Targeted
Threat Intelligence

SSH Bot Profiles Linux CPU, GPU and RAM Before Deploying Cryptocurrency Miner

A new SSH bot has been caught quietly logging into Linux systems, profiling their CPU, GPU, and memory, and then walking away without dropping any visible paylo...

DeepSeek-Powered Hermes Agent Launches Autonomous Cyberattacks Against Exposed Servers

A Chinese-speaking threat actor used an AI-driven agent to search for vulnerable internet-facing servers and begin attacks with little direct human input. The c...

Critical Flaw Led to Azure Cosmos DB Pwnage

Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access. The post Critical Flaw Led to Azure C...

Critical Flaw Allowed to Azure Cosmos DB Pwnage

Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access. The post Critical Flaw Allowed to Azu...

Critical SolarWinds Flaw Lets Attackers Bypass Web Help Desk SAML Login

SolarWinds has patched a critical security vulnerability in its Web Help Desk platform that could allow attackers to bypass SAML-based authentication. CVE-2026-...

ShutterGap Exposes Millions of AWS Resources Between Cloud Security Scans

Cloud security teams often utilize Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) tools to identify risky con...

Astaroth Malware Turns Your WhatsApp Account Into a Malware-Spreading Machine

Astaroth has added a new way to spread, turning a victim’s WhatsApp Web session into a delivery channel for the same malware. The banking trojan sends convincin...

Top 50 Best Penetration Testing Companies in 2026

Penetration testing companies serve as vital cybersecurity allies, simulating real-world cyberattacks to expose vulnerabilities in systems, networks, and applic...

The Gentlemen Ransomware Kills Nearly 180 Security Processes Before Encrypting Your Files

The Gentlemen ransomware operation is drawing attention for its aggressive effort to disable security software before locking files. Instead of relying only on ...

CareCloud Data Breach Impacts Over 350,000

In March 2026, hackers stole personal, financial, and medical information from the company’s AWS environment. The post CareCloud Data Breach Impacts Over 350,00...

PHP Patches Three Flaws Enabling SQL Injection, Memory Corruption and Server Crashes

PHP has addressed three security vulnerabilities in its latest maintenance releases, including high-severity flaws that can expose applications to SQL injection...

CISA Urges Water Utilities to Remove PLCs From the Public Internet Immediately

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to water and wastewater organizations due to a rise in cyberattacks tar...

CMMC Phase II Is Paused, But Contractors’ Data-Security Obligations Are Not

By John Grancarich, EVP, Head of Defense & Intelligence, Fortra The recent pause affecting the implementation of Cybersecurity Maturity Model Certifica...

New Backdoors Let Hackers Keylog, Steal Passwords and Control Government Computers

Government networks in Central Asia have been hit by two custom-built backdoors that give intruders deep control over infected computers. Known as OctLurk and S...

Critical Code Execution Vulnerability Patched in TeamCity

Tracked as CVE-2026-63077, the security defect can be exploited without authentication via the agent polling protocol. The post Critical Code Execution Vulnerab...

Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and an unn...

Anthropic Confirms Claude Hacked 3 Organizations by Breaking Test Environment

Anthropic has disclosed that its Claude AI models gained unauthorized access to the real systems of three organizations after reaching the open internet from wh...

Claude uploaded malware to PyPI in Anthropic's botched test

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and...

Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and...

South Korea fines telco giant KT $39 million for customer data breach

South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) over data pro...