Collecting Cyber-News from over 60 sources

Tag: intelligence

Ransomware Operators Keep Business Hours. The Data Proves It

Jun 1, 2026 4:42 PM

Tags: business, data, group, intelligence, leak, ransomware, threat

16,699 ransomware leak posts over 2 years show 84% drop MondayFriday, peak at European afternoon hours. October spikes yearly. Someone analyzed 16,699 ransomware leak-site posts across 200 groups over two years and asked the question most threat intelligence reports dance around: when does this actually happen? The answer is mundane and useful. Ransomware runs on…
The Pentagon Finally Admits That Location Data Is a Battlefield Problem

Jun 1, 2026 10:42 AM

Tags: data, infrastructure, intelligence, privacy, risk

The Pentagon confirmed adversaries are using commercial location data to track U.S. troops, exposing risks tied to smartphones and ad-tech networks. For years, security researchers, privacy advocates, and intelligence analysts have been warning about the same thing: smartphone location data isn’t just an advertising product. It’s surveillance infrastructure that anyone with enough money can access.…
Anthropic Expands Public Access to Claude Mythos AI Model

May 26, 2026 10:00 PM

Tags: access, ai, intelligence, RedTeam, vulnerability

Expect to See Widespread Availability of Mythos-Level Models Within 6-12 Months. Anthropic is expanding public access to its frontier artificial intelligence model Claude Mythos to qualifying customers’ security teams on request for such purposes as vulnerability research and red-teaming, and predicts that Mythos-class models will be publicly available within 12 months. First seen on govinfosecurity.com…
Microsoft Code Editor Flaw Lets Attackers Hijack Developer PCs

May 26, 2026 8:00 PM

Tags: access, ai, flaw, intelligence, malicious, microsoft, tool

Hidden Install Settings Let Malicious MCP Links Execute Code. Microsoft patched a high-severity flaw in Visual Studio Code after researchers found attackers could hide malicious settings inside MCP server install links, giving them persistent access to developer machines through what appeared to be routine artificial intelligence tool installations. First seen on govinfosecurity.com Jump to article:…
QA Resilient You: The Cyber Agony Aunts Are Back!

May 26, 2026 5:00 PM

Tags: cyber, intelligence, sophos, threat

The Cyber Agony Aunts Rebecca Taylor, Threat Intelligence Knowledge Manager and Researcher at Sophos, and Amelia Hewitt, Founder of CybAid and Co-Founder and Director of Cyber Consulting at Principle Defence are back! After a whirlwind of a year, with the release of their first co-authored book ‘Securely Yours’ in early 2025 and the launch of The…
[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back

May 26, 2026 4:00 PM

Tags: ai, attack, ddos, hacker, intelligence, tool, update

Every single day, hackers are finding new ways to crash websites and steal data.But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools to make their attacks faster, stronger, and much harder to stop.According to recent updates from The Hacker News, bad actors are…
CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks

May 26, 2026 4:00 PM

Tags: ai, attack, computer, data-breach, flaw, india, intelligence, Internet, threat, tool, update, vulnerability

The Indian Computer Emergency Response Team (CERT-In) has issued new guidelines requiring organizations to patch critical security vulnerabilities in internet-exposed systems within 12 hours of being flagged where “feasible” to safeguard against potential threats stemming from threat actors’ abuse of artificial intelligence (AI) tools and large language models (LLMs) to automate vulnerability First seen on…
New AI DDoS Attacks Are Smarter. Learn How to Fight Back in This Webinar

May 26, 2026 3:00 PM

Tags: ai, attack, ddos, hacker, intelligence, tool, update

Every single day, hackers are finding new ways to crash websites and steal data.But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools to make their attacks faster, stronger, and much harder to stop.According to recent updates from The Hacker News, bad actors are…
CERT-In Mandates 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks

May 26, 2026 1:00 PM

Tags: ai, attack, computer, data-breach, flaw, india, intelligence, Internet, threat, tool, update, vulnerability

The Indian Computer Emergency Response Team (CERT-In) has issued new guidelines requiring organizations to patch critical security vulnerabilities in internet-exposed systems within 12 hours of being flagged where “feasible” to safeguard against potential threats stemming from threat actors’ abuse of artificial intelligence (AI) tools and large language models (LLMs) to automate vulnerability First seen on…
Hackers Abuse KnowledgeDeliver LMS Flaw to Install BLUEBEAM Web Shell

May 26, 2026 8:00 AM

Tags: cve, cyber, exploit, flaw, google, hacker, intelligence, mandiant, remote-code-execution, threat, vulnerability

Hackers are actively exploiting a critical vulnerability in the KnowledgeDeliver Learning Management System (LMS) to deploy the BLUEBEAM web shell, according to findings from Mandiant’s Google Threat Intelligence Group. The flaw, tracked as CVE-2026-5426, enables unauthenticated remote code execution through ASP.NET ViewState deserialization and has been observed in real-world attacks. KnowledgeDeliver LMS Flaw The vulnerability…
25th May Threat Intelligence Report

May 25, 2026 6:00 PM

Tags: access, breach, intelligence, threat, unauthorized

7-Eleven, the global convenience store chain, confirmed a breach after an unauthorized access to systems used for franchisee documents. ShinyHunters claimed responsibility and said it stole more than 600,000 Salesforce records containing personal […] First seen on research.checkpoint.com Jump to article: research.checkpoint.com/2026/25th-may-threat-intelligence-report/
Responding to Breaches With AI? Beware Cross-Contamination

May 25, 2026 3:00 PM

Tags: ai, breach, cybersecurity, incident response, intelligence, security-incident, tool

Separate Breach Details Can Bleed Into Each Other, Incident Responders Find. Cybersecurity investigators who use artificial intelligence tools to draft incident response reports, beware: Information tied to one security incident can contaminate a report into a separate incident, if both get drafted using the same AI tool in the same session, researchers warn. First seen…
Telegram Channels Fuel Sale of Verified Bank Mule Accounts

May 25, 2026 1:02 PM

Tags: cyber, cybercrime, finance, fintech, group, intelligence, service, threat

Cybercriminal groups are increasingly using Telegram channels and encrypted platforms to sell verified bank and fintech mule accounts, signaling a major shift in how illicit funds are laundered at scale. According to recent threat intelligence findings, money mule operations have evolved into structured Mule-as-a-Service (MaaS) ecosystems, allowing attackers to outsource financial laundering just as easily…
Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

May 23, 2026 3:00 PM

Tags: ai, cybersecurity, flaw, intelligence, software, vulnerability

Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most “systemically” important software across the world since the cybersecurity initiative went live last month.Project Glasswing is an effort led by the artificial intelligence (AI) company, as part of which a small set of…
Hackers Exploit F5 BIG-IP to Gain SSH Access and Pivot Into Linux Networks

May 23, 2026 1:00 PM

Tags: access, attack, cyber, exploit, hacker, intelligence, linux, microsoft, network, threat, unauthorized

Threat actors are actively exploiting end-of-life F5 BIG-IP appliances to gain unauthorized SSH access into enterprise networks, using the compromised devices as launchpads for sophisticated multi-stage intrusion campaigns that ultimately target Active Directory infrastructure. Microsoft Threat Intelligence disclosed the full attack chain on May 22, 2026, documenting how a single compromised edge appliance cascaded into…
Hackers Exploit F5 BIG-IP to Gain SSH Access and Pivot Into Linux Networks

May 23, 2026 1:00 PM

Tags: access, attack, cyber, exploit, hacker, intelligence, linux, microsoft, network, threat, unauthorized

Threat actors are actively exploiting end-of-life F5 BIG-IP appliances to gain unauthorized SSH access into enterprise networks, using the compromised devices as launchpads for sophisticated multi-stage intrusion campaigns that ultimately target Active Directory infrastructure. Microsoft Threat Intelligence disclosed the full attack chain on May 22, 2026, documenting how a single compromised edge appliance cascaded into…
Google AI engineer claims dismissal for opposing tech sales to Israel

May 22, 2026 7:02 PM

Tags: ai, crime, crimes, google, intelligence, military, technology

‘Our work on AI was sold to facilitate genocide’: Artificial intelligence engineer claims Google unfairly sacked them for internally criticising the company’s decision to continue supplying technology to the Israeli military, despite credible claims of war crimes committed in Gaza First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366643389/Google-AI-engineer-dismissed-for-opposing-tech-sales-to-Israel
Fast and Furious Nimbus Manticore Operations During the Iranian Conflict

May 22, 2026 6:00 PM

Tags: cctv, cloud, cyber, intelligence, Internet, iran, middle-east, threat

ey Findings Introduction During the recent geopolitical tensions in the Middle East, wereportedon multiple Iran-nexus threat actors advancing Iran’s strategic objectives through cyber operations. These activities includedtargeting internet-connected cameras, conductingdestructive attacksagainst US and Israeli entities, andexfiltrating datafrom cloud environments to support broader kinetic and intelligence-gathering efforts. Nimbus Manticore (also tracked asUNC1549) is an IRGC-affiliated threat…
One Telecom Provider Hosted Most of the Middle East ‘s Active C2 Infrastructure

May 22, 2026 11:00 AM

Tags: group, infrastructure, intelligence, malware, middle-east, phishing, threat

Hunt.io mapped 1,350+ C2 servers across the Middle East, revealing how a small group of providers quietly supports major malware activity. For years, threat intelligence focused mostly on malware families, phishing domains, and individual indicators. But a new report from Hunt.io shows why defenders may need to pay closer attention to something more boring, hosting…
Mythos-Level AI Is Creating a Tech Debt Crisis

May 22, 2026 5:00 AM

Tags: ai, breach, cio, ciso, intelligence, software, vulnerability, vulnerability-management

Advanced AI Models Find More Holes Than Enterprise Security Teams Can Plug. Artificial intelligence models such as Anthropic’s Mythos are rapidly exposing decades of hidden software security debt, forcing CIOs and CISOs to rethink vulnerability management, remediation capacity and the trade-offs between availability and breach prevention. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/mythos-level-ai-creating-tech-debt-crisis-a-31750
State Officials Urge Congress to Renew Cyber Grant Program

May 22, 2026 5:00 AM

Tags: ai, china, cyber, cybersecurity, defense, government, intelligence

Officials Warn Local Governments Lack Resources to Counter Advanced Threats. State cybersecurity officials warned Congress that Chinese-linked intrusions and rapidly advancing artificial intelligence systems are overwhelming local defenses as states push lawmakers to expand long-term federal cyber grant funding and preserve federal coordination efforts. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/state-officials-urge-congress-to-renew-cyber-grant-program-a-31748
TamperedChef Malware Hides in Signed Apps to Drop Stealers and RATs

May 21, 2026 1:00 PM

Tags: access, cyber, intelligence, malware, rat, threat, tool

A large-scale malware campaign dubbed “TamperedChef” is leveraging trojanized productivity applications such as PDF editors, calendar tools, and file converters to silently deploy information stealers and remote access trojans (RATs), according to recent threat intelligence findings. Security researchers have identified multiple activity clusters linked to this evolving threat, including CL-CRI-1089, CL-UNK-1090, and CL-UNK-1110. While these…
Spanish police ‘systematically’ hid cryptophone intercepts from courts, claims ex chief

May 20, 2026 11:02 PM

Tags: intelligence, network, phone

Former Spanish police chief, on trial for drug trafficking, claims that UK and Columbian police assisted in creating fictitious intelligence reports to hide use of intercept from encrypted phone networks Sky ECC and Anom First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366643318/Spanish-police-systematically-hid-cryptophone-intercepts-from-courts-claims-ex-chief
Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development

May 20, 2026 8:00 PM

Tags: ai, framework, intelligence, microsoft, open-source, RedTeam, risk, risk-assessment, tool

Microsoft has unveiled two new open-source tools called RAMPART and Clarity to assist developers in better testing the security of artificial intelligence (AI) agents.RAMPART, short for Risk Assessment and Measurement Platform for Agentic Red Teaming, functions as a Pytest-native safety and security testing framework for writing and running safety and security tests for AI agents,…
Fox Tempest Linked to Malware-Signing Service Abusing Microsoft Artifact Signing

May 20, 2026 2:01 PM

Tags: cyber, cybercrime, group, intelligence, malicious, malware, microsoft, ransomware, service, software, threat

Fox Tempest, a financially motivated threat actor, has been linked to a large-scale malware-signing-as-a-service (MSaaS) operation that abused Microsoft’s Artefact Signing platform to enable cybercriminals to distribute malicious software that appeared to be trusted. According to Microsoft Threat Intelligence, the group enabled ransomware campaigns and malware distribution by generating fraudulent but valid code-signing certificates, allowing…
New CEO Joe Diamond Pushes Axonius Beyond Asset Management

May 20, 2026 1:00 AM

Tags: ai, ceo, intelligence, iot

Axonius Wants Enterprises to Spot Assets and Automate Remediation From One Platform. New Axonius CEO Joe Diamond said the New York-based company is evolving from asset management to asset intelligence by combining visibility, contextual correlation and automated remediation across IT, IoT, OT and emerging AI agent environments. Diamond takes over from founding CEO Dean Sysman.…
Europe Prepares to Hunker Down Against Bug Finding AI Models

May 20, 2026 12:00 AM

Tags: ai, cybersecurity, intelligence

Commission VP Henna Virkkunen Pledges Action in Tuesday Parliamentary Session. The European Commission is defending its response to the advent of artificial intelligence models with strong cybersecurity bug dissecting capabilities while promising measures to protect the European Union from what many expect to be an imminent onslaught of AI-powered attacks. First seen on govinfosecurity.com Jump…
What to Look for When Choosing an ASPM Platform

May 19, 2026 10:00 PM

Tags: ai, application-security, cyber, intelligence, risk, service, software

Application security posture management (ASPM) has become a foundational capability for software-as-a-service (SaaS) and software companies building increasingly complex, artificial intelligence-assisted applications. As engineering velocity increases and AI-generated code becomes part of everyday development workflows, security teams are under pressure to unify visibility, reduce fragmented tooling, and improve how risk isidentifiedand prioritized across the software…
Criminal IP Returns to Infosecurity Europe 2026 with Advanced AI-Driven TI ASM

May 19, 2026 9:00 PM

Tags: ai, cyber, cybersecurity, intelligence

Torrance, United States / California, May 19th, 2026, CyberNewswire Criminal IP has announced its return to Infosecurity Europe 2026 with a focus on delivering more actionable, decision-ready intelligence through its continuously evolving platform. Taking place from June 2 to June 4 at ExCeL London, one of Europe’s most influential cybersecurity events will once again bring…
Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

May 19, 2026 8:00 PM

Tags: android, control, cybersecurity, fraud, infrastructure, intelligence, malicious, malware, threat

Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting Android device users.The activity, per HUMAN’s Satori Threat Intelligence and Research Team, encompassed 455 malicious Android apps and 183 threat actor-owned command-and-control (C2) domains, turning the infrastructure into a pipeline for multi-stage fraud.”Users First seen on thehackernews.com Jump to…