One Packet Can Crash OT Servers in Industrial Sectors
Severity: HighAction: ReviewExploitation: Suspected
Live feed
Latest intelligence
Everything we publish, newest first. This feed is never personalized or filtered unless you choose a filter.
Japan's Keio confirms ransomware attack disrupted business systems
Severity: HighAction: Be aware
Times Car confirms data breach affecting 6.6 million user accounts
Severity: HighAction: Be aware
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
Severity: ElevatedAction: Be aware
VU#762428: Authlib library contains a signature‑verification bypass vulnerability
Severity: ElevatedAction: Be aware
ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns
Severity: ElevatedAction: Be aware
Over 16,000 Supabase databases expose PII, passwords, auth tokens
Severity: Informational
AI Agents Are Privileged Users; Who Is Auditing Their Access?
Severity: Informational
New Mexico jury finds Meta deceived consumers about data privacy practices
Severity: Informational
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
Severity: ElevatedAction: Be aware
US, UK warn of exploited Citrix NetScaler zero-day bugs
Severity: HighAction: ReviewExploitation: Suspected
JadePuffer agentic AI attacks target Azure, destroy cloud resources
Severity: HighAction: Be aware
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
Severity: ElevatedAction: Be aware
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Severity: HighAction: Be aware
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
Severity: ElevatedAction: Be aware
80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking
Severity: ElevatedAction: Be aware
New Attack Against RSA
Severity: ElevatedAction: Be aware
Wireshark 4.6.9 Released, (Sun, Sep 27th)
Severity: ElevatedAction: Patch
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
3 Consulting Myths Debunked by Unit 42 Experts
Severity: Informational
AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment
Severity: Informational
What We Missed: Google Gemini Joins the AI Escape Party
Severity: ElevatedAction: Be aware
Chrome Dev for Android Update
Severity: ElevatedAction: Be aware
VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities
Severity: ElevatedAction: Be aware
Storm-3168: Agentic-driven cloud attacks using compromised service principals
Severity: HighAction: Be aware
Chrome Dev for Desktop Update
Severity: ElevatedAction: Be aware
Stopping IT Worker Scams Requires Revamped HR Process
Severity: ElevatedAction: Be aware
A Closer Look at Malware From the Macfinger ClickFix Campaign, (Fri, Sep 25th)
Severity: ElevatedAction: Be aware
WordPress Core Remote File Inclusion Vulnerability (CVE-2026-87902) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV