2026-02-19 10:30 UTC
Other
Other
PromptSpy ushers in the era of Android threats using GenAI
ESET researchers discover PromptSpy, the first known Android malware to abuse generative AI in its execution flow
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 5,236 matching records.
AUTO-POLL // 2026-10-20 18:25 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P1 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 20
RANSOMWARE
P1
COOL // 48 ARTICLES
MON
Oct 19
RANSOMWARE
P3
COOL // 51 ARTICLES
SUN
Oct 18
RANSOMWARE
P2
COOL // 8 ARTICLES
SAT
Oct 17
ACTIVE EXPLOITATION
P4
COOL // 12 ARTICLES
FRI
Oct 16
RANSOMWARE
P8
COOL // 56 ARTICLES
THU
Oct 15
ACTIVE EXPLOITATION
P7
COOL // 87 ARTICLES
WED
Oct 14
RANSOMWARE
P8
COOL // 74 ARTICLES
2026-02-19 10:29 UTC
Other
Other
Beyond Tax Returns: How Shared Malware Infrastructure Scales Brand Abuse In Indonesia
It’s tax season in Indonesia and fraudsters are observed to be ramping up the fraud campaign involving fake Coretax apps, but behind it lies an industrialized MaaS infrastructure ready to strike anywhere.
P0
2026-02-19 07:21 UTC
Other
Other
Is Poshmark safe? How to buy and sell without getting scammed
Like any other marketplace, the social commerce platform has its share of red flags. It pays to know what to look for so you can shop or sell without headaches.
P0
2026-02-19 06:00 UTC
Security Journalism
Security Journalism
Hiding in Plain Sight with App Domain Manager Injection
Uncover how attackers use App Domain Manager injection to run code inside trusted .NET apps by tweaking config files and bypassing application controls. Learn key strategies to detect and stop these attacks.
P0
2026-02-17 10:00 UTC
Other
Other
Is it OK to let your children post selfies online?
When it comes to our children’s digital lives, prohibition rarely works. It’s our responsibility to help them build a healthy relationship with tech.
P0
2026-02-16 06:00 UTC
Security Journalism
Security Journalism
A New RAT and a Hands-on-Keyboard Intrusion
ClickFix infection deploys Matanbuchus 3.0 loader and drops a new RAT that we’ve dubbed AstarionRAT. We break down the layers and the hands-on intrusion that followed.
P0
2026-02-12 10:00 UTC
Other
Other
Naming and shaming: How ransomware groups tighten the screws on victims
When corporate data is exposed on a dedicated leak site, the consequences linger long after the attack fades from the news cycle
P15
2026-02-12 06:00 UTC
Security Journalism
Security Journalism
The Identity Breach You Didn’t Know You Had: Google Workspace
Most Google Workspace breaches go undetected for weeks. See how attackers exploit misconfigured permissions and what to look for before it is too late.
P0
2026-02-11 15:00 UTC
Security Journalism
Security Journalism
Employee Monitoring and SimpleHelp Software Abused in | Huntress
Huntress uncovers ransomware operations abusing employee monitoring software and SimpleHelp RMM for persistence, and ransomware deployment.
P15
2026-02-10 10:00 UTC
Other
Other
Taxing times: Top IRS scams to look out for in 2026
It’s time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy.
P0
2026-02-08 06:00 UTC
Security Journalism
Security Journalism
Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)
Huntress has observed active exploitation of a deserialization and remote code execution against the SolarWinds Web Help Desk software (CVE-2025-26399).
P20
2026-02-06 16:22 UTC
Other
Other
P5
2026-02-05 15:00 UTC
Security Journalism
Security Journalism
Windows ProjFS Internals: A Technical Deep Dive | Huntress
Huntress uncovers the mechanics of the Windows Projected File System. Explore the ProjFS driver, virtualization roots, and the PowerShell commands.
P0
2026-02-04 15:00 UTC
Security Journalism
Security Journalism
They Got In Through SonicWall. Then They Tried to Kill | Huntress
Huntress responded to a 2026 intrusion using compromised SonicWall VPN credentials and a revoked EnCase forensic driver to terminate EDR processes via BYOVD.
P0
2026-02-04 10:00 UTC
Other
Other
OfferUp scammers are out in force: Here’s what you should know
The mobile marketplace app has a growing number of users, but not all of them are genuine. Watch out for these common scams.
P0
2026-02-04 07:11 UTC
Other
Other
Shaping Shadows: Breaking Down New ShadowSyndicate Methods and Infrastructure
ShadowSyndicate levels up by developing new tactics, establishing additional SSH fingerprints and involving more servers.
P0
2026-02-03 06:01 UTC
Other
Other
AI, Explain Yourself: Why Is Explainable AI (XAI) Becoming Critical for Cybersecurity?
AI knows everything, but should we trust it blindly? Here’s where XAI becomes important, by helping to keep AI in check and maintaining transparency, trust, and a true risk picture in cybersecurity.
P0
2026-02-02 15:30 UTC
Government
Government
Cyber Brief 26-02 - January 2026
Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
P0
2026-02-02 10:00 UTC
Other
Other
A slippery slope: Beware of Winter Olympics scams and other cyberthreats
It’s snow joke – sporting events are a big draw for cybercriminals. Make sure you’re not on the losing side by following these best practices.
P0
2026-02-02 05:00 UTC
Security Journalism
Security Journalism
Reduce Alert Fatigue Like a Huntress Cybersecurity Pro
Deal with alert fatigue like a pro. Learn practical tips from Huntress' SOC on managing overwhelming alerts, preventing burnout, and focusing on real threats.
P0
2026-01-30 15:20 UTC
Other
Other
This month in security with Tony Anscombe – January 2026 edition
The trends from January offer useful clues about the risks and priorities that security teams are likely to contend with throughout the year
P0
2026-01-30 10:28 UTC
Other
Other
DynoWiper update: Technical analysis and attribution
ESET researchers present technical details on a recent data destruction incident affecting a company in Poland’s energy sector
P0
2026-01-30 09:09 UTC
Government
Government
2026-001: Critical vulnerabilities in Ivanti EPMM
On 29 January 2026, Ivanti released a security advisory addressing two critical vulnerabilities in their EPMM products. An attacker could exploit those flaws to achieve unauthenticated remote code execution on the vulnerable device. One of these vulnerabilities have been exploited in a limited number of cases.
P15
2026-01-30 00:00 UTC
Government
Government
[MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile (30 janvier 2026)
[Mise à jour du 09 février 2026] Le 6 février 2026, Ivanti a mis à disposition des scripts RPM de détection d'indicateurs de compromission, à utiliser en fonction de la version d'EPMM installée. L'éditeur a également mis son guide d'analyse à jour (cf. section Documentation). [Mise à jour du 02...
P0
2026-01-29 15:00 UTC
Security Journalism
Security Journalism
The (!FALSE) Pattern | Huntress
SOAPHound's LDAP query (!soaphound=*) never appears in Event 1644 logs, but it transforms into (! (FALSE)) through LDAP optimization. Understanding this transformation reveals a unique detection signature that most defenders have never seen.
P0
2026-01-28 09:59 UTC
Other
Other
Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan
ESET researchers discover an Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation
P0
2026-01-27 17:35 UTC
Other
Other
Introducing CloudCheck: Comprehensive Cloud Provider Detection
An overhaul of BBOT's cloud detection
P0
2026-01-27 16:59 UTC
Vendor Research
Vendor Research
New Android Theft Protection Feature Updates: Smarter, Stronger
Posted by Nataliya Stanetsky, Fabricio Ferracioli, Elliot Sisteron, Irene Ang of the Android Security Team Phone theft is more than just losing a device; it's a form of financial fraud that can leave you suddenly vulnerable to personal data and financial theft. That’s why we're committed to providing multi-layered defenses that help protect you before, during, and after a theft attempt. Today, we're announcing a powerful set of theft protection feature updates that build on our existing protect…
P0
2026-01-27 12:00 UTC
Government
Government
Celebrating Data Privacy Week with NIST’s Privacy Engineering Program
Grab your party hats – it’s Data Privacy Week! Data Privacy Week is a global initiative led by the National Cybersecurity Alliance to spread awareness about online privacy and empower individuals and businesses to respect privacy, safeguard data, and enable trust. In celebration of this week, the NIST Privacy Engineering Program is reflecting on recent work and looking ahead to what’s coming in the new year. Throughout 2026, we plan to continue collaborating with our privacy stakeholder communi…
P0
2026-01-27 10:00 UTC
Other
Other
Drowning in spam or scam emails? Here’s probably why
Has your inbox recently been deluged with unwanted and even outright malicious messages? Here are 10 possible reasons – and how to stem the tide.
P0