Latest IntelligencePage 48
Search by keyword →
Trusted Vendors Are Becoming Attack Paths: How US and EU Enterprises Can Reduce the Risk
A trusted supplier can become an attack path overnight.  Large US and EU enterprises often rely on hundreds of vendors, giving attackers plenty of opportun...
Hackers compromise 14,500 Dahua web cameras in 35-day campaign
In a large-scale campaign that researchers dubbed CameraSwarm, hackers compromised more than 14,500 Dahua IP cameras mostly in Ukraine and Russia. [...]...
OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior
OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (AI) models for two weeks while it shored ...
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programmable logic controllers (PLCs) in U.S. cr...
SilkParasite Threatens Central Asian Orgs With Flurry of RATs
A spear-phishing campaign by a Chinese-nexus group linked to FamousSparrow provides insight into geopolitical, technical, and strategic global moves by China's ...
Critical Citrix NetScaler Flaw Lets Remote Attackers Bypass Authentication Without Credentials
Cloud Software Group has issued a critical security bulletin warning customers of two serious vulnerabilities affecting NetScaler ADC (formerly Citrix ADC) and ...
CISA Adds Microsoft Internet Key Exchange RCE Vulnerability Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Microsoft Internet Key Exchange vulnerability, tracked as CVE-2026-33824, to its ...
2,000 WordPress sites hijacked by StopAndProtect malware operation
A large-scale malware operation dubbed StopAndProtect uses thousands of compromised WordPress websites to distribute malware, issue commands, and store data sto...
Hackers Let Microsoft 365 Users Complete MFA, Then Steal Logged-In Sessions
A sophisticated Phishing-as-a-Service (PhaaS) platform marketed as Mirage2FA is enabling threat actors to bypass multi-factor authentication (MFA) by allowing M...
US charges Iranian hackers over $3.4 billion intellectual property theft
The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long operations that stole data from A...
Microsoft 365 Service Degradation Disrupts Users Across South America
Microsoft is responding to a regional outage that may leave users in South America unable to use multiple Microsoft 365 services. The company is tracking the di...
Firefox 154 blocks silent WebSocket access to local network devices
Mozilla has released Firefox 154 with expanded protections against websites connecting to devices on local networks, new AI-assisted tab organization, and suppo...
Former Ping Identity and CyberArk Executives Join AppViewX to Scale Machine and Agent Identity Security
New York, New York, August 19th, 2026, CyberNewswire New revenue leader and board member join as AppViewX’s identity security business continues its rapid...
CISA Adds Microsoft SharePoint Weak Authentication Vulnerability to KEV List
CISA added a critical Microsoft SharePoint authentication flaw to its KEV catalog after CVE-2026-55040 was confirmed in active exploitation, urging organization...
Microsoft to End Support for Windows 11 24H2 Home and Pro Editions
Microsoft has issued a 60-day reminder that Windows 11 Home and Pro editions, version 24H2, will reach the end of updates on October 13, 2026. After that date, ...
China-Nexus Hackers Disguise Malicious VHD as JPEG to Deploy QUICAgent Backdoor
A China-nexus cyber espionage campaign is using a convincing visual trick to reach Myanmar government and technology personnel. The attackers present a virtual ...
Hackers Use AI Voice Calls and Fake Banking Pages to Bypass MFA and Steal Accounts
Hackers are pairing AI-generated phone calls with fake banking pages to take over customer accounts, even when multi-factor authentication is enabled. The campa...
Hundreds of Leaked Stripe Merchant Keys Expose Payment and Payout Capabilities
Hundreds of leaked Stripe merchant keys have exposed a serious risk for online businesses and their customers. The collection contains active credentials tied t...
Password spraying attacks surge 155x as hackers exploit MFA gaps
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks....
Ransomware Hackers Pose as Recovery Firm and Demand Up to $60,000
Ransomware victims are facing a new kind of pressure campaign. Instead of receiving another demand from the attackers who stole their data, some companies are b...