Collecting Cyber-News from over 60 sources

Tag: intelligence

Russia’s FSB Says Foreign Spies Infected Officials’ Phones With Malware

Jun 3, 2026 4:42 PM

Tags: country, intelligence, malware, mobile, phone, russia, service

Russia’s FSB claims foreign intelligence planted malware on senior officials’ phones to intercept calls and activate cameras. No technical evidence, no country named. On June 2, 2026, Russia’s Federal Security Service (FSB) published a statement claiming it had uncovered and documented a large-scale foreign intelligence operation targeting the mobile devices of senior Russian officials. The…
Google adds Android protection against AI deepfake scam calls

Jun 3, 2026 11:43 AM

Tags: ai, android, deep-fake, google, intelligence, phone, scam

Google is introducing a new Android security feature that will detect and flag phone calls in which scammers use artificial intelligence to impersonate a user’s personal contacts. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-adds-android-protection-against-ai-deepfake-scam-calls/
Project Glasswing Grows as Anthropic Extends Claude Mythos Preview Program

Jun 3, 2026 7:42 AM

Tags: access, ai, cyber, intelligence, software

Anthropic has expanded its Project Glasswing initiative, significantly scaling access to its Claude Mythos Preview model as part of a broader effort to strengthen global software security. The program, first launched in April 2026 with around 50 organizations, has now grown to include approximately 200 partners worldwide, marking a major shift in how artificial intelligence…
Digital Intelligence Lab launches observatory to connect cyber events with geopolitical context

Jun 3, 2026 5:42 AM

Tags: cyber, intelligence

First seen on scworld.com Jump to article: www.scworld.com/brief/digital-intelligence-lab-launches-observatory-to-connect-cyber-events-with-geopolitical-context
AI Governance Playbook Calls for Enterprise Risk Controls

Jun 3, 2026 5:42 AM

Tags: ai, control, cybersecurity, governance, healthcare, intelligence, privacy, risk, supply-chain

Healthcare Coordinating Council Highlights AI Risks, Potential Medical Mishaps. Healthcare organizations face an array of difficult cybersecurity, privacy, patient safety, supply chain and operational resiliency issues as they roll out artificial intelligence tools. A new Health Sector Coordinating Council playbook aims to help by providing a voluntary governance framework. First seen on govinfosecurity.com Jump to…
Kali365 imitiert vermehrt Unternehmen wie Microsoft und Okta

Jun 2, 2026 6:42 PM

Tags: authentication, cyberattack, intelligence, mfa, microsoft, okta, phishing, service, threat

Steven Campbell, Staff Threat Intelligence Researcher bei Arctic Wolf, ordnete kürzlich die FBI-Warnung vor ‘Kali365″, eine Kampagne, die sich mittlerweile vom Phishing-Kit zu einer umfassenderen Phishing-as-a-Service-Plattform entwickelt hat, und aktuelle Entwicklungen rund um moderne Phishing-Angriffe ein. Kali365 war zunächst dadurch aufgefallen, dass sie den OAuth-Device-Authorization-Flow von Microsoft ausnutzte, um Authentifizierungs-Tokens zu stehlen und Multi-Faktor-Authentifizierung zu…
Foreign Spyware Found on Phones of Top Russian Officials

Jun 2, 2026 2:42 PM

Tags: cyber, espionage, government, intelligence, malicious, mobile, phone, russia, service, software, spyware

Russian authorities have disclosed a suspected large-scale cyber espionage operation targeting the mobile devices of senior government officials, raising fresh concerns over advanced spyware campaigns and mobile surveillance threats. The Federal Security Service (FSB) announced on Tuesday that it had identified and disrupted an alleged effort by foreign intelligence agencies to deploy malicious software on…
Infosecurity Europe: Business Leaders Lack Understanding of Threat Intelligence, Study Warns

Jun 2, 2026 11:44 AM

Tags: business, intelligence, sans, threat

A new Silobreaker and SANS Institute paper examines the ‘Intelligence-Stakeholder Gap’ and what organizations must do to achieve business buy-in on threat intelligence First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/business-leaders-struggle-threat/
1st June Threat Intelligence Report

Jun 1, 2026 5:42 PM

Tags: breach, data, data-breach, intelligence, social-engineering, threat

Carnival Corporation, a global cruise line operator, has confirmed a data breach affecting nearly 6 million people after attackers used social engineering to compromise an employee account. Exposed information may include names, contact […] First seen on research.checkpoint.com Jump to article: research.checkpoint.com/2026/1st-june-threat-intelligence-report/
Ransomware Operators Keep Business Hours. The Data Proves It

Jun 1, 2026 4:42 PM

Tags: business, data, group, intelligence, leak, ransomware, threat

16,699 ransomware leak posts over 2 years show 84% drop MondayFriday, peak at European afternoon hours. October spikes yearly. Someone analyzed 16,699 ransomware leak-site posts across 200 groups over two years and asked the question most threat intelligence reports dance around: when does this actually happen? The answer is mundane and useful. Ransomware runs on…
The Pentagon Finally Admits That Location Data Is a Battlefield Problem

Jun 1, 2026 10:42 AM

Tags: data, infrastructure, intelligence, privacy, risk

The Pentagon confirmed adversaries are using commercial location data to track U.S. troops, exposing risks tied to smartphones and ad-tech networks. For years, security researchers, privacy advocates, and intelligence analysts have been warning about the same thing: smartphone location data isn’t just an advertising product. It’s surveillance infrastructure that anyone with enough money can access.…
Anthropic Expands Public Access to Claude Mythos AI Model

May 26, 2026 10:00 PM

Tags: access, ai, intelligence, RedTeam, vulnerability

Expect to See Widespread Availability of Mythos-Level Models Within 6-12 Months. Anthropic is expanding public access to its frontier artificial intelligence model Claude Mythos to qualifying customers’ security teams on request for such purposes as vulnerability research and red-teaming, and predicts that Mythos-class models will be publicly available within 12 months. First seen on govinfosecurity.com…
Microsoft Code Editor Flaw Lets Attackers Hijack Developer PCs

May 26, 2026 8:00 PM

Tags: access, ai, flaw, intelligence, malicious, microsoft, tool

Hidden Install Settings Let Malicious MCP Links Execute Code. Microsoft patched a high-severity flaw in Visual Studio Code after researchers found attackers could hide malicious settings inside MCP server install links, giving them persistent access to developer machines through what appeared to be routine artificial intelligence tool installations. First seen on govinfosecurity.com Jump to article:…
QA Resilient You: The Cyber Agony Aunts Are Back!

May 26, 2026 5:00 PM

Tags: cyber, intelligence, sophos, threat

The Cyber Agony Aunts Rebecca Taylor, Threat Intelligence Knowledge Manager and Researcher at Sophos, and Amelia Hewitt, Founder of CybAid and Co-Founder and Director of Cyber Consulting at Principle Defence are back! After a whirlwind of a year, with the release of their first co-authored book ‘Securely Yours’ in early 2025 and the launch of The…
[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back

May 26, 2026 4:00 PM

Tags: ai, attack, ddos, hacker, intelligence, tool, update

Every single day, hackers are finding new ways to crash websites and steal data.But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools to make their attacks faster, stronger, and much harder to stop.According to recent updates from The Hacker News, bad actors are…
CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks

May 26, 2026 4:00 PM

Tags: ai, attack, computer, data-breach, flaw, india, intelligence, Internet, threat, tool, update, vulnerability

The Indian Computer Emergency Response Team (CERT-In) has issued new guidelines requiring organizations to patch critical security vulnerabilities in internet-exposed systems within 12 hours of being flagged where “feasible” to safeguard against potential threats stemming from threat actors’ abuse of artificial intelligence (AI) tools and large language models (LLMs) to automate vulnerability First seen on…
New AI DDoS Attacks Are Smarter. Learn How to Fight Back in This Webinar

May 26, 2026 3:00 PM

Tags: ai, attack, ddos, hacker, intelligence, tool, update

Every single day, hackers are finding new ways to crash websites and steal data.But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools to make their attacks faster, stronger, and much harder to stop.According to recent updates from The Hacker News, bad actors are…
CERT-In Mandates 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks

May 26, 2026 1:00 PM

Tags: ai, attack, computer, data-breach, flaw, india, intelligence, Internet, threat, tool, update, vulnerability

The Indian Computer Emergency Response Team (CERT-In) has issued new guidelines requiring organizations to patch critical security vulnerabilities in internet-exposed systems within 12 hours of being flagged where “feasible” to safeguard against potential threats stemming from threat actors’ abuse of artificial intelligence (AI) tools and large language models (LLMs) to automate vulnerability First seen on…
Hackers Abuse KnowledgeDeliver LMS Flaw to Install BLUEBEAM Web Shell

May 26, 2026 8:00 AM

Tags: cve, cyber, exploit, flaw, google, hacker, intelligence, mandiant, remote-code-execution, threat, vulnerability

Hackers are actively exploiting a critical vulnerability in the KnowledgeDeliver Learning Management System (LMS) to deploy the BLUEBEAM web shell, according to findings from Mandiant’s Google Threat Intelligence Group. The flaw, tracked as CVE-2026-5426, enables unauthenticated remote code execution through ASP.NET ViewState deserialization and has been observed in real-world attacks. KnowledgeDeliver LMS Flaw The vulnerability…
25th May Threat Intelligence Report

May 25, 2026 6:00 PM

Tags: access, breach, intelligence, threat, unauthorized

7-Eleven, the global convenience store chain, confirmed a breach after an unauthorized access to systems used for franchisee documents. ShinyHunters claimed responsibility and said it stole more than 600,000 Salesforce records containing personal […] First seen on research.checkpoint.com Jump to article: research.checkpoint.com/2026/25th-may-threat-intelligence-report/
Responding to Breaches With AI? Beware Cross-Contamination

May 25, 2026 3:00 PM

Tags: ai, breach, cybersecurity, incident response, intelligence, security-incident, tool

Separate Breach Details Can Bleed Into Each Other, Incident Responders Find. Cybersecurity investigators who use artificial intelligence tools to draft incident response reports, beware: Information tied to one security incident can contaminate a report into a separate incident, if both get drafted using the same AI tool in the same session, researchers warn. First seen…
Telegram Channels Fuel Sale of Verified Bank Mule Accounts

May 25, 2026 1:02 PM

Tags: cyber, cybercrime, finance, fintech, group, intelligence, service, threat

Cybercriminal groups are increasingly using Telegram channels and encrypted platforms to sell verified bank and fintech mule accounts, signaling a major shift in how illicit funds are laundered at scale. According to recent threat intelligence findings, money mule operations have evolved into structured Mule-as-a-Service (MaaS) ecosystems, allowing attackers to outsource financial laundering just as easily…
Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

May 23, 2026 3:00 PM

Tags: ai, cybersecurity, flaw, intelligence, software, vulnerability

Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most “systemically” important software across the world since the cybersecurity initiative went live last month.Project Glasswing is an effort led by the artificial intelligence (AI) company, as part of which a small set of…
Hackers Exploit F5 BIG-IP to Gain SSH Access and Pivot Into Linux Networks

May 23, 2026 1:00 PM

Tags: access, attack, cyber, exploit, hacker, intelligence, linux, microsoft, network, threat, unauthorized

Threat actors are actively exploiting end-of-life F5 BIG-IP appliances to gain unauthorized SSH access into enterprise networks, using the compromised devices as launchpads for sophisticated multi-stage intrusion campaigns that ultimately target Active Directory infrastructure. Microsoft Threat Intelligence disclosed the full attack chain on May 22, 2026, documenting how a single compromised edge appliance cascaded into…
Hackers Exploit F5 BIG-IP to Gain SSH Access and Pivot Into Linux Networks

May 23, 2026 1:00 PM

Tags: access, attack, cyber, exploit, hacker, intelligence, linux, microsoft, network, threat, unauthorized

Threat actors are actively exploiting end-of-life F5 BIG-IP appliances to gain unauthorized SSH access into enterprise networks, using the compromised devices as launchpads for sophisticated multi-stage intrusion campaigns that ultimately target Active Directory infrastructure. Microsoft Threat Intelligence disclosed the full attack chain on May 22, 2026, documenting how a single compromised edge appliance cascaded into…
Google AI engineer claims dismissal for opposing tech sales to Israel

May 22, 2026 7:02 PM

Tags: ai, crime, crimes, google, intelligence, military, technology

‘Our work on AI was sold to facilitate genocide’: Artificial intelligence engineer claims Google unfairly sacked them for internally criticising the company’s decision to continue supplying technology to the Israeli military, despite credible claims of war crimes committed in Gaza First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366643389/Google-AI-engineer-dismissed-for-opposing-tech-sales-to-Israel
Fast and Furious Nimbus Manticore Operations During the Iranian Conflict

May 22, 2026 6:00 PM

Tags: cctv, cloud, cyber, intelligence, Internet, iran, middle-east, threat

ey Findings Introduction During the recent geopolitical tensions in the Middle East, wereportedon multiple Iran-nexus threat actors advancing Iran’s strategic objectives through cyber operations. These activities includedtargeting internet-connected cameras, conductingdestructive attacksagainst US and Israeli entities, andexfiltrating datafrom cloud environments to support broader kinetic and intelligence-gathering efforts. Nimbus Manticore (also tracked asUNC1549) is an IRGC-affiliated threat…
One Telecom Provider Hosted Most of the Middle East ‘s Active C2 Infrastructure

May 22, 2026 11:00 AM

Tags: group, infrastructure, intelligence, malware, middle-east, phishing, threat

Hunt.io mapped 1,350+ C2 servers across the Middle East, revealing how a small group of providers quietly supports major malware activity. For years, threat intelligence focused mostly on malware families, phishing domains, and individual indicators. But a new report from Hunt.io shows why defenders may need to pay closer attention to something more boring, hosting…
Mythos-Level AI Is Creating a Tech Debt Crisis

May 22, 2026 5:00 AM

Tags: ai, breach, cio, ciso, intelligence, software, vulnerability, vulnerability-management

Advanced AI Models Find More Holes Than Enterprise Security Teams Can Plug. Artificial intelligence models such as Anthropic’s Mythos are rapidly exposing decades of hidden software security debt, forcing CIOs and CISOs to rethink vulnerability management, remediation capacity and the trade-offs between availability and breach prevention. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/mythos-level-ai-creating-tech-debt-crisis-a-31750
State Officials Urge Congress to Renew Cyber Grant Program

May 22, 2026 5:00 AM

Tags: ai, china, cyber, cybersecurity, defense, government, intelligence

Officials Warn Local Governments Lack Resources to Counter Advanced Threats. State cybersecurity officials warned Congress that Chinese-linked intrusions and rapidly advancing artificial intelligence systems are overwhelming local defenses as states push lawmakers to expand long-term federal cyber grant funding and preserve federal coordination efforts. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/state-officials-urge-congress-to-renew-cyber-grant-program-a-31748