Tag: intelligence

Sweden detains ex-military IT consultant suspected of spying for Russia

Jan 12, 2026 9:02 PM

Tags: intelligence, military, russia

A 33-year-old former IT consultant for Sweden’s Armed Forces has been detained on suspicions of spying for Russian intelligence, Swedish prosecutors said. First seen on therecord.media Jump to article: therecord.media/sweden-detains-it-consultant-russia
UK launches formal investigation into X over ‘nudification’ of children images

Jan 12, 2026 4:02 PM

Tags: ai, intelligence, tool

The move follows an eruption of complaints that began earlier this month when the platform’s artificial intelligence tool Grok was used to create sexual images of non-consenting people in response to user requests. First seen on therecord.media Jump to article: therecord.media/uk-launches-formal-investigation-x-grok-images
Iran-linked MuddyWater APT deploys Rust-based implant in latest campaign

Jan 12, 2026 12:02 PM

Tags: access, apt, attack, awareness, cctv, china, communications, computer, control, defense, detection, email, encryption, endpoint, espionage, framework, government, group, india, intelligence, iran, malware, military, network, phishing, russia, rust, threat, tool, training

Rust offers evasion advantages: CloudSEK researchers said RustyWater was developed in Rust, which they said is increasingly used by malware authors for its memory safety features and cross-platform capabilities, according to the blog post. Other state-sponsored groups, including Russia’s Gossamer Bear and China-linked actors, have also deployed Rust-based malware in recent campaigns, according to security…
Intersec Dubai highlights why AI has become critical in the race against cyber attackers

Jan 12, 2026 12:02 PM

Tags: ai, compliance, cyber, healthcare, intelligence, threat

Cigna Healthcare’s Jean Wiles warns that healthcare security teams must act faster without sacrificing accuracy or compliance as threats driven by artificial intelligence scale First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366637147/Intersec-Dubai-highlights-why-AI-has-become-critical-in-the-race-against-cyber-attackers
Anthropic Launches Claude AI for Healthcare with Secure Health Record Access

Jan 12, 2026 11:01 AM

Tags: access, ai, healthcare, intelligence

Anthropic has become the latest Artificial intelligence (AI) company to announce a new suite of features that allows users of its Claude platform to better understand their health information.Under an initiative called Claude for Healthcare, the company said U.S. subscribers of Claude Pro and Max plans can opt to give Claude secure access to their…
CISOs’ top 10 cybersecurity priorities for 2026

Jan 12, 2026 9:01 AM

Tags: access, ai, attack, authentication, business, ciso, cloud, compliance, control, corporate, cyber, cyberattack, cybersecurity, data, deep-fake, defense, gartner, google, hacker, identity, intelligence, international, leak, monitoring, network, office, passkey, resilience, risk, risk-management, service, software, strategy, supply-chain, technology, threat, tool, training, unauthorized, zero-trust

Prepping for AI-enabled attacks: Although conventional tasks dominate the CISO priorities in the Foundry survey, interviews and other research show that AI-related issues are also high on the CISO priority list.For example, 53% of security leaders ranked AI-enabled cyber threats as a top-three organizational risk in a global survey conducted by Boston Consulting Group. BCG…
CISOs’ top 10 cybersecurity priorities for 2026

Jan 12, 2026 9:01 AM

Tags: access, ai, attack, authentication, business, ciso, cloud, compliance, control, corporate, cyber, cyberattack, cybersecurity, data, deep-fake, defense, gartner, google, hacker, identity, intelligence, international, leak, monitoring, network, office, passkey, resilience, risk, risk-management, service, software, strategy, supply-chain, technology, threat, tool, training, unauthorized, zero-trust

Prepping for AI-enabled attacks: Although conventional tasks dominate the CISO priorities in the Foundry survey, interviews and other research show that AI-related issues are also high on the CISO priority list.For example, 53% of security leaders ranked AI-enabled cyber threats as a top-three organizational risk in a global survey conducted by Boston Consulting Group. BCG…
Hacking Group “Everest” Allegedly Claims Nissan Motor Breach

Jan 12, 2026 9:01 AM

Tags: breach, cyber, cyberattack, cybercrime, data, group, hacking, intelligence, threat

The Everest hacking group has allegedly claimed responsibility for a major cyberattack on Nissan Motor Co., Ltd., one of Japan’s leading automotive manufacturers. According to threat intelligence reports observed on January 10, 2026, the cybercriminal organization claims to have exfiltrated approximately 900 GB of sensitive data from the company’s systems, though the breach remains under…
Generative AI in Enterprises: Security Risks Most Companies Are Not Measuring

Jan 11, 2026 8:02 PM

Tags: ai, business, intelligence, risk

Introduction: The Silent Expansion of Generative AI in Business Generative Artificial Intelligence has rapidly moved from experimentation to widespread adoption… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/generative-ai-in-enterprises-security-risks-most-companies-are-not-measuring/
ISMG Editors: Lack of MFA Keeps Fueling Cloud Data Breaches

Jan 10, 2026 1:01 AM

Tags: ai, breach, cloud, data, defense, intelligence, mfa

Also: Turning AI Data Into AI Defense, Autonomous Border Patrol Robots. In this week’s panel, four ISMG editors discussed how basic security failures are still opening the door to major breaches, how researchers are rethinking data protection in the age of AI and the implications of robots with artificial intelligence patrolling national borders. First seen…
xRAT Malware Targets Windows Users via Fake Adult Game

Jan 9, 2026 7:02 PM

Tags: cyber, intelligence, malicious, malware, service, threat, windows

AhnLab Security Intelligence Center (ASEC) has uncovered a dangerous distribution campaign targeting Windows users through Korean web hard services. Threat actors are leveraging xRAT (QuasarRAT) malware, disguising it as legitimate adult game content to deceive unsuspecting users into downloading and executing malicious files. Korean webhard services have become a prime vector for malware distribution, with…
50 Best Free Cyber Threat Intelligence Tools 2026

Jan 9, 2026 7:02 PM

Tags: attack, cyber, intelligence, network, threat, tool, vulnerability

Threat Intelligence Tools are more often used by security industries to test the vulnerabilities in networks and applications. It helps with the collection and analysis of information about current and potential attacks that threaten the safety of an organization or its assets. Here you can find the Comprehensive Threat Intelligence Tools list that covers Performing…
Telecom sector sees steady rise in ransomware attacks

Jan 9, 2026 6:01 PM

Tags: attack, flaw, intelligence, ransomware, threat

A new threat intelligence report described a potent mixture of unpatched flaws and lax perimeter controls. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/telecom-ransomware-spike-cyble/809224/
Former NSA insider Kosiba brought back as spy agency’s No. 2

Jan 9, 2026 4:01 PM

Tags: intelligence, spy

Tim Kosiba, who has a long history of national security positions at the NSA and elsewhere, will be the signals intelligence agency’s new deputy chief. First seen on therecord.media Jump to article: therecord.media/timothy-kosiba-nsa-new-deputy-chief
The Definitive Guide to ISO 42001

Jan 9, 2026 3:01 PM

Tags: ai, framework, guide, intelligence, international

<div cla Understanding ISO 42001 ISO/IEC 42001 is the world’s first international standard for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS). Published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), ISO 42001 provides a structured framework for governing AI systems responsibly, securely, and transparently across…
CISA flags max-severity bug in HPE OneView amid active exploitation

Jan 9, 2026 2:01 PM

Tags: api, authentication, cisa, endpoint, exploit, flaw, Hardware, intelligence, kev, monitoring, software, strategy, threat, update, vulnerability

Not an ‘apply and move on’ solution: While CISA’s KEV inclusion raised the priority immediately, enterprises can’t treat OneView like a routine endpoint patch. Management-plane software is often deployed on-premises, sometimes on physical servers, and tightly coupled with production workflows. A rushed fix that breaks monitoring, authentication, or integrations can be almost as dangerous as…
Like it or not, AI will transform cyber strategy in 2026

Jan 9, 2026 7:01 AM

Tags: ai, compliance, cyber, governance, intelligence, risk, skills, strategy

Bubble or no bubble, from cyber skills to defensive strategies to governance, risk and compliance, artificial intelligence will remake the cyber world in 2026 First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366637095/Like-it-or-not-AI-will-transform-cyber-strategy-in-2026
CrowdStrike Acquires SGNL for $740 Million to Thwart AI-Powered Cyber Threats

Jan 8, 2026 10:02 PM

Tags: ai, credentials, crowdstrike, cyber, cybersecurity, defense, exploit, hacker, identity, intelligence, startup, technology, threat

CrowdStrike Inc. said Thursday it will acquire identity security startup SGNL in a deal valued at $740 million the latest move by the cybersecurity giant to fortify its defenses against increasingly sophisticated artificial intelligence (AI)-powered cyberattacks. The acquisition centers on SGNL’s continuous identity technology, designed to prevent hackers from exploiting user credentials as entry.. First…
The 2 faces of AI: How emerging models empower and endanger cybersecurity

Jan 8, 2026 8:02 PM

Tags: ai, api, attack, compliance, credentials, cyber, cybersecurity, data, deep-fake, defense, detection, endpoint, espionage, exploit, finance, flaw, framework, GDPR, google, governance, government, group, guide, hacker, HIPAA, incident response, injection, intelligence, LLM, malicious, malware, mandiant, microsoft, network, PCI, penetration-testing, privacy, risk, russia, scam, security-incident, service, social-engineering, strategy, tactics, threat, tool, vulnerability, zero-day

Self-modifying, evasive malware More recently, the researchers at Google Threat Intelligence Group (GTIG) identified a disturbing new trend: malware that uses LLMs during execution to dynamically alter its own behavior and evade detection. This is not pre-generated code, this is code that adapts mid-execution.In June 2025, GTIG identified an experimental malware called PROMPTFLUX, which connects…
ChatGPT Health feature draws concern from privacy critics over sensitive medical data

Jan 8, 2026 8:02 PM

Tags: ai, chatgpt, data, intelligence, privacy

The artificial intelligence juggernaut in a blog post encouraged its hundreds of millions of users to connect medical records and wellness app data to the new health-focused chatbot feature, adding that it will be outfitted with extra data privacy protections. First seen on therecord.media Jump to article: therecord.media/chatgpt-health-draws-concern-privacy-critics
The 2 faces of AI: How emerging models empower and endanger cybersecurity

Jan 8, 2026 8:02 PM

Tags: ai, api, attack, compliance, credentials, cyber, cybersecurity, data, deep-fake, defense, detection, endpoint, espionage, exploit, finance, flaw, framework, GDPR, google, governance, government, group, guide, hacker, HIPAA, incident response, injection, intelligence, LLM, malicious, malware, mandiant, microsoft, network, PCI, penetration-testing, privacy, risk, russia, scam, security-incident, service, social-engineering, strategy, tactics, threat, tool, vulnerability, zero-day

Self-modifying, evasive malware More recently, the researchers at Google Threat Intelligence Group (GTIG) identified a disturbing new trend: malware that uses LLMs during execution to dynamically alter its own behavior and evade detection. This is not pre-generated code, this is code that adapts mid-execution.In June 2025, GTIG identified an experimental malware called PROMPTFLUX, which connects…
React2Shell Vulnerability Hit by 8.1 Million Attack Attempts

Jan 8, 2026 7:02 PM

Tags: attack, cve, cyber, exploit, intelligence, remote-code-execution, threat, vulnerability

The React Server Components (RSC) >>Flight<>React2Shell,<< has become the target of a massive exploitation campaign that shows no signs of slowing. Since the vulnerability's initial disclosure, threat intelligence firm GreyNoise has recorded over 8.1 million attack sessions, with daily attack volumes […] The post React2Shell Vulnerability Hit by 8.1 Million Attack Attempts appeared first on…
Phishing-Angreifer setzen vermehrt auf E-Mail-Routing-Lücken

Jan 8, 2026 4:01 PM

Tags: 2fa, authentication, business, cyberattack, dmarc, dns, email, framework, infrastructure, intelligence, mail, mfa, microsoft, password, phishing, risk, service, spam, threat

Angreifer missbrauchen falsch konfigurierte Richtlinien, um Phishing-E-Mails wie interne E-Mails aussehen zu lassen, Filter zu umgehen und Anmeldedaten zu stehlen.Das Threat Intelligence Team von Microsoft hat kürzlich festgestellt, dass Angreifer zunehmend komplexe E-Mail-Weiterleitungen und falsch konfigurierte Domain-Spoofing-Schutzmaßnahmen ausnutzen. Dabei lassen sie ihre Phishing-Nachrichten so aussehen, als würden sie von den angegriffenen Organisationen selbst stammen.In den…
ownCloud Warns Users to Enable MFA After Credential Theft Incident

Jan 8, 2026 10:01 AM

Tags: advisory, authentication, credentials, cyber, intelligence, mfa, theft, threat, vulnerability

ownCloud has issued an urgent security advisory urging users to enable Multi-Factor Authentication (MFA) following a credential theft incident reported by threat intelligence firm Hudson Rock. The incident, discovered in January 2026, affected organizations using self-hosted file-sharing platforms, including some ownCloud Community Edition deployments. What Happened The incident did not result from any vulnerability or…
Researchers Poison Stolen Data to Sabotage AI Model Accuracy

Jan 8, 2026 10:01 AM

Tags: ai, breach, china, cyber, cybersecurity, data, intelligence

A groundbreaking cybersecurity research team has developed a novel defensive technique that renders stolen artificial intelligence databases virtually useless to attackers by deliberately poisoning proprietary knowledge graphs with plausible yet false information.”‹ The research, conducted by scientists from the Institute of Information Engineering at the Chinese Academy of Sciences, National University of Singapore, and Nanyang…
OpenAI Launches ChatGPT Health with Isolated, Encrypted Health Data Controls

Jan 8, 2026 10:01 AM

Tags: ai, apple, chatgpt, control, data, intelligence, openai

Artificial intelligence (AI) company OpenAI on Wednesday announced the launch of ChatGPT Health, a dedicated space that allows users to have conversations with the chatbot about their health.To that end, the sandboxed experience offers users the optional ability to securely connect medical records and wellness apps, including Apple Health, Function, MyFitnessPal, Weight Watchers, AllTrails, First…
Top cyber threats to your AI systems and infrastructure

Jan 8, 2026 9:01 AM

Tags: ai, api, attack, best-practice, business, chatgpt, ciso, cloud, cyber, cybersecurity, data, defense, detection, exploit, framework, governance, hacker, infrastructure, injection, intelligence, LLM, malicious, mitre, monitoring, open-source, RedTeam, risk, sans, service, skills, software, strategy, supply-chain, tactics, theft, threat, tool, training, unauthorized, usa, vulnerability

Data poisoning Data poisoning is a type of attack in which bad actorsmanipulate, tamper with, and pollute the data used to develop or train AI systems, including machine learning models. By corrupting the data or introducing faulty data, attackers can alter, bias, or otherwise render inaccurate a model’s performance.Imagine an attack that tells a model…
FDA Takes Hands-Off Approach to AI Devices and Software

Jan 7, 2026 11:01 PM

Tags: ai, intelligence, risk, software, technology

Agency: Guidance Favors Market Innovation Over Federal Scrutiny. New artificial intelligence-enabled health wearable devices and clinical decision support software will not face U.S. Food and Drug Administration regulatory scrutiny, providing the technology meets certain criteria, such as being low-risk, the agency said this week. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fda-takes-hands-off-approach-to-ai-devices-software-a-30465
Poison Pill Defense Protects Proprietary AI Data From Theft

Jan 7, 2026 8:01 PM

Tags: ai, breach, china, data, defense, intelligence, theft, unauthorized

Researchers Weaponize False Data to Wreck Stolen AI Systems. Chinese and Singaporean researchers have developed a defense mechanism that poisons proprietary knowledge graph data, making such stolen information worthless to thieves who attempt to deploy it in unauthorized artificial intelligence systems. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/poison-pill-defense-protects-proprietary-ai-data-from-theft-a-30461
Neue Ransomware-Bedrohung zielt auf deutsche Unternehmen

Jan 7, 2026 5:01 PM

Tags: backup, ciso, cloud, cyberattack, encryption, extortion, firewall, germany, infrastructure, intelligence, network, ransomware, threat, tool, vmware, vulnerability

Der Ransomware-Dienst Ransomhouse nutzt jetzt eine komplexe Dual-Schlüssel-Verschlüsselung und automatisierte Angriffe auf VMware ESXi.Sicherheitsexperten haben kürzlich festgestellt, dass die Ransomware-Gruppe Jolly Scorpius ihren RaaS-(Ransomware as a Service)-Dienst Ransomhouse massiv verbessert hat. Wie das Threat-Intelligence-Team von Palo Alto Networks berichtet, nutzt die Gruppe jetzt ein fortschrittliches duales Verschlüsselungssystem.Die Angriffe basieren auf einer aktualisierten Version des Verschlüsselungs-Trojaner…