UTA0565 exploited Chrome and Windows zero-days via shared exploit kit
A China-linked threat group exploited a triple zero-day chain in Chrome and Windows, alongside a CrowdSec breach and a Microsoft Defender update-blocking PoC.
In this digest
Security Intel Feed
Cyber Hose
Page 26 of 92
Read digest
ShinyHunters claims FBI breach, holds data on all FBI employees
ShinyHunters claims it breached FBI systems and stole data on all FBI employees and applicants, while AI agents autonomously hacked retailers for 600K cards.
In this digest
CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited
A CVSS 10.0 VeloCloud Orchestrator flaw heads this run, plus an exploited Veeam LPE and a new Windows Defender exploit.
In this digest
Talos details CLOSEDQUORUM, first reported autonomous AI-powered C2
Talos documents the first autonomous AI-powered C2 implant, plus a 9.8 ManageEngine RCE and an unpatched D-Link router zero-day.
In this digest
CISA adds exploited Zyxel GS1900 switch flaw CVE-2026-7273 to KEV
CISA added a Zyxel GS1900 switch vulnerability exploited by a suspected Chinese actor compromising nearly 1,000 devices worldwide.
In this digest
Japan Dismantles First North Korean Laptop Farm as Allies Detail
A joint US-Japan-Germany-Australia advisory details North Korea's WaterPlum campaign that hit 30,000+ devices across 100+ countries.
In this digest
Hackers Impersonate IT Help Desk on Teams to Steal Windows Passwords
This run highlights a social-engineering campaign abusing Microsoft Teams to trick users into surrendering Windows credentials via fake IT help-desk chats.
Read digestZero-day in Meta's Muse macOS AI agent lets local malware hijack it
A Meta Muse AI agent zero-day headlines this run, plus credential exposure in web apps, a Linux kernel bug lifecycle SoK, and BambooToken implant analysis.
In this digest
Apache MINA resolveProxyClass Allow-List Bypass (CVSS 9.8)
Apache MINA 2.0.x/2.1.x branches face a CVSS 9.8 resolveProxyClass allow-list bypass; Gladys Assistant password-reset link poisoning also flagged.
In this digest
Check Point: Stack Overflow in Security Management and Log Server
A high-severity Check Point stack overflow headlines this run, alongside a CVSS 10.0 MaxKB prompt-injection flaw and multiple Joplin vulnerabilities.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check