helped carry out, in an interesting technique that actually undermines its own business model. According to the GuidePoint Research and...
Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud
A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, researchers have...
CISOs Break Their Silence in 'Declassified' Docuseries
Most RSAC and Black Hat conference attendees go to network and learn about emerging threats. But Danielle Lewan, Clint Howard II, and 11 long-time chief information security officers (CISOs) arrive with cameras rolling...
'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture
Threat actors can trick a Copilot instance into giving up details about its own architecture, paving the way for a novel prompt injection attack. That's according to Varonis Threat Labs, which today published new...
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
A critical-severity security vulnerability in GitLab CE/EE could allow a remote attacker with no account or login credentials to manipulate or delete publicly accessible projects and user data by exploiting the...
China-Linked Hacker Shows AI Capabilities in APAC Attack
A successful multi-agent AI attack on a government's agencies in the Asia-Pacific region by a Chinese-language operator has put nations and businesses on notice that near- and fully-autonomous AI-enabled attacks are now...
Researchers observe first ‘near-autonomous’ AI attack on government target in Taiwan
Suspected Chinese hackers used open-source artificial intelligence models to run a cyberattack against the Taiwanese government in the first publicly known case of an autonomous AI hack hitting a government target,...
Trump turns to private sector in offensive hacking operations memo
President Donald Trump signed a national security memorandum Wednesday that lays the groundwork for private sector companies to take a larger role in helping law enforcement carry out offensive hacking operations...
AI’s ‘middle class’ has gotten dramatically better at hacking
As the White House and federal agencies grapple with frontier AI models and their hacking capabilities, researchers are warning that the industry’s “middle class” of smaller models may end up posing a greater threat...
Tech contractor for Brightly Software sentenced to 2 years in prison for insider attack
A tech worker who hatched an elaborate insider attack in late 2023 and attempted to extort Brightly Software for about $2.5 million was sentenced to two years in prison , the Justice Department said Thursday. Cameron...
A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.
A newly-signed presidential memorandum enlisting private sector companies in federal law enforcement hacking operations against criminal organizations could present a number of legal, practical and moral pitfalls, cyber...
Irregular says ‘human oversight’ responsible for AI sandbox escape incidents
A company that runs AI testing labs involved in a series of breaches carried out by Anthropic and OpenAI’s cyber-focused models said the incident happened in part because they “unintentionally” provided the models with...