Cyber Threat Intelligence

Lazarus targets passport databases globally; Google detects first AI-developed zero-day exploit; new Linux kernel vulnerability 'Dirty Frag' emerges; UK water company fined for undetected breach.

174 events tracked; 35 critical exposures. Lazarus claims multiple US/China leaks. Keymous Plus targets Egypt govt. Critical Ollama CVE-2026-7482 (CVSS 9.1) disclosed.

Actor The GODFATHER of all claims breaches of BlackRock, Vanguard, Palantir, and others. XORCAT and Qilin remain active. Critical infrastructure and healthcare targeted.

ShinyHunters claims 9,000 schools impacted by Canvas breach; Polish water plants hit by ICS attacks; 74 critical data exposures include US DoD, Taiwan Military, and financial firms.

32 critical data exposure events today, led by telecom and government leaks in France, Canada, and Israel. Cisco and PAN-OS zero-day patches urgent. Cloud worm PCPJack steals credentials at scale.

Palo Alto PAN-OS zero-day exploited in the wild; Daemon Tools supply-chain attack; MuddyWater false-flag ransomware; 54 critical data exposures including US, Brazil, France, and Indonesia.

Today's brief covers a critical Linux kernel LPE, an Apache HTTP/2 RCE, and a DAEMON Tools supply chain attack. Over 50 data exposure events hit Israel, Mexico, and Ecuador, with Cinzz and NoName057(1

55 critical data exposures reported including U.S. Navy, Robinhood, and Rheinmetall. Active exploitation of Linux 'Copy Fail' bug begins. Phishing campaign hits 80+ orgs using RMM tools.

Massive data leak campaign by FreeCity hits 10+ organizations across Malaysia, Vietnam, UK, Spain. CISA warns of active exploitation of Linux privilege escalation bug CVE-2026-31431. Israeli, Indonesi

212 events, 53 critical. Forum claims target Microsoft, Orange, Aviso Wealth; Trellix confirms source-code breach; CVE-2026-31431 Linux root active.

180 events tracked; 70 critical exposures. Indonesia, US, Brazil targeted. Mr. Hanz Xploit active. Government, telecom, finance sectors hit.

47 forum data-breach posts hit US targets; Google patches CVSS-10 Gemini CLI RCE; Linux 'Copy Fail' kernel flaw enables root.

62 critical data exposure events today, with TheFallen targeting US insurance and finance. Indonesia, Morocco, and US lead victim countries. Supply chain attacks on npm and SAP packages reported.

184 events tracked; Polymarket API breach, Wells Fargo data sale, GitHub CVE-2026-3854 RCE, VECT 2.0 wiper, and LofyGang stealer resurface. Indonesia, France, US heavily targeted.