Technology ❯ Information Security

Threat Intelligence

Incident Response Attack Vectors Malware Cyber Threats Malware Analysis Hacking Techniques Vulnerability Management Indicators of Compromise Microsoft Vulnerabilities Active Exploitation Malware Development Exploitation Tracking Real-time Monitoring Exploitation Techniques Proactive Defense Mandiant Exploitation Risks Data Protection Malware Types AI in Cybersecurity Hacker Groups Vulnerability Disclosure Botnets Email Security Microsoft Threat Intelligence Center Attack Campaigns Cyber Attacks Mercenary Spyware eCrime Extortion Groups Malware Campaigns Social Engineering Exploit Code Hacking Groups Exploits Known Exploited Vulnerabilities Ransomware Malicious Actors Google GTIG Zero-Day Exploits Phishing Telecom Security Malicious Activities Vulnerability Tracking Security Research Zero-Day Vulnerabilities Security Tools AI Threats Incident Analysis

Icarus Extortion Group Used Klue OAuth Breach to Steal Salesforce CRM Data

Investigators say attackers used a dormant integration credential to harvest OAuth tokens to access then exfiltrate customer Salesforce CRM records.

Microsoft Threatens Legal Action After Public Release of Six Windows Zero‑Days

JINX-0164 Uses Fake Recruiter Lures to Deliver macOS Malware to Crypto Developers

CrowdStrike and Google Disrupt Glassworm Botnet Targeting Developers

Darktrace Uncovers APAC Espionage Using Fake Apple/Yahoo CDNs and Updated FDMTP Backdoor

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

Trellix Says Hackers Accessed Part of Its Source Code Repository

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Sweden Says Pro-Russian Hackers Tried to Sabotage Heating Plant in 2025

Nginx UI Auth Bypass Now Actively Exploited for Full Server Takeover

Google Says UNC6783 Is Hitting BPO Helpdesks With Okta Phishing

Microsoft Links China-Linked Storm-1175 to Fast Zero-Day Exploits in Medusa Ransomware Campaigns

Flare Uncovers 'SSHStalker' Linux Botnet Using IRC Control and 2009-Era Exploits

Match Group Investigates ShinyHunters Leak Claim Linked to Okta SSO Attack

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

Cisco Patches ISE File-Read Flaw After Public Exploit

FBI Warns Deepfake 'Proof‑of‑Life' Images Are Fueling Virtual Kidnapping Scams

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

CISA Adds Oracle Identity Manager RCE to KEV, Citing Active Exploitation and Setting Dec. 12 Deadline

WrtHug Campaign Hijacks About 50,000 ASUS Routers Worldwide