Cyber Threat Intel

Ransomware Attacks

• 🔥 Foxconn Confirmation: Foxconn confirmed a cyberattack hit North American factories, with workers reporting slow recovery...

Heightened OT risks trend: Industrial controls exposed via critical flaws and surging attacks.

• ABB RCE: CVSS 9.8 vulnerability in controllers,...

Key warnings on skimping cybersecurity:

• Basic antivirus won't protect against ransomware
• Don't swap managed security for cheap AV
• Data breaches cost small firms over $100k – layer up to mitigate.

Enterprise teams face a patch-order crunch with May's 120 flaws—no zero-days, but high-impact risks demand quick triage to dodge outages.

• Netlogon...

AndroX is a new web-based tool for detecting, analyzing, and validating Android vulnerabilities in real-world conditions:

• Automated scanning via...

Ransomware disrupts manufacturing: North America factories, incl. Wisconsin, halted by cyberattack from Nitrogen group claiming 8TB stolen data.
-...

Urgent Patch Tuesday alert: Microsoft addressed a record 118+ vulnerabilities across Windows.

• Two pre-auth RCEs in core Windows services
• Hyper-V guest-to-host escape
• AI-discovered bugs analyzed

Patch immediately – exploitation risks are high.

Depthfirst's specialized AI finds more severe bugs missed by Mythos – like a 2008 NGINX flaw hitting most websites – for 1/10th the cost.

• Uncovers...

Iranian hacktivist proxy emerged Dec 2023 as pro-Palestinian group, confirmed as MOIS front. Targets Israel via spear-phishing (fake app SMS) and...

SAP's urgent May patches highlight supply chain risks – apply Note #3747787 now for manipulated npm packages stealing data via CAP model.

• 17 notes...

Israeli surveillance systems, sold to governments, expose Starlink users by methods that avoid hacking the network or intercepting traffic—privacy nightmare revealed in sales docs.

Hackers are using AI-written code to spread malware hidden in fake downloads for game mods, AI tools, and drivers, as uncovered by McAfee Labs in a widespread campaign.

Key threat highlights:

• Fast-spreading, complex phishing installs RATs
• Steals credentials from victims
• Enables long-term, persistent access to corporate networks
  Global campaign hits corps hard—email and endpoint defenses critical.

Non-human identities (NHIs) like service accounts, API keys, and AI agents form the largest ungoverned attack surface.

• Outnumber humans massively,...

Ransomware threats are escalating across critical sectors:

• Supply chain chaos: Nitrogen stole 8TB from Foxconn, including Apple/Dell data,...

Massive update: Microsoft patched 137 vulnerabilities, including 13 critical ones like Azure flaws (CVE-2026-33109, CVE-2026-42823) and Dynamics 365's...

Massive IoT breach: Over 1 million baby monitors and security cameras from 300+ white-label brands vulnerable via Meari flaws, exposing home images...

Massive OSS supply-chain hit: Hundreds of packages infected, including TanStack (12M+ weekly downloads), UiPath, and MistralAI, embedding...

Microsoft's May 2026 Patch Tuesday for Windows 10/11 fixes several critical flaws and many important ones, with 120 vulnerabilities patched across all services and products – no zero-days.

Critical OIDC abuse case study reveals how a flaw in Azure DevOps enabled attackers to take over production cloud deployments.

• Now-patched...