Targeted
Threat Intelligence

Nexstar investigates potential breach after ShinyHunters claims theft of 1.1M Salesforce records

Nexstar Media Group is investigating a potential cybersecurity incident after the ShinyHunters extortion group claimed to have stolen more than one million Sale...

Oracle mitigates PeopleSoft zero-day exploited in data theft attacks

Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the...

Max-Severity Ivanti Flaw Exploited 24 Hours After Disclosure

Initial methods suggest attackers had likely mapped out Ivanti's asset landscape upfront and acted quickly once the exploit became public....

A Vulnerability in Oracle PeopleSoft PeopleTools Could Allow for Remote Code Execution

A vulnerability has been discovered in the Updates Environment Management component of PeopleSoft Enterprise PeopleTools that could allow an attacker with netwo...

New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets

Two security teams have shown, in separate research published this week, that OpenClaw, the popular self-hosted AI agent, can be driven to run attacker-controll...

New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse and MSNightmare) has released a new Windows BitLocker bypass dubbed GreatXML, a day after they publis...

CISA Requires Federal Agencies to Patch Critical Vulnerabilities Within 3 Days

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Binding Operational Directive (BOD) 26-04, titled “Prioritizing Security Updat...

OceanLotus APT Compromises FireAnt MetaKit in Supply-Chain Attack on Stock Investors

A notorious hacking group has been caught targeting stock investors in Vietnam through a supply chain attack, hijacking a popular investment software platform t...

GoFlateLoader Uses Massive PE Overlay to Deliver Lumma, Vidar, and StealC Infostealers

A new malware loader called GoFlateLoader has been quietly spreading across the internet, and what makes it stand out is not how complex it is but how effective...

Hundreds of iPhone apps found leaking OpenAI, Gemini credentials

An academic study has found that LLM-powered iOS applications routinely expose API credentials that can be abused to access AI services. Researchers discovered ...

Critical Langflow Vulnerability Exploited to Execute Malicious Code

A critical security vulnerability in Langflow, tracked as CVE-2026-5027, is raising serious concerns after researchers confirmed that attackers can exploit the ...

The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm

A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affiliate responsible for conducting...

Hackers Abuse SniperDz PhaaS Ecosystem for Brand Impersonation and Browser Hijacking

A sophisticated Phishing-as-a-Service (PhaaS) platform called SniperDz has been quietly enabling a wide range of online fraud that goes far beyond basic credent...

Researcher Hacked Google Using AI and Earned $500,000 Bug Bounty

A security researcher known as brutecat has disclosed how an AI-driven fuzzing pipeline uncovered more than $500,000 in vulnerabilities across Google’s in...

Coupang hit by massive $456 million fine for 2025 data breach incident

South Korea's Personal Information Protection Commission (PIPC) has fined e-commerce giant Coupang 624.68 billion won ($456 million) after concluding that poor ...

Authorities dismantle 'AudiA6' ransomware crypto-laundering service

Law enforcement has dismantled the "AudiA6" cryptocurrency service allegedly used by ransomware actors and other cybercriminals to launder more than $380 millio...

GitHub to Automate Disable npm Script Installs to Block Supply Chain Attacks

GitHub has announced a major security-focused update to the Node Package Manager (npm), introducing breaking changes in the upcoming npm v12 release to reduce s...

Claude Mythos Turning N-Days Into N-Hours With Rapid Working Exploit Creation

A new study has revealed that advanced large language models (LLMs), particularly Anthropic’s Claude Mythos Preview, are dramatically accelerating the developme...

CISA Warns of Check Point Security Gateway Vulnerability Actively Exploited in Ransomware Attacks

CISA has added a critical vulnerability in Check Point Security Gateway to its Known Exploited Vulnerabilities (KEV) catalog, warning that threat actors are act...

Hackers Use Weaponized DMG Files to Target macOS Users With Infostealer Malware

Hackers are using weaponized DMG files to target macOS users with infostealer malware, exploiting the long-standing myth that Apple devices are safe from cyber ...