1. Executive summary A new phishing-as-a-service (PhaaS) platform dubbed "Forg365" has been identified by ZeroBEC researchers, specifically targeting Microsoft 365 accounts
1. Executive summary Microsoft has released Microsoft Malware Protection Engine version 1.1.26060.3008, patching CVE-2026-50656 — a local elevation of privilege zero-day
1. Executive summary Infoblox has disclosed a threat actor dubbed "Lurking Lizard" operating an end-to-end malicious residential proxy business using trojanized installers
Date: July 8, 2026 Subject: Analysis of the Accenture 35GB data breach claim Classification: Open-source intelligence report Executive Summary A threat actor using the alias
1. Executive summary On 2026-07-07, CISA added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, all with confirmed evidence of active exploitation: CVE-
1. Executive summary GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel use-after-free vulnerability (CVSS 7.8 HIGH) disclosed by Nebula Security.
1. Executive summary Accenture has confirmed a security breach after a threat actor using the alias "888" claimed to have stolen approximately 35 GB
TL;DR: PhaaS domains churn faster than IOC lists can ship. We built a self-hosted MCP server that runs an OSINT pipeline from a source
1. Executive summary On 2026-07-07, the ransomware operator "dragonforce" publicly claimed a compromise of hive360.com, a UK-based employment administration and
1. Executive summary BeyondTrust has released updates for four vulnerabilities — two CRITICAL pre-authentication bypass flaws (CVE-2026-40138, CVSS 9.2; CVE-2026-40139, CVSS
1. Executive summary Threat actors are conducting a multi-stage vishing campaign that abuses Microsoft Teams voice calls to impersonate corporate IT support staff, tricking employees
1. Executive summary On 2026-07-06, the Qilin ransomware group publicly claimed Max Fordham (www.maxfordham.com), a UK-based engineering consultancy, as a victim