Cyber Threat Intelligence

FortiBleed targets 430K FortiGate firewalls; AI agent skill bypasses scanners; DPRK macOS backdoor; data leaks hit finance, gov, healthcare globally.

Multiple critical data exposures hit healthcare, government, and military sectors globally. New research reveals cloud bucket hijacking, a 29-year-old Squid proxy flaw, and parallel ransomware intrusi

Threat actors target France, Indonesia, and US in 92 critical data exposures. INC RANSOM hits Mexico auto sector; multiple French govt, retail, and e-learning entities breached.

Threat actors Worldleaks and cabyc drive a high-volume day with 102 critical exposures. A 2M payment card sale, KPMG Australia breach, and widespread credential attacks dominate the landscape.

Threat actor cabyc claims 20+ breaches; FortiBleed hits 86K FortiGate devices; AutoJack exploit turns AI agents into RCE vectors; SocGholish disrupted.

INC ransomware claims 830+ victims since 2023; DragonForce abuses Microsoft Teams for C2; Evil Corp's SocGholish disrupted; 40 critical data exposures tracked.

39 critical exposures today. ShinyHunters claims Victoria's Secret & eBay breaches. TEAM R99 HACKERS hits US local gov. Microsoft warns of RoguePlanet Defender zero-day. Crypto clipper malware uses To

61 critical data exposures today, with Mexico hit by 12 events including government and telecom breaches. Qilin and ShinyHunters lead actor activity. Fortinet and Vertex AI flaws under active exploita

Multiple threat actors target telecoms, retailers, and governments globally. ShinyHunters claims breaches at Canadian firms. PAN-OS VPN flaw actively exploited. LiteLLM and Copilot vulnerabilities dis

Today's brief covers 50 critical exposures including IRLeaks' Iran campaigns, a 62M user breach, and widespread attacks on US, UK, and Asian targets.

47 critical exposures, 116 events tracked. Nigerian govt, Israeli data, and US SSA claims lead. Splunk CVE-2026-20253 critical. Anthropic models disabled.

ShinyHunters exploits unpatched Oracle flaw to extort universities. EXILIADOS #555 claims multiple breaches across Mexico and Argentina. Novo Nordisk confirms breach. Conti member pleads guilty.

ShinyHunters targets universities via CVE-2026-35273. Qilin and Elite Squad lead 218 tracked events. Critical data exposures hit France, Indonesia, US. New BitLocker bypass emerges.

CISA orders agencies to patch critical vulns in 3 days. Microsoft ships record 206 fixes. Data breaches hit energy regulator, eToro, Dynatrace, and multiple Indonesian govt agencies. Active exploitati

138 events tracked; 74 critical exposures. Major breaches alleged at Wise, Coinbase, Robinhood, Ochre Health, and multiple government agencies. Patch Tuesday record with 206 Microsoft vulns.

LauraAllen claims Coinbase, Nissan, and Crypto Forex Canada breaches. Israel faces 34 events. Check Point VPN flaw exploited. NSO Group contempt filing.

86 critical exposures today; India govt portals, Vietnam citizen DB, Mexico hospitals targeted. NoName057 leads DDoS. Healthcare, govt sectors under pressure.

221 events tracked; Dumpdump and BABAYO EROR SYSTEM lead activity. Critical data exposures hit India, Indonesia, Mexico. Miasma worm targets Microsoft GitHub; ChatGPT Lockdown Mode released.

Dumpdump leads 203 events; Qilin, Dark Storm active. UNC3753 vishing campaign targets US law firms. Critical PAN-OS bug exploited. DentaQuest breach hits 2.6M.

Actor Aquahack claims 66 breaches across 20+ countries. AI agent supply chain and insider threats highlighted by Microsoft and DTEX. Cisco patches exploited SSRF in Unified CM.

Actor elazo2 claims six bank breaches across Chile and Bulgaria; Beregini alleges a Ukraine General Staff leak; HTTP/2 Bomb DoS downs major web servers.

NoName057(16) led 15 DDoS claims as 51 alleged breaches hit the US, Italy and Indonesia, while a worm tainted 32 Red Hat npm packages.

pol4rity breaches Ukraine's Supreme Court and other state bodies; Rupert hits 20 targets worldwide as critical Windows and Linux flaws are exploited.

Skull1172 claims breaches of a dozen-plus Colombian state bodies as the country votes, while Indonesian government sites are hit, among 137 daily events.

OpsShadowStrike claims breaches at two Michigan universities and US banks; NoName057(16) floods Italian sites; PAN-OS bug CVE-2026-0257 actively exploited.

Rupert and Moelester drove nearly half of 64 alleged breach and leak claims, from Home Depot Canada to Argentine courts, as a Gogs RCE zero-day landed.

Carnival confirmed 6M records exposed; threat actors revived a critical FortiClient EMS flaw; a Gitea bug exposed 30K deployments to container pulls.

Databasehooligan drove 36 of 148 tracked incidents in a global data-sale spree, while CrowdStrike disrupted GlassWorm and AI coding-agent attacks spread.

A 178-incident day: NoName057(16) drives DDoS while alleged breaches hit NASA, Santander, Ukraine's defense ministry and Indonesian government bodies.

Databasehooligan claimed 27 breaches across Europe and the Americas as a Ghost CMS flaw (CVE-2026-26980) was exploited to hijack 700+ sites.