Russia Hacked Routers to Steal Microsoft Office Tokens
Hackers linked to Russia’s military intelligence units are using known flaws in older Internet routers to mass harvest authentication...
intelligence
Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed
Threat actors are exploiting a maximum-severity security flaw in Flowise, an open-source artificial intelligence (AI) platform, according to new findings...
UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack
Ravie LakshmananApr 03, 2026Threat Intelligence / Malware The maintainer of the Axios npm package has confirmed that the supply chain compromise...
ConductorOne Extends Reach of Identity Governance to AI
ConductorOne has extended the reach of its identity governance platform to artificial intelligence (AI) tools, agents and integrations based...
Italian spyware vendor creates Fake WhatsApp app, targeting 200 users
Italian spyware vendor creates Fake WhatsApp app, targeting 200 users Pierluigi Paganini April 02, 2026 WhatsApp blocked a fake app...
Google links Axios npm supply chain attack to North Korea-linked APT UNC1069
Google links Axios npm supply chain attack to North Korea-linked APT UNC1069 Pierluigi Paganini April 01, 2026 Google links the...
China-Linked groups target Southeast Asian government with advanced malware in 2025
China-Linked groups target Southeast Asian government with advanced malware in 2025 Pierluigi Paganini March 30, 2026 China-linked groups hit a...
DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials
Ravie LakshmananMar 30, 2026Threat Intelligence / Browser Security A new campaign has leveraged the ClickFix social engineering tactic as a...
Enterprise AI Security & Governance Roadmap (2026 CISO Strategy)
Enterprise AI Security & Governance Roadmap (2026 CISO Strategy) Artificial Intelligence has rapidly transitioned from experimental capability to operational dependency....
Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign
Ravie LakshmananMar 30, 2026Threat Intelligence / Network Intrusion Three threat activity clusters aligned with China have targeted a government organization...
From Data to Intelligence: Why More Signals Don’t Equal Better Security
The misconception: more data intelligence equals better security In cybersecurity, there’s a common assumption: More data = more visibility...
Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account
Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account Pierluigi Paganini March 28, 2026 Iran-linked group Handala claims...
Bearlyfy Hits Russian Firms with Custom GenieLocker Ransomware
Ravie LakshmananMar 27, 2026Threat Intelligence / Vulnerability A pro-Ukrainian group called Bearlyfy has been attributed to more than 70 cyber...
China-linked Red Menshen APT deploys stealthy BPFDoor implants in telecom networks
China-linked Red Menshen APT deploys stealthy BPFDoor implants in telecom networks Pierluigi Paganini March 27, 2026 China-linked Red Menshen APT...
Google Unleashes Gemini AI to Scour Dark Web for Corporate Threats
Google has launched a new dark web intelligence service to tackle the grueling task of monitoring underground criminal forums.It...
