Cyber Threat Intel

Critical UEFI flaw persists in 2026: Secure Boot trusts vulnerable older bootloaders, enabling pre-OS malware like BlackLotus.

• Downgrade attacks:...

Ransomware surging across diverse sectors—no industry spared:

• Hospitality: BlackCat/ALPHV attacks NCR Aloha PoS, causing outages for customers.
  -...

Key threats from top space CISOs (Vantor, SES, Viasat, Telesat):

• Massive Iranian attack surge: Tactics include AI-powered social engineering, fake...

Critical alert for metals/supply chain firms: 80% rise in security incidents last year, 28% of mid-market manufacturers hit. Underreporting likely...

Adobe's critical fix for CVE-2026-34621 (CVSS 8.6), a prototype pollution RCE in Acrobat/Reader.

• Exploited since Dec 2025 via malicious PDFs;...

Supply-chain alert: Critical Axios flaw (CVSS 10) turns prototype pollution in deps like qs into Request Smuggling for RCE/cloud takeovers.

• Zero...

Consumer routers rack up 217 CVEs on average (2016-2026), vs. 18 for enterprise— a 12:1 ratio.

• D-Link leads with ~500 total CVEs, 245 critical/high...

AI threat acceleration exposed: U.S. banks summoned over Anthropic AI supercharging attacks by unskilled hackers.

• Mythos uncovers thousands of...

Massive exfiltration: Hacker hit nine agencies, stealing 195M taxpayer records from SAT, 220M civil records from Mexico City, and sensitive health...

795 unique government email-password pairs exposed in breach dumps across 12 ministries, with 641 from Interior, Defence, Foreign Affairs, and...

Modern hybrid warfare uses cyber vectors like DDoS, infrastructure sabotage, and disinformation to paralyze nations pre-kinetically.

• Estonia 2007:...

• Threat actor angle: ShinyHunters claims Snowflake metrics compromised via Anodot.com, final warning to pay by Apr 14 or leak data
• Company...

AI breakthrough in vuln hunting: Anthropic's Mythos tool uncovered a serious remote code execution flaw (CVE-2026-4747) in FreeBSD's NFS, used in data...

ShinyHunters Ransomware Campaigns

• 🔥 Rockstar Games Breach: Rockstar Games confirmed a limited amount of non-material company information was...

Supply-chain alert for hardware tools:

• CPUID site hacked ~24hrs (Apr 9-10), serving trojanized CPU-Z/HWMonitor with STX RAT via malicious...

Urgent: Active zero-day exploit in Adobe Reader uses booby-trapped PDFs for fingerprinting and data theft since December 2025.

• High risks: No...

New infostealer-as-a-service 'Storm' exposes 2FA limits—rentable for $1,000/month:

• Steals passwords, session cookies, payment cards from Chrome,...

• ShinyHunters ransomware targets Marcus & Millichap, Inc. (US financial services), stealing over 30M Salesforce records with PII
• Breach dated April...

Key cybersecurity takeaways from Anthropic's accidental Claude Code leak:

• No sensitive data or credentials exposed; caused by release packaging...

Anthropic pioneers AI cyber defense from two angles:

• Claude identifies thousands of zero-day vulnerabilities, some decades old, via AI coding...