Targeted
Threat Intelligence

Critical Flaws in Anthropic, Google, and OpenAI’s Coding Agents Enable RCE and Supply Chain Attacks

A repeatable vulnerability pattern across AI coding agents from Anthropic, Google, and OpenAI that allows attackers to achieve remote code execution, steal API ...

Hackers Can Leverage WSUS Servers to Deliver Malware and Compromise Enterprise Endpoints

A novel attack chain that allows adversaries to hijack Windows Server Update Services (WSUS), the trusted patch-management architecture widely deployed across e...

Top 10 Best Intrusion Detection & Prevention (IDS/IPS) Tools in 2026

An IDS detects malicious activity and alerts; an IPS sits inline and blocks it. Cisco Secure IPS is our top pick for 2026 on the strength of Snort 3 and Talos t...

Top 10 Best Firewall Management Tools in 2026

Most firewall breaches aren’t firewall failures they’re rule failures: shadowed policies, forgotten any-any entries, changes nobody risk-checked. Firewall manag...

Critical Paperclip Vulnerabilities Allow Attackers to Gain Admin Access

Critical vulnerabilities have been disclosed in Paperclip, an AI agent orchestration platform, that could allow attackers to gain administrative access and exec...

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmless-looking PDF can finish th...

Snowflake Hacker Pleads Guilty in US Court

Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada.  The post Snowflake Hacker Pleads Guilty in US Court appea...

One Fake Movie Download Can Expose Passwords, Payments and Crypto Assets

Cybercriminals are weaponizing pirated downloads of the blockbuster theatrical release “The Odyssey (2026)” to deliver Lumma Stealer. This prolific ...

How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore

AI did not create a new browser security problem. It exposed one that enterprises have long been able to ignore. Skyhigh Security explains why browsers have bec...

Tails emergency update fixes flaws that could deanonymize users

The Tails Project has released Tails 7.10.1 as an emergency security update addressing critical vulnerabilities that could allow attackers to obtain administrat...

Hackers Hid a Remote-Control Toolkit Inside Oracle to Take Over a Windows Server

A routine web application weakness has been tied to a serious Windows Server compromise after attackers used SQL injection to plant a remote-control toolkit ins...

Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts

Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched. The post Zero-Click AI Browser Hacking:...

Chinese Zbtlink WiFi routers ship with ENDLESSDOORS malware

At least 20 Zbtlink router models contain a preinstalled remote-access implant that connects to external command-and-control servers and can execute arbitrary c...

Public PoC Released for Linux Kernel Bridge Use-After-Free Vulnerability

A public proof-of-concept has been released for a use-after-free flaw affecting the Linux kernel’s bridge subsystem, specifically its Spanning Tree Protocol imp...

Critical Jenkins Vulnerability Allows Attackers to Execute Malicious Code on Controller

Jenkins has disclosed a critical security vulnerability that could allow attackers to execute malicious code on a Jenkins controller by bypassing a security fil...

Remus Hides Its Command Server on Ethereum While Emptying Browser Vaults

Remus is a newly active information‑stealing malware that quietly slips into Windows systems, locks onto popular web browsers, and drains their saved passwords,...

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities

Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Ninetee...

GrapheneOS says Revolut is blocking its users over Google Play checks

GrapheneOS says Revolut has begun blocking customers who use its privacy-focused Android operating system, alleging that the fintech company is presenting the r...

Canadian Man Pleads Guilty for Hacking U.S. Cloud Storage Provider

Connor Riley Moucka, a 26-year-old resident of Kitchener, Ontario, has pleaded guilty in the United States for his role in a major computer hacking and extortio...

Podcast: Compliance Won’t Save You: The Future of Cyber Risk with Edna Conway

(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of experience i...