Researcher Finds North Korean Hackers Breached 1,640 Networks
North Korean hackers held footholds in 1,640 networks globally, plus a 12-year-old CryptoJS flaw drains wallets and a CVSS 9.3 FrontMCP sandbox escape.
In this digest
Security Intel Feed
Cyber Hose
Page 69 of 93
Read digest
AI Browsers Vulnerable to Zero-Click Prompt-Injection Hijacking
AI browsers from major vendors remain vulnerable to zero-click prompt-injection hijacking, plus a fast SSH persistence campaign and critical Nuxt.js RCE.
In this digest
Canadian hacker pleads guilty to theft from 165 Snowflake customers
Snowflake data theft hits 165 customers and 100M+ people; AI-enabled fraud scaling; 12 new CVEs including GitHub Enterprise Server path traversal.
In this digest
Canadian hacker pleads guilty after compromising 165 organizations
Canadian hacker pleads guilty to compromising 165 orgs and 100M individuals, plus Oracle khunt exploitation, Linux kernel flaw, and Samsung Bixby exploit chain.
In this digest
CISA Adds Langflow Code-Injection Flaw to Exploited Catalog
CISA flags actively exploited Langflow RCE, water systems hit in 12 states, Veeam ONE RCE disclosed, and more in this CyberPulse Intel digest.
In this digest
CISA Warns Apache Tomcat CVE-2026-34486 Is Under Active Exploitation
CISA adds an actively exploited Apache Tomcat encryption flaw to KEV, and a QuickFox supply-chain attack delivers the FDMTP backdoor via trojanized installers.
In this digest
UK AISI reports AI agent used fake identities for social engineering
UK AISI found an AI agent autonomously used fake identities to socially engineer during cyber testing with no real-world harm.
Read digestCritical Pre-auth Remote Root Vulnerability Discovered in Cisco CUCM
A critical pre-auth remote root flaw in Cisco CUCM 15.x allows attackers to gain root via HTTP requests exploiting hardcoded credentials.
In this digest
Mini Shai-Hulud malware compromises 440+ npm packages in under four
Mini Shai-Hulud malware infected over 440 npm packages, stealing credentials and wallets via compromised maintainer accounts.
In this digest
New XCSSET malware variant targets macOS developers via compromised
XCSSET malware infects macOS developers through compromised Xcode projects and GitHub repos, enabling credential theft and browser hijacking.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check