Technology ❯ Information Security

Threat Intelligence

Incident Response Cyber Threats Malware Attack Vectors Hacking Techniques Malware Analysis Indicators of Compromise Vulnerability Management Active Exploitation Security Research

GitLab Issues Emergency Patch for Critical Unauthenticated GraphQL Flaw

The out-of-schedule update shields self‑managed servers from a GraphQL directive that can modify or delete public projects.

Cl0p Claims Data Theft From Nearly 50 Companies as Major Firms Open Investigations

Wall Street Firms Hit by AI‑Enabled Voice‑Phishing Campaign

Microsoft Says Russian-Linked Hackers Are Hijacking Hotel and Airport Wi‑Fi to Steal Logins

U.S. Warns Iran-Linked Hackers Are Altering PLCs From Rockwell, Siemens and Schneider

Attackers Exploit Critical ServiceNow RCE Flaw

CISA Orders Federal Patch for Actively Exploited Fortinet FortiSandbox Flaws

Icarus Extortion Group Used Klue OAuth Breach to Steal Salesforce CRM Data

Microsoft Threatens Legal Action After Public Release of Six Windows Zero‑Days

JINX-0164 Uses Fake Recruiter Lures to Deliver macOS Malware to Crypto Developers

CrowdStrike and Google Disrupt Glassworm Botnet Targeting Developers

Darktrace Uncovers APAC Espionage Using Fake Apple/Yahoo CDNs and Updated FDMTP Backdoor

Google Says It Stopped an AI-Assisted Zero-Day Aimed at 2FA in Open-Source Tool

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

Trellix Says Hackers Accessed Part of Its Source Code Repository

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

CrowdStrike Extends Real-Time Cloud Detection to Google Cloud

Sweden Says Pro-Russian Hackers Tried to Sabotage Heating Plant in 2025

Nginx UI Auth Bypass Now Actively Exploited for Full Server Takeover

Google Says UNC6783 Is Hitting BPO Helpdesks With Okta Phishing