Cyber Threat Intelligence

The Gentlemen ransomware claimed ~19 victims in IT, healthcare and law on July 10, among 175 incidents amid heavy Israel-Iran conflict hacktivism.

Pro-Russian group Meta Yadro Legion claims breaches of five Romanian military entities. GodDamn ransomware uses kernel driver to evade defenses. Interpol arrests 5,800 in global fraud crackdown.

Today's brief covers AI coding agents triggering endpoint rules, a 15-year-old Linux root flaw, and alleged breaches at Binance, Nike, and Deloitte. DR4K7H CYBER TEAM targets multiple governments.

40 critical exposures today including Pakistan Airlines, SK Telecom, UAE govt. Mandiant reveals active ADFS signing key recovery via Machine DPAPI. Spain arrests alleged Russian hacktivist.

Multiple alleged breaches hit BreachForums, military/defense orgs, and govt entities. AI prompt injection and device code phishing threats emerge.

48 critical exposures today: Iraq banks, French govt, Zara, India CA portal, Brazil vehicle DB. Multiple actors active. Focus on credential reuse, supply chain.

Massive KYC data leaks target USA, France, Brazil, Indonesia. Mexican government entities hit by multiple breaches. Actor 0xSec targets French schools. North Korean PolinRider campaign active.

Today's brief covers alleged breaches at Tesla, Duolingo, and Malaysia's IRBM, plus the new Avalon malware framework and critical Linux kernel flaw.

Ransomware groups exploit Citrix Bleed 2; Google disrupts NetNut proxy network. Multiple government and education data breaches alleged across Sri Lanka, Indonesia, Mexico, and more.

26 critical exposures today target Indonesia, India, France. Scattered Spider suspect extradited. Critical Argo CD, Oracle EBS, and Kemp LoadMaster flaws under active exploitation.

33 critical data events reported globally, targeting UAE, Mexico, France, and US. Burger King, UAE Ministry, and German telecom among victims.

Over 80 critical data events reported today, including breaches at Amtrak, GameStop, and Okta. Pro-Russia influence ecosystem analysis reveals evolving tactics.

MagoSpeak claims breaches at five Mexican universities. Indonesian government agencies hit by DigitalStormSec. Bolivian military and health data allegedly exposed. US e-commerce and insurance sectors

X Forum Bot claims 14+ database leaks targeting Russia, Ukraine, and others. Thai government entities hit by NXBB.SEC. Russian espionage campaign uncovered.

Critical alleged DoD leak, Signal recovery key phishing by Russian intel, new Linux pedit COW and DirtyClone exploits, and widespread data breaches across sectors.

Turla deploys STOCKSTAY .NET backdoor against Ukraine and Europe. 32 critical exposures include SK Telecom, Bouygues Telecom, and multiple government databases. Hospitality sector targeted by Node.js

Cisco SD-WAN zero-day exploited for root access at a service provider. Law enforcement disrupts Amadey and StealC malware infrastructure. Over 50 data exposure events reported, targeting healthcare, f

FortiBleed targets 430K FortiGate firewalls; AI agent skill bypasses scanners; DPRK macOS backdoor; data leaks hit finance, gov, healthcare globally.

Multiple critical data exposures hit healthcare, government, and military sectors globally. New research reveals cloud bucket hijacking, a 29-year-old Squid proxy flaw, and parallel ransomware intrusi

Threat actors target France, Indonesia, and US in 92 critical data exposures. INC RANSOM hits Mexico auto sector; multiple French govt, retail, and e-learning entities breached.

Threat actors Worldleaks and cabyc drive a high-volume day with 102 critical exposures. A 2M payment card sale, KPMG Australia breach, and widespread credential attacks dominate the landscape.

Threat actor cabyc claims 20+ breaches; FortiBleed hits 86K FortiGate devices; AutoJack exploit turns AI agents into RCE vectors; SocGholish disrupted.

INC ransomware claims 830+ victims since 2023; DragonForce abuses Microsoft Teams for C2; Evil Corp's SocGholish disrupted; 40 critical data exposures tracked.

39 critical exposures today. ShinyHunters claims Victoria's Secret & eBay breaches. TEAM R99 HACKERS hits US local gov. Microsoft warns of RoguePlanet Defender zero-day. Crypto clipper malware uses To

61 critical data exposures today, with Mexico hit by 12 events including government and telecom breaches. Qilin and ShinyHunters lead actor activity. Fortinet and Vertex AI flaws under active exploita

Multiple threat actors target telecoms, retailers, and governments globally. ShinyHunters claims breaches at Canadian firms. PAN-OS VPN flaw actively exploited. LiteLLM and Copilot vulnerabilities dis

Today's brief covers 50 critical exposures including IRLeaks' Iran campaigns, a 62M user breach, and widespread attacks on US, UK, and Asian targets.

47 critical exposures, 116 events tracked. Nigerian govt, Israeli data, and US SSA claims lead. Splunk CVE-2026-20253 critical. Anthropic models disabled.

ShinyHunters exploits unpatched Oracle flaw to extort universities. EXILIADOS #555 claims multiple breaches across Mexico and Argentina. Novo Nordisk confirms breach. Conti member pleads guilty.

ShinyHunters targets universities via CVE-2026-35273. Qilin and Elite Squad lead 218 tracked events. Critical data exposures hit France, Indonesia, US. New BitLocker bypass emerges.