2025-11-03 16:46 UTC
Other
Other
CVE-2025-12463— 9.8 Unauthenticated SQL Injection in Guetebruck G-Cam Series Cameras
Smile, you’re on camera.
P5
LATEST
Aggregated cybersecurity reporting, advisories and research. 4,785 matching records.
AUTO-POLL // 2026-10-11 20:30 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P5 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 11
ACTIVE EXPLOITATION
P5
COOL // 6 ARTICLES
SAT
Oct 10
RANSOMWARE
P1
COOL // 11 ARTICLES
FRI
Oct 9
RANSOMWARE
P4
COOL // 67 ARTICLES
THU
Oct 8
RANSOMWARE
P3
COOL // 62 ARTICLES
WED
Oct 7
RANSOMWARE
P5
COOL // 86 ARTICLES
TUE
Oct 6
RANSOMWARE
P3
COOL // 61 ARTICLES
MON
Oct 5
RANSOMWARE
P5
COOL // 48 ARTICLES
2025-10-31 07:30 UTC
Other
Other
Detecting the NPM Supply Chain Compromise Before It Spread
Discover how Group-IB’s Business Email Protection (BEP) could prevent an NPM supply chain compromise by detecting the initial phishing email that led to the developer’s infection.
P0
2025-10-30 16:59 UTC
Vendor Research
Vendor Research
How Android provides the most effective protection to keep you safe from mobile scams
Posted by Lyubov Farafonova, Product Manager, Phone by Google; Alberto Pastor Nieto, Sr. Product Manager Google Messages and RCS Spam and Abuse; Vijay Pareek, Manager, Android Messaging Trust and Safety As Cybersecurity Awareness Month wraps up, we’re focusing on one of today's most pervasive digital threats: mobile scams. In the last 12 months, fraudsters have used advanced AI tools to create more convincing schemes, resulting in over $400 billion in stolen funds globally.¹ For years, Android …
P0
2025-10-28 17:01 UTC
Vendor Research
Vendor Research
HTTPS by default
One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secure Connections”. This means Chrome will ask for the user's permission before the first access to any public site without HTTPS. The “Always Use Secure Connections” setting warns users before accessing a site without HTTPS Chrome Security's mission is to make it safe to click on links. Part of being safe means ensuring that when a user types a URL or clicks o…
P0
2025-10-28 09:06 UTC
Other
Other
The Illusion of Wealth: Inside the Engineered Reality of Investment Scam Platforms
This blog details online investment scam campaigns, including fraudulent cryptocurrency, forex, and trading platforms, while offering a technical investigation guide for investigators, based on Group-IB’s technical investigation methodology. It outlines the social engineering tactics and victim manipulation models employed, describes the fraud actor structures behind these schemes, and highlights key infrastructure artifacts identified by Group-IB High-Tech Investigations analysts that can be l…
P0
2025-10-27 20:01 UTC
Other
Other
Attack Surface Management (ASM): Goals, Objectives, and Business Case
“I shouldn’t be able to even reach that from here”
P0
2025-10-24 04:00 UTC
Security Journalism
Security Journalism
Exploitation of Windows Server Update Services Remote Code | Huntress
Huntress has observed threat actors exploiting a Microsoft Windows Server Update Services (WSUS) vulnerability (CVE-2025-59287).
P5
2025-10-22 07:01 UTC
Other
Other
Unmasking MuddyWater’s New Malware Toolkit Driving International Espionage
Group-IB Threat Intelligence has uncovered a sophisticated phishing campaign, attributed with high confidence to the Advanced Persistent Threat (APT) MuddyWater. The attack used a compromised mailbox to distribute Phoenix backdoor malware to international organizations and across the whole Middle East and North Africa region, targeting more than 100 government entities.
P0
2025-10-22 05:00 UTC
Security Journalism
Security Journalism
Looking Through a Pinhole at a Qilin Ransomware Attack
Incident analysis is critical, but for newcomers, it can be daunting. Learn how to confirm commands, validate findings, and spot real impact during a Qilin ransomware event.
P15
2025-10-21 06:56 UTC
Other
Other
Exposing the Immediate Era Fraud in Singapore
Group-IB’s Threat Intelligence Report on a Singapore-Targeted Scam Operation
P0
2025-10-21 05:00 UTC
Security Journalism
Security Journalism
Dealing with Imperfect Telemetry
See how the Huntress Tactical Response team tackles security telemetry gaps. We share real-world techniques for working with missing logs, degraded telemetry, and cloud logging challenges to uncover critical insights and improve investigations.
P0
2025-10-17 07:46 UTC
Other
Other
East-west tension: Are NDR vendors monitoring the wrong traffic?
Most NDR deployments focus on perimeter traffic. Meanwhile, attackers move laterally inside networks. Here’s why east-west visibility is the blind spot that defines today’s biggest breaches.
P0
2025-10-16 05:00 UTC
Security Journalism
Security Journalism
Dispelling Ransomware Deployment Myths
Huntress analyzes ransomware activity, uncovering attack patterns and key detection opportunities while dispelling ransomware myths.
P15
2025-10-15 07:37 UTC
Other
Other
A new weapon against payment fraud: Unique threat intelligence for anti-fraud teams
Group-IB’s Suspicious Payment Details module for Threat Intelligence delivers payment identifiers tied to ransomware, illegal casinos, and laundering schemes. Fraud, AML, and compliance teams can now stop money from reaching criminal infrastructure.
P15
2025-10-15 04:00 UTC
Security Journalism
Security Journalism
Active Exploitation of Gladinet CentreStack and Triofox | Huntress
Huntress has observed in-the-wild exploitation of a Local File Inclusion vulnerability in Gladinet CentreStack and Triofox products.
P0
2025-10-15 04:00 UTC
Security Journalism
Security Journalism
The Crown Prince, Nezha | Huntress
Beginning in mid-2025, Huntress discovered a new tool being used to facilitate webserver intrusions known as Nezha, which up until now hasn’t been publicly reported on. This was used in tandem with other families of malware and web shell management tools such as Ghost RAT and AntSword.
P0
2025-10-14 05:00 UTC
Security Journalism
Security Journalism
How to Offend Your IT Team: Cybersecurity Tips
Ready to drive your IT team crazy? See our top security blunders and learn practical tips to improve your cybersecurity habits.
P0
2025-10-10 04:00 UTC
Security Journalism
Security Journalism
Huntress Threat Advisory: Widespread SonicWall SSLVPN Compromise
Huntress has observed a spike in compromises of SonicWall SSLVPN devices across multiple customer environments.
P0
2025-10-09 15:54 UTC
Other
Other
BBOT Security Advisory - gitdumper, unarchive
BBOT Gets Its First CVEs
P0
2025-10-08 04:01 UTC
Other
Other
Top 7 Cybersecurity Newsletters Worth Your Inbox
Your inbox deserves better than spam. Here are 7 cybersecurity newsletters that actually inform and make you a little smarter each week.
P0
2025-10-07 05:00 UTC
Security Journalism
Security Journalism
Ditch Lame Cybersecurity Tips | Huntress
Tired of hearing the same old cybersecurity tips? Learn actionable, modern strategies to protect yourself and your organization from bad threat actors.
P0
2025-10-06 08:11 UTC
Other
Other
From Cost Center to ROI Engine: Making ASM a Security Investment That Pays for Itself
In today’s sprawling digital landscape, the question for security leaders isn’t whether Attack Surface Management (ASM) matters; it’s whether your ASM platform is doing enough to earn its place in the budget. If your board or finance team is asking you to justify the spend, you’re not alone. Saying it “improves visibility” or “reduces risk” isn’t enough anymore. You need to show real outcomes, saved hours, reduced incidents, lower cloud costs, and stronger operational resilience. That’s where C…
P0
2025-10-02 05:00 UTC
Security Journalism
Security Journalism
Top Cyber Threat Trends of 2025: Deepfakes, ClickFix & More | Huntress
John Hammond and Greg Linares with Huntress discuss the top tradecraft we’ve seen this year so far, from ClickFix attacks to deepfake social engineering
P0
2025-10-01 13:00 UTC
Security Journalism
Security Journalism
Be Offensive: A bold take on Cybersecurity Awareness Month.
Over 20 years of Cybersecurity Awareness Month, and we’ve had enough. This October, Huntress is taking a new attitude with an offensive-minded approach to defense.
P0
2025-09-30 12:00 UTC
Government
Government
Sharpening the Focus on Product Requirements and Cybersecurity Risks: Updating Foundational Activities for IoT Product Manufacturers
Update: The comment period for your feedback on the second public draft of NIST IR 8259 has been extended through December 10, 2025. Over the past few months, NIST has been revising and updating Foundational Activities for IoT Product Manufacturers (NIST IR 8259 Revision 1 Initial Public Draft), which describes recommended pre-market and post-market activities for manufacturers to develop products that meet their customers’ cybersecurity needs and expectations. Thank you so much for the thought…
P0
2025-09-29 05:58 UTC
Other
Other
E-commerce Fraud-as-a-Service: How Scammers Exploit Brand Trust at Scale
In the rapidly evolving digital marketplace, e-commerce brands have become prime targets for cybercriminals. Beyond traditional data breaches, these brands now face sophisticated scams that exploit their reputation, deceive consumers, and erode trust. Drawing from investigations conducted by RedHunt Labs’ threat intelligence team, this blog delves into some of the most prevalent scams targeting e-commerce platforms and highlights how a Digital Risk Protection (DRP) solution can help fortify you…
P0
2025-09-29 05:00 UTC
Security Journalism
Security Journalism
ClickFix Attack: Variants, Detection & How It Works | Huntress
Learn how ClickFix techniques like FileFix, TerminalFix, and DownloadFix trick users into compromising. Then, learn proven detection methods using chokepoint strategies and behavioral analytics.
P0
2025-09-25 14:00 UTC
Security Journalism
Security Journalism
A Vietnamese threat actor's shift from PXA Stealer to PureRAT
Trace a threat actor's journey from custom Python stealers to a sophisticated commodity RAT. Learn how their tactics evolved and why this shift to .NET matters.
P0
2025-09-25 00:00 UTC
Government
Government
[MàJ] Multiples vulnérabilités dans Cisco ASA et FTD (25 septembre 2025)
**[Mise à jour du 07 novembre 2025]** Le 5 novembre 2025, Cisco a mis a jour son billet de blogue initialement publié le 25 septembre 2025 (cf. section Documentation). L'éditeur déclare avoir connaissance d'une nouvelle attaque, affectant les équipements ASA et FTD vulnérables, qui cause un déni...
P0
2025-09-24 18:42 UTC
Vendor Research
Vendor Research
Accelerating adoption of AI for cybersecurity at DEF CON 33
Posted by Elie Bursztein and Marianna Tishchenko, Google Privacy, Safety and Security TeamEmpowering cyber defenders with AI is critical to tilting the cybersecurity balance back in their favor as they battle cybercriminals and keep users safe. To help accelerate adoption of AI for cybersecurity workflows, we partnered with Airbus at DEF CON 33 to host the GenSec Capture the Flag (CTF), dedicated to human-AI collaboration in cybersecurity. Our goal was to create a fun, interactive environment, …
P0