threat-intel [Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI This virtual event focuses on the growing challenges of securing cloud assets in an era increasingly influenced by AI. Experts will explore strategies and tools for managing security across multi-cloud environments, addressing the gaps many enterprises face in protecting their cloud infrastructure. Dark Reading · 2026-11-12 Info cloudsecurityai
threat-intel [Virtual Event] Cybersecurity Outlook 2027 Cybersecurity Outlook 2027 is a virtual event focusing on predicting future cyber threats and exploring how emerging technologies, particularly AI, can bolster defenses in complex environments like multi-cloud setups. Ex… Dark Reading · 2026-12-03 Info cybersecuritythreat predictionai
vulnerability ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw This Patch Tuesday, Siemens released 17 security advisories addressing vulnerabilities in its industrial automation products, including Simatic S7-1500 CPUs, Ruggedcom devices, and various Simatic WinCC products. CISA an… SecurityWeek · 33m ago Medium GEicspatch tuesdayindustrial control systems
threat-intel The Future of AI Cryptanalysis Matthew Green warns that AI could rapidly surpass human capabilities in breaking modern cryptographic systems. Schneier on Security · 1h ago Info cryptographyaithreat intelligence
policy U.K. Sanctions Cryptomus for RU Money Laundering The United Kingdom has issued economic sanctions against Cryptomus, a cryptocurrency platform, for facilitating payments linked to Russian crime activities, including ransomware, narcotics, and cybercrime services. The p… Krebs on Security · 1h ago Low CAUKWEcryptocurrencysanctionsmoney laundering
vulnerability Cyberattack on Connected Fridges in France Hackers gained control of temperature regulation software in older Danfoss refrigerators in France, forcing them to overheat. Schneier on Security · 1h ago Medium FRiotvulnerabilityfridge
malware Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations Cisco Talos, in collaboration with Recorded Future’s Insikt Group, has uncovered a campaign targeting government organizations across the Commonwealth of Independent States (CIS) led by the UAT-6275 threat actor. The inv… Cisco Talos · 1h ago CriticalCVSS 9.8KEVEPSS 100% CVE-2025-8088CVE-2025-25257ARAZBEcisco talosuat-6275silent lynx
phishing Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals Microsoft has taken legal action to shut down three major phishing platforms – YAM Store, CoGUI, and Iron Man – used by Chinese cybercriminals to send hundreds of millions of malicious messages targeting over 75,000 orga… The Record · 2h ago Medium JAphishingcybercrimeinfrastructure
threat-intel Russian travel booking platform suspends reservations after cyberattack Russian travel booking platform Anywayanyday has temporarily suspended new bookings following a cyberattack on its IT infrastructure. The incident comes amid broader disruptions in Russia’s aviation industry due to drone… The Record · 2h ago Info RUtravel bookingcyberattackrussian aviation
phishing Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages Microsoft and Health-ISAC have taken down YAM Store, CoGUI, and Iron Man – three components of a Chinese-language cybercrime marketplace – after an investigation into phishing campaigns targeting Japan and beyond. The di… SecurityWeek · 2h ago Medium JPUSphishingcybercrimeaccess broker
vulnerability CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records CISA issued a warning about a new zero-day vulnerability in Ivanti’s Connect Secure VPN product, which is currently being exploited in the wild. Threat actors are leveraging this flaw for credential theft, data exfiltrat… The Record · 3h ago HighCVSS 8.8Exploited3 sources CVE-2026-104935CVE-2026-96951zero-daypatch tuesdaycredential theft
threat-intel Congressional probe faults Match Group for failing to rein in dating app scams A congressional investigation found that Match Group, owner of dating apps like Tinder and Hinge, failed to adequately address the growing problem of romance scams on its platforms. Match Group has implemented new AI mod… The Record · 3h ago Low CHUNromance scamsaifraud
vulnerability curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution A vulnerability in curl (versions 8.12.0 through 8.22.0) allows a malicious server to trigger code execution on the client machine during HTTP/2 uploads. The vulnerability was discovered by Luna Tong of Anthropic using t… The Hacker News · 3h ago Medium CVE-2026-92392http2use-after-freecode-execution
threat-intel How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team Deepfake audio and video attacks are becoming increasingly common, posing a significant threat to organizations. The drill focuses on mapping impersonators and call targets, establishing clear verification rules (like us… The Hacker News · 3h ago Info deepfakeaudiovideo
vulnerability Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days A security firm, XBOW, used OpenAI's GPT-5.6 AI model to build a $250,000 Chrome full-chain exploit in just six days. Google has since fixed the bugs, and the exploit was the first full-chain reward under the 2026 Chrome… The Hacker News · 4h ago HighCVSS 7.5 CVE-2026-85045chromeexploitai
malware Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks A new Android banking Trojan, Hirudo, is targeting Indonesian banking apps and spreading through fake web pages mimicking legitimate app stores. ThreatFabric researchers highlighted the malware's sophisticated techniques… The Hacker News · 4h ago Medium CHINMEandroidbanking trojanmalware
vulnerability An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part. An AI pentesting agent discovered a critical authentication bypass on a major insurer's production website. The key challenge wasn't the flaw itself, but rather the extensive web context and years of operational experien… The Hacker News · 4h ago Medium authenticationpentestingai
policy US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms US law enforcement has arrested two Americans involved in a scheme to facilitate North Korean IT workers (ITWs) obtaining remote employment at US companies. The FBI warns that ITWs are increasingly using US nationals to… SecurityWeek · 4h ago Low2 sources CHKPnorth koreanlaptop farmsit workers
policy OpenAI engineer charged after boardroom bug found wrapped in toilet paper An OpenAI engineer, Abdulrahman Alfozan, has been charged with attempting to install a recording device in the company’s executive conference room to intercept communications. The incident highlights concerns about insid… The Register · 5h ago Low SAinsider threatsurveillancedata security
vulnerability AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host A vulnerability in Linux's vhost subsystem allows a local user to gain root access and potentially compromise a host system. Tencent Zhuque Lab released a fix on August 3, and several vendors, including Red Hat, Amazon,… The Hacker News · 8h ago HighCVSS 8.8 CVE-2026-74580vhostkernelroot
