AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential ab
#malware
共收录 420 条相关情报。
← 返回所有主题Two critical RCEs in PHP core
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos
“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities
An investigation into a threat actor bypassing AI safety controls to coordinate credential theft, VoIP fraud planning, a
Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers
Adversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed
Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)
CVE-2026-109618 · CVE-2026-109619
Categories: Threat ResearchTags: advisory, vulnerability, php
Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 20)
CVE-2026-0257
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulner
There's only so much code: the rise in vulnerability numbers
The September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities w
The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations
Key Findings Introduction Antidetect browsers conceal their users’ digital identities, enabling a single operator or sma
BRONZE SANDCASTLE deploys modified Meterpreter shells
The China-based threat group uses DLL sideloading in these attacksCategories: Threat ResearchTags: BRONZE SANDCASTLE, Me
19th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 19th October, please download our Threat Intelligence Bulle
Agents are your newest insiders. Security must move at their speed.
New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection c
Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion
No novelty required to be effectiveCategories: Threat Research, X-ops, Sophos SecOpsTags: incident response
ConnectWise Cloud Backup application abused in cross-tenant token sweep
Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tena
Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
Unit 42 details the top initial access vectors adversaries use to breach organizations, led by edge exploits, credential
AI-Powered Espionage Campaign Targets Government Linux Infrastructure
Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells,
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest T
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
CVE-2024-47575
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Ind
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tra
The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
Unit 42 dissects a cyberattack targeting a European bank's IT infrastructure, delivering concrete defense strategies to