T1003 - OS Credential Dumping

BlueMoon Exploit Kit Targeting Chrome and Windows by Multiple State Actors

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

SHADOW-EARTH-053 Exploits Microsoft Exchange Vulnerabilities in Asia

Operation Highland: Velvet Ant's Decade-Long Espionage Campaign

Red Heron Exploits Gitea RCE Flaw in Multinational Campaign

Chinese Cyber Actors Exploit Vulnerabilities via Integrity Technology Group

AI-Driven Exploitation of PaperCut Vulnerabilities Compromises 440 Servers Globally

Storm-1175 Deploys New StormEncryptor Ransomware Targeting N-central Systems

Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors

North Korean Hackers Deploy Mac Backdoors via Fake Job Tests Targeting IT Firms

Malware Spread via Fake Polymarket Trading Bot Targets DeFi Developers

Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

TeamPCP's CanisterWorm Targets Iranian Systems with Destructive Kubernetes Wiper

Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure

NightEagle APT Targets Russian Enterprises with Advanced Malware

Chinese APT CL-STA-1062 Deploys TinyRCT Backdoor Against Southeast Asian Targets

Russia's AI-Driven Cyber Espionage Targets Ukraine and Europe

MuddyWater Targets U.S. Entities Amid Geopolitical Tensions

APT28 Exploits Vulnerable Routers for Global DNS Hijacking Campaign

Red Menshen APT Uses BPFdoor for Long-Term Espionage in Telecom Networks

APT41 Exploits Cloud Services with New Zero-Detection ELF Backdoor

Ukraine's Energy Infrastructure Under Cyber and Physical Attack

THORChain Hit by $10.7 Million Theft Due to Unapplied Patch

Cyclops Blink Malware Targets Cisco Firewall Devices

Surge in Blockchain Dead Drops Driven by AI Models

Malicious NuGet Packages Target Chinese Developers, Steal Sensitive Data

Bitget Suffers $388M Hack Attributed to North Korean Lazarus Group

Fake Bahrain Civil Defense App Distributes Advanced Surveillance Malware

North Korean Hackers Utilize EtherHiding for Cryptocurrency Theft

Iranian APT MuddyWater Uses Chaos Ransomware as a False Flag for Espionage

China-Nexus Hackers Target Hospitals and Governments with TriBack Loader Malware

Malaysia's Cyber Threat Landscape Faces Significant Transformation Amid Digital Expansion

Operation Double Barrel: State-Sponsored Exploitation of Korean Financial Software

State Actors Target Water Systems Amid Weak Cyber Defenses

Bitget Suffers $388 Million Hack, Customer Withdrawals Resumed

Critical CVE-2026-0768 Exploited in Langflow Attacks

UAT-10147 Cybercrime Group Integrates AI for Large-Scale Attacks

FortiBleed Campaign Compromises 75,000+ Fortinet Devices Globally

Supply Chain Attack: GHAPPIER Loader Exploits npm Trusted Publishing

Glassworm Malware Targets React Native npm Packages in Supply Chain Attack

Multiple CVEs Exploited in Cybersecurity Threats: September 2026

North Korean Malware Targets Crypto Developers via NPM Packages

FancyBear Server Leak Exposes NATO Targets and Stolen Credentials

Kgb Rat Windows Fud Trojan

575 ransomware attacks

Mandiant attributes the attacks

Google warns suspected China-linked hackers could exploit BeyondTrust flaw | Межа

CVE-2026-102764: BeyondTrust Zero

KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims

n0n extortion claims target 38 global maritime and logistics organizations, raising port data ...

Companies that have fallen victim to espionage on the geopolitical stage

6 Ways To Prevent Privilege Escalation Attacks

Maritime Cyber Attack: 38 Firms Face Leak

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

Dark Web Market For EDR Killers

IVANTI CONNECT SECURE ZERO

Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero

Ivanti Urges Emergency Patching as Connect Secure Zero

Netflix's AI Gone Wild: Why the Hugging Face Hack Matters

FBI seizes Chinese hacking tools -

More at Rapid7.com

Cyber Security News on X: " Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw ...

CVE Alert: CVE-2026-108863 – Katanemo

Joint alert details Chinese cyber activity linked to Integrity Technology Group

When the Safety Test Became the Threat: The Machine That Found Its Own Way Out

GTA VI leaker threatens to dump a full playable build

Anthropic Tightens Claude's Web Access After AI Models Exploit Vulnerabilities, Bypass ...

Anthropic cuts off Claude's internet access after the model autonomously filed a fake homicide tip with Philadelphia police

Critical Telegram Desktop bug: hackers can steal accounts with a single click

"Un modelo de OpenAI hackeó a Hugging Face, y es el primer ciberataque autónomo de la historia"

The 2026 Cyberthreat Landscape Ten Signals Shaping Trust Collaboration And Resilient Design

Cisco Talos Warns AI Agent Swarms Can Compress Cyberattacks From Months to Hours

Conf26 Agentic Soc

'AgentCorruption' Puts AWS Environments At Risk With Single Prompt

Earth Sirrush Russia Aligned Intrusion Set 4 Years Evolving Espionage Tooling

UAC

A single prompt was enough to hijack every AI agent in an AWS account, Zenity researchers found

No EDR, no problem: how Huntress rebuilt an Akira ransomware attack from forensic leftovers

Tensorlake npm Package Compromised: A Worm With a Hostage Token That Wipes Your Machine If You Revoke It

TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential

tensorlake 0.5.144 npm Compromise Ships Mini Shai

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

The Same AI That Writes Your Code May Be the Worst Reviewer of It

PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem