Cyber Threat Intel

This hands-on exercise sharpens skills in process and memory forensics.

• Identify the suspicious process and its associated activity
• Examine memory...

Ransomware operators continue exploiting CVE-2026-0257 in GlobalProtect VPNs months after the May 2026 patch, with intrusions reaching VMware and...

Prince of Persia surprised researchers by hosting a new C2 server on U.S. soil in August 2026 for the first time since 2016, despite going dark after...

Large language models are increasingly applied in Cyber Threat Intelligence to analyse security data and support threat report interpretation. This 2026 survey by A Ekelhart underscores their expanding role for CTI teams.

If ShinyHunters' claims hold, the stolen FBI employee data creates a lasting counterintelligence vulnerability. Adversaries could use home addresses,...

• Attackers exploit high-severity flaws in an average of three days, with 71% landing within a week.
• Nearly 80% of exploited flaws are remote,...

Attackers used the weak password 'Password1' to access personal details of thousands of children and families in Wales, leading the ICO to issue...

A ransomware attack on third-party billing provider Express Billing Systems exposed names, SSNs, diagnoses, and service details of roughly 1,500...

• Columbia, South Carolina (pop. 150k) responding to cyberattack that disabled MyColaSC utility payments, GIS, and animal services
• SLED now leads...

Switzerland's Federal Data Protection Commissioner has opened a formal investigation into PK Softech after a cyberattack stole data from multiple...

Enterprise defenses face simultaneous pressure from actively exploited flaws, ransomware targeting backups, and unauthorized AI agent access.

-...

Columbia took multiple resident-facing systems offline after IT staff detected suspicious activity around October 21.

• Disrupted services: MyColaSC...

• Overlord RAT spreads via phishing emails impersonating Brazilian notary offices with valid CNPJ numbers and eight fraudulent domains
• Victims...

A single ransomware attack on Curaçao's Tax and Customs Administration in July 2025 took services offline for over a week. The Joint Court of Justice,...

Teams can cut through advisory noise by focusing on exploitation status and critical ratings first.

• CISA KEV entries demand immediate action,...

Threat intelligence adds context on attackers' motives, methods, and indicators to convert raw data into proactive defense.

• Prioritizes real risks:...

Ransomware attacks rose 23% from Q2, reaching 3,260 total events.

• Healthcare suffered a record 317 attacks (9.72% share), up from its 7.5%...

CVE-2026-96951 is a Windows Shell security feature bypass already exploited in the wild before the October 13, 2026 Patch Tuesday fix.

• User...

Attackers now operate at machine speed while defenders move at organizational speed, turning rapid patching into the decisive factor.

• Mythos-level...

A Ridgeway Pharmacy breach via its third-party website exposed names, prescriptions, health and insurance data for 258,920 individuals, with some...