1. Executive summary SideCopy, a Pakistan-origin APT group tracked as MITRE G1008 (aka TAG-140, overlapping with the Transparent Tribe cluster), has expanded its targeting
1. Executive summary Huntress reports two incidents (July and September 2026) in which a new ransomware variant dubbed Settra, first observed in June 2026, was deployed
1. Executive summary This item is a weekly intelligence digest rather than a single incident, and its actionable core is a patch cycle: Oracle's
1. Executive summary US Treasury Secretary Scott Bessent has stated publicly that corporate leadership, not AI systems, will be held legally accountable when AI agents commit
1. Executive summary An active malware campaign distributes fake LastPass installer packages that deliver a kernel-level component capable of disabling 145 security products, followed by
1. Executive summary Securonix Threat Research (researchers Akshay Gaikwad and Aaron Beardslee) has disclosed TASK#STOMP, a campaign delivering a PowerShell backdoor for Windows hosts that
1. Executive summary A third China-nexus threat actor, tracked by Volexity as UTA0565, used the same chained zero-day exploit kit as the two actors
1. Executive summary A joint advisory from cybersecurity and intelligence agencies in Japan, the US, Australia and Germany reports that the North Korean Contagious Interview campaign,
1. Executive summary A fake LastPass Authenticator installer distributed from a GitHub page impersonating LastPass installs a Windows kernel driver, named Alinubx.sys by researchers, that
1. Executive summary CVE-2026-7273 is a stack-based buffer overflow (CWE-121) in the CGI program of Zyxel GS1900 series switches. A LAN-based,
1. Executive summary Malwarebytes identified a network of more than 100 subscription websites built on the same commercial website starter kit and linked through closely related
1. Executive summary The Rust Project's crates.io team and security response working group have warned that attackers are targeting Rust Project members and