Global Intelligence Search
Query the entire database for vulnerabilities, news articles, open-source security tools, and known threat actors.
Lessons Learned from CISA’s Recent GitHub Leak
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public...
Felons, Fraudsters Flog Offensive Cybersecurity Startup
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures...
FBI Seizes NetNut Proxy Platform, Popa Botnet
The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut , a sprawling residential proxy service operated by the publicly-traded Israeli...
Scattered Spider Hackers Plead Guilty on Day 1 of Trial
Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London , the entity responsible for the public transport network in the...
Who’s Tracking You? Use This New Service to Find Out
It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily...
Microsoft Plugs Nearly 400 Security Holes
Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others...
'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture
Threat actors can trick a Copilot instance into giving up details about its own architecture, paving the way for a novel prompt injection attack. That's according to Varonis Threat Labs, which today published new...
CISOs Break Their Silence in 'Declassified' Docuseries
Most RSAC and Black Hat conference attendees go to network and learn about emerging threats. But Danielle Lewan, Clint Howard II, and 11 long-time chief information security officers (CISOs) arrive with cameras rolling...
Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud
A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, researchers have...
'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service
A ransomware affiliate is approaching victims of the attacks it may have helped carry out, in an interesting technique that actually undermines its own business model. According to the GuidePoint Research and...
Video Call Exploit Chains Two Flaws in Unisoc Modems
Researchers have uncovered a new flaw in Unisoc T612 modem firmware that, when chained with a previously disclosed remote code execution (RCE) vulnerability, could allow an attacker to gain privileged access to the...
'Turf War' Between Claude Agents Leads to Self-Replicating Malware
It turns out that AI agents don't always play nice together. In the latest episode of agentic AI producing unexpected results , Anthropic recently observed "a multiagent turf war" between three instances of the same...