1. Executive summary On 2026-07-07, CISA added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, all with confirmed evidence of active exploitation: CVE-
1. Executive summary GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel use-after-free vulnerability (CVSS 7.8 HIGH) disclosed by Nebula Security.
1. Executive summary Accenture has confirmed a security breach after a threat actor using the alias "888" claimed to have stolen approximately 35 GB
TL;DR: PhaaS domains churn faster than IOC lists can ship. We built a self-hosted MCP server that runs an OSINT pipeline from a source
1. Executive summary On 2026-07-07, the ransomware operator "dragonforce" publicly claimed a compromise of hive360.com, a UK-based employment administration and
1. Executive summary BeyondTrust has released updates for four vulnerabilities — two CRITICAL pre-authentication bypass flaws (CVE-2026-40138, CVSS 9.2; CVE-2026-40139, CVSS
1. Executive summary Threat actors are conducting a multi-stage vishing campaign that abuses Microsoft Teams voice calls to impersonate corporate IT support staff, tricking employees
1. Executive summary On 2026-07-06, the Qilin ransomware group publicly claimed Max Fordham (www.maxfordham.com), a UK-based engineering consultancy, as a victim
1. Executive summary Check Point Research (CPR) has published a detailed analysis of "Cavern," a new modular .NET command-and-control (C2) framework deployed
1. Executive summary LevelBlue researchers have disclosed QuimaRAT, a novel Java-based remote access trojan offered as a malware-as-a-service (MaaS) product targeting Windows,
1. Executive summary A phishing campaign observed from early April to mid-May 2026 abuses the OAuth 2.0 Device Authorization Grant (Device Code Flow) to
1. Executive summary Sysdig's Threat Research Team has published findings on what they believe is the first documented end-to-end ransomware operation conducted