2025-12-22 09:55 UTC
Other
Other
Revisiting CVE-2025-50165: A critical flaw in Windows Imaging Component
A comprehensive analysis and assessment of a critical severity vulnerability with low likelihood of mass exploitation
P35
LATEST
Aggregated cybersecurity reporting, advisories and research. 4,785 matching records.
AUTO-POLL // 2026-10-11 19:45 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P5 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 11
ACTIVE EXPLOITATION
P5
COOL // 6 ARTICLES
SAT
Oct 10
RANSOMWARE
P1
COOL // 11 ARTICLES
FRI
Oct 9
RANSOMWARE
P4
COOL // 67 ARTICLES
THU
Oct 8
RANSOMWARE
P3
COOL // 62 ARTICLES
WED
Oct 7
RANSOMWARE
P5
COOL // 86 ARTICLES
TUE
Oct 6
RANSOMWARE
P3
COOL // 61 ARTICLES
MON
Oct 5
RANSOMWARE
P5
COOL // 48 ARTICLES
2025-12-22 05:00 UTC
Security Journalism
Security Journalism
Trial, Error & Typos: Malware Isn't Always 'Sophisticated' | Huntress
Think all threat actors are pros? This post reveals how 'unsophisticated' malware and attacker errors help defenders stop attacks before damage is done.
P0
2025-12-19 07:53 UTC
Other
Other
Choose Your Fighter: A New Stage in the Evolution of Android SMS Stealers in Uzbekistan
Group-IB analyzes the evolution of Android malware in Uzbekistan, revealing advanced droppers, encrypted payload delivery, anti-analysis techniques, and Wonderland’s bidirectional SMS-stealing capabilities driving large-scale financial fraud.
P0
2025-12-18 23:00 UTC
Security Journalism
Security Journalism
Gladinet CentreStack/Triofox: Cryptography Vulnerability | Huntress
Threat actors are exploiting a vulnerability in Gladinet’s CentreStack and Triofox products that stems from hardcoded cryptographic keys in the AES implementation.
P0
2025-12-18 10:00 UTC
Other
Other
LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan
ESET researchers discovered a China-aligned APT group, LongNosedGoblin, which uses Group Policy to deploy cyberespionage tools across networks of governmental institutions
P0
2025-12-18 09:08 UTC
Government
Government
2025-042: Critical Vulnerability in Cisco Secure Email and Web Manager
On December 17, 2025, Cisco released a security advisory for a critical vulnerability affecting Cisco Secure Email Gateway and Cisco Secure Email and Web Manager products. It is recommended to follow Cisco's recommendations to check whether vulnerable appliances have been compromised, and to remediate the issue. There is no patch available for this vulnerability yet.
P10
2025-12-18 08:00 UTC
Security Journalism
Security Journalism
A Series of Unfortunate (RMM) Events
Recently, the Huntress SOC has observed threat actors increasingly use PDQ and GoTo Resolve to deploy further remote monitoring and management (RMM) tools in attacks.
P0
2025-12-16 09:50 UTC
Other
Other
ESET Threat Report H2 2025
A view of the H2 2025 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts
P0
2025-12-16 06:00 UTC
Security Journalism
Security Journalism
The OID Problem: Writing LDAP Detections That Actually Work
Learn why your LDAP detection rules never fire and how to fix them. Hint: it's the OID-to-bitwise transformation.
P0
2025-12-12 15:22 UTC
Other
Other
Black Hat Europe 2025: Was that device designed to be on the internet at all?
Behind the polished exterior of many modern buildings sit outdated systems with vulnerabilities waiting to be found
P0
2025-12-12 08:22 UTC
Other
Other
Your Updated Guide to AI in Cybersecurity: Adoption, Trends, Challenges, and The Future
AI in cybersecurity is changing the threat landscape faster than ever. Stay current and prepared with Group-IB.
P0
2025-12-11 16:04 UTC
Other
Other
Black Hat Europe 2025: Reputation matters – even in the ransomware economy
Being seen as reliable is good for ‘business’ and ransomware groups care about 'brand reputation' just as much as their victims
P15
2025-12-11 10:00 UTC
Other
Other
Locks, SOCs and a cat in a box: What Schrödinger can teach us about cybersecurity
If you don’t look inside your environment, you can’t know its true state – and attackers count on that
P0
2025-12-11 07:32 UTC
Other
Other
Fighting Credit Fraud in Uzbekistan: An Uphill Battle Against Social Engineering
Comprehensive insights into Uzbekistan’s credit fraud trends, the methods used by fraudsters, and the practical security controls financial institutions are fighting back with.
P0
2025-12-10 20:00 UTC
Vendor Research
Vendor Research
HTTPS certificate industry phasing out less secure domain validation methods
Posted by Chrome Root Program Team Secure connections are the backbone of the modern web, but a certificate is only as trustworthy as the validation process and issuance practices behind it. Recently, the Chrome Root Program and the CA/Browser Forum have taken decisive steps toward a more secure internet by adopting new security requirements for HTTPS certificate issuers. These initiatives, driven by Ballots SC-080, SC-090, and SC-091, will sunset 11 legacy methods for Domain Control Validation…
P0
2025-12-10 15:03 UTC
Other
Other
Seeking symmetry during ATT&CK® season: How to harness today’s diverse analyst and tester landscape to paint a security masterpiece
Interpreting the vast cybersecurity vendor landscape through the lens of industry analysts and testing authorities can immensely enhance your cyber-resilience.
P0
2025-12-10 07:45 UTC
Other
Other
Stranger Threats Are Coming: Group-IB Cyber Predictions for 2026 and Beyond
Stranger things are happening in the upside-down world of cybercrime. Group-IB’s CEO, Dmitry Volkov, shares his cyber predictions for 2026 — what’s coming next, and what we must collectively fight against.
P0
2025-12-10 06:00 UTC
Security Journalism
Security Journalism
CMMC: The Opportunity ($$) and Challenge for MSPs
CMMC is coming. Learn how to turn this challenge into a major revenue opportunity for your business.
P0
2025-12-10 05:00 UTC
Security Journalism
Security Journalism
PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182
Huntress is seeing threat actors exploit React2Shell (CVE-2025-55182) to deploy a Linux backdoor, a reverse proxy tunnel, and a Go-based post-exploitation implant.
P5
2025-12-09 17:00 UTC
Vendor Research
Vendor Research
Further Hardening Android GPUs
Posted by Liz Prucka, Hamzeh Zawawy, Rishika Hooda, Android Security and Privacy Team Last year, Google's Android Red Team partnered with Arm to conduct an in-depth security analysis of the Mali GPU, a component used in billions of Android devices worldwide. This collaboration was a significant step in proactively identifying and fixing vulnerabilities in the GPU software and firmware stack. While finding and fixing individual bugs is crucial, and progress continues on eliminating them entirely…
P0
2025-12-09 10:00 UTC
Other
Other
The big catch: How whaling attacks target top executives
Is your organization’s senior leadership vulnerable to a cyber-harpooning? Learn how to keep them safe.
P0
2025-12-09 06:00 UTC
Security Journalism
Security Journalism
AI-Poisoning & AMOS Stealer: The Biggest Mac Threat | Huntress
Attackers are exploiting user trust in AI and aggressive SEO to deliver an evolved Atomic macOS Stealer. Learn why this social engineering tradecraft bypasses traditional network controls and the future of macOS infostealer defense.
P0
2025-12-09 06:00 UTC
Security Journalism
Security Journalism
Announcing the Latest Report on Huntress Managed SAT | Huntress
A new independent report explores how Huntress’ approach to SAT supports real behavior change. Learn what works best in building security culture.
P0
2025-12-08 18:03 UTC
Vendor Research
Vendor Research
Architecting Security for Agentic Capabilities in Chrome
Posted by Nathan Parker, Chrome security team Chrome has been advancing the web’s security for well over 15 years, and we’re committed to meeting new challenges and opportunities with AI. Billions of people trust Chrome to keep them safe by default, and this is a responsibility we take seriously. Following the recent launch of Gemini in Chrome and the preview of agentic capabilities, we want to share our approach and some new innovations to improve the safety of agentic browsing. The primary ne…
P0
2025-12-08 06:00 UTC
Security Journalism
Security Journalism
Hardening the Hypervisor | Huntress
Hypervisors are a major target for ransomware attacks. Get expert guidance from Huntress on how to protect your virtualized infrastructure. Learn how to secure access, put runtime controls in place, simplify patching, and improve your recovery plans.
P15
2025-12-05 20:00 UTC
Security Journalism
Security Journalism
Airport Cybersecurity: Defend Data from Juice Jacking & Public Wi-Fi Threats
Huntress' guide to airport cybersecurity best practices. Learn how to stop "Juice Jacking," evade Evil Twin Wi-Fi, and secure your devices while traveling.
P0
2025-12-05 00:00 UTC
Government
Government
[MàJ] Vulnérabilité dans React Server Components (05 décembre 2025)
**[Mise à jour du 11 décembre 2025]** Le CERT-FR a connaissance de multiples exploitations de la vulnérabilité CVE-2025-55182. Les serveurs avec une version vulnérable exposés après la publication des preuves de concept publiques du 5 décembre 2025 doivent être considérés comme compromis....
P5
2025-12-04 10:00 UTC
Other
Other
Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture
Identity is effectively the new network boundary. It must be protected at all costs.
P0
2025-12-03 16:59 UTC
Vendor Research
Vendor Research
Android expands pilot for in-call scam protection for financial apps
Posted by Aden Haussmann, Associate Product Manager and Sumeet Sharma, Play Partnerships Trust & Safety Lead Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle. Over the last few years, we’ve launched industry-leading features to detect scams and protect users across phone calls, text messages and messaging app chat notifications. These efforts are making a real difference in the lives of Android users. According to a recent YouGov sur…
P0
2025-12-03 15:00 UTC
Security Journalism
Security Journalism
What Does the Dark Web Look Like? Pulling Back the Curtain | Huntress
Learn what the dark web looks like with an exploration of the far reaches of the internet, how you can get there, and what you might find… from a safe distance.
P0