2026-04-16 06:56 UTC
Other
Other
W3LL Unmasked: Inside the Takedown of a Global BEC Phishing-as-a-Service Ecosystem
The takedown of a global phishing-as-a-service ecosystem
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 4,784 matching records.
AUTO-POLL // 2026-10-11 17:20 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P6 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 11
ACTIVE EXPLOITATION
P6
COOL // 5 ARTICLES
SAT
Oct 10
RANSOMWARE
P1
COOL // 11 ARTICLES
FRI
Oct 9
RANSOMWARE
P4
COOL // 67 ARTICLES
THU
Oct 8
RANSOMWARE
P3
COOL // 62 ARTICLES
WED
Oct 7
RANSOMWARE
P5
COOL // 86 ARTICLES
TUE
Oct 6
RANSOMWARE
P3
COOL // 61 ARTICLES
MON
Oct 5
RANSOMWARE
P5
COOL // 48 ARTICLES
2026-04-15 14:00 UTC
Vendor Research
Vendor Research
The German Cyber Criminal Überfall: Shifts in Europe's Data Leak Landscape
Written by: Jamie Collier, Robin Grunewald Germany has reclaimed its position as a primary focus for cyber extortion in Europe. While data leak site (DLS) posts rose almost 50% globally in 2025, Google Threat Intelligence (GTI) data shows that the surge is hitting German infrastructure harder and faster than its regional neighbors, marking a significant return to the high-pressure levels previously observed in the country during 2022 and 2023. Cyber Criminals Pivoting Back to Germany Germany mo…
P15
2026-04-14 13:00 UTC
Vendor Research
Vendor Research
Securing non-human identities: automated revocation, OAuth, and scoped permissions
Cloudflare is introducing scannable API tokens, enhanced OAuth visibility, and GA for resource-scoped permissions. These tools help developers implement a true least-privilege architecture while protecting against credential leakage.
P0
2026-04-14 13:00 UTC
Vendor Research
Vendor Research
Scaling MCP adoption: Our reference architecture for simpler, safer and cheaper enterprise deployments of MCP
We share Cloudflare's internal strategy for governing MCP using Access, AI Gateway, and MCP server portals. We also launch Code Mode to slash token costs and recommend new rules for detecting Shadow MCP in Cloudflare Gateway.
P0
2026-04-14 13:00 UTC
Vendor Research
Vendor Research
Managed OAuth for Access: make internal apps agent-ready in one click
Managed OAuth for Cloudflare Access helps AI agents securely navigate internal applications. By adopting RFC 9728, agents can authenticate on behalf of users without using insecure service accounts.
P0
2026-04-14 13:00 UTC
Security Journalism
Security Journalism
When PUPs Grow Fangs: Dragon Boss Solutions' $10 Supply Chain Risk
Huntress uncovered a malware operation using signed PUP to deploy AV killers with SYSTEM privileges. Learn how this adware crosses the line into malware territory and how anyone could have hijacked their update mechanism.
P0
2026-04-13 13:00 UTC
Security Journalism
Security Journalism
Your Security Program Was Built for a Threat Landscape That No Longer Exists
Security programs are failing against modern identity threats. See new Huntress data to discover a roadmap to building a resilient security team.
P0
2026-04-10 18:00 UTC
Security Journalism
Security Journalism
Your Staging Site Is More Important than You Think
Don’t forget to secure your side doors. Attackers look for the systems you treat as secondary. Don't neglect staging environments, as they’re a critical part of your attack surface.
P0
2026-04-10 15:12 UTC
Vendor Research
Vendor Research
Bringing Rust to the Pixel Baseband
Posted by Jiacheng Lu, Software Engineer, Google Pixel Team Google is continuously advancing the security of Pixel devices. We have been focusing on hardening the cellular baseband modem against exploitation. Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities. For Pixel 10, Google is advancing its proactive security measures further. Following our previous discussion on "Deploying Rust in Existing…
P20
2026-04-10 09:56 UTC
Vendor Research
Vendor Research
Bringing Rust to the Pixel Baseband
Google is continuously advancing the security of Pixel devices.
P0
2026-04-10 09:00 UTC
Other
Other
Recovery scammers hit you when you’re down: Here’s how to avoid a second strike
If you’ve been a victim of fraud, you’re likely already a lead on a ‘sucker list’ – and if you’re not careful, your ordeal may be about to get worse.
P0
2026-04-09 19:25 UTC
Vendor Research
Vendor Research
Protecting Cookies with Device Bound Session Credentials
Following our April 2024 announcement, Device Bound Session Credentials (DBSC) is now entering public availability for Windows users on Chrome 146, and expanding to macO…
P0
2026-04-09 19:00 UTC
Security Journalism
Security Journalism
What a Fake Claude Download Says About Security Today
Attackers are already targeting the AI tools your team just started using. Here's what that looks like when it lands in your own environment. And what actually stops it.
P0
2026-04-09 17:07 UTC
Vendor Research
Vendor Research
Protecting Cookies with Device Bound Session Credentials
Posted by Ben Ackerman, Chrome team, Daniel Rubery, Chrome team and Guillaume Ehinger, Google Account Security team Following our April 2024 announcement, Device Bound Session Credentials (DBSC) is now entering public availability for Windows users on Chrome 146, and expanding to macOS in an upcoming Chrome release. This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape. Session theft t…
P0
2026-04-09 14:00 UTC
Security Journalism
Security Journalism
The 60ms Window: How Event 5156 Solves the ADWS Attribution Problem
Event 1644 shows localhost, hiding the attacker's real IP. By correlating Event 5156 with a ~60-80ms timing window, you can attribute ADWS queries to their actual source—and the data was already in your SIEM.
P0
2026-04-09 09:25 UTC
Other
Other
Seven Signals Cyber Experts Agreed on at FIRST Paris 2026
Group-IB hosted the FIRST Technical Colloquium in Paris, where cybersecurity experts challenged assumptions around modern cyber defense. FIRST Chair Olivier Caleff opened and moderated the event.
P0
2026-04-09 08:16 UTC
Other
Other
Are Risks Revealed in Actions or Activity? Understanding Behavioral Analytics in Cybersecurity
Attackers count on static defenses. Switch to advanced behavioral analytics to spot abnormal behavior while its still unfolding and protect your environment.
P0
2026-04-08 16:00 UTC
Government
Government
P0
2026-04-08 16:00 UTC
Government
Government
Threat Landscape Report 2025 - A Year In Review
CERT-EU Cyber Threat Landscape Report for 2025 - Year Review
P0
2026-04-08 14:00 UTC
Security Journalism
Security Journalism
The ADWS Architecture That Hides PowerShell AD Enumeration
A threat actor enumerated our entire AD with Get-ADComputer, and none of our detections fired. The problem wasn't their evasion - it was an architectural blind spot in how PowerShell talks to Active Directory.
P0
2026-04-08 11:00 UTC
Security Journalism
Security Journalism
Why the Stryker Attack Still Matters. And Five Steps You Can Take Today
The Stryker incident revealed that a "Weaponized Remote Wipe" via compromised MDM is a more permanent and difficult threat than ransomware. Learn concrete steps to secure management platforms and prevent your security shield from becoming a weapon.
P15
2026-04-08 07:30 UTC
Other
Other
Cyber Saga: In the Footsteps of the DPRK IT Workers
Discover how North Korean threat actors use synthetic identities, AI-assisted workflows, and overlapping infrastructure to infiltrate companies, and learn actionable strategies to mitigate this insider threat.
P0
2026-04-07 21:00 UTC
Vendor Research
Vendor Research
Cloudflare targets 2029 for full post-quantum security
Recent advances in quantum hardware and software have accelerated the timeline on which quantum attack might happen. Cloudflare is responding by moving our target for full post-quantum security to 2029.
P0
2026-04-07 13:00 UTC
Security Journalism
Security Journalism
Decoding NightSpire: Ransomware IOCs Aren't Set in Stone
A recent incident linked to the NightSpire ransomware workflow gives insight into why the RaaS structure and model, or lack thereof, are important – especially when it comes to scoping and recovering from the incident.
P15
2026-04-07 09:00 UTC
Other
Other
As breakout time accelerates, prevention-first cybersecurity takes center stage
Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy.
P0
2026-04-06 14:04 UTC
Other
Other
Artificial Foolishness: The Hidden Dangers of External-Facing LLMs
The rise of AI opens more doors to attackers
P0
2026-04-02 19:14 UTC
Vendor Research
Vendor Research
Google Workspace’s continuous approach to mitigating indirect prompt injections
Indirect prompt injection (IPI) is an evolving threat vector targeting users of complex AI applications with multiple data sources, such as Workspace with Gemini. This t…
P0
2026-04-02 16:00 UTC
Vendor Research
Vendor Research
Google Workspace’s continuous approach to mitigating indirect prompt injections
Posted by Adam Gavish, Google GenAI Security TeamIndirect prompt injection (IPI) is an evolving threat vector targeting users of complex AI applications with multiple data sources, such as Workspace with Gemini. This technique enables the attacker to influence the behavior of an LLM by injecting malicious instructions into the data or tools used by the LLM as it completes the user’s query. This may even be possible without any input directly from the user.IPI is not the kind of technical proble…
P0
2026-04-01 15:00 UTC
Government
Government
Cyber Brief 26-04 - March 2026
Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
P0
2026-04-01 14:00 UTC
Security Journalism
Security Journalism
OpenClaw, Rogue Agents, and Application Hygiene
OpenClaw AI agents pose identity and data risks if deployed with broad cloud permissions. Learn how to find and secure these apps before an attacker does.
P0