Continuous enterprise threat intelligence tracking active in-the-wild zero-days (CISA KEV), Microsoft Windows KB cumulative updates, MSRC security advisories, and CVE remediation.
An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims
ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices
Rapid7 has uncovered new BPFDoor, BPF Rekoobe and AVERAT malware variants targeting telecom and network-edge appliances in South Korea and Taiwan
The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal government
Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions
Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks
A breach at school software provider Frontline Education has exposed employee data
Microsoft has warned that threat actors have gained the advantage over defenders by using AI to enhance the speed and scale of attacks
Investigators have disrupted the operations of ransomware group KillSec and arrested several key suspects
The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days
Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges
TA419 posed as AI policymakers and economists to phish US AI policy experts' Microsoft 365 accounts
CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor
PwC finds global security leaders are most concerned about attacks on AI systems
MI5 has issued a rare warning to UK academics contributing to the China General Technology Research Institute
AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise
Trump and six AI firms sign a voluntary accord on internal controls, audits and board oversight
Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer
Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Google
Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine
RatHat's C2 panel now builds malware and ranks victims with AI across nearly 100 deployments
AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials
Microsoft Threat Intelligence warns that NeedyMantis threat actor from China has targeted organizations across a range of industries
Tokyo Metro and Keio have revealed separate cyber-attacks