Two former Air Force members sentenced for BEC scams and phishing
The duo stole victims' employee email credentials through spamming and phishing campaigns.
Red
Unknown
auto-detected
AI Intelligence Brief cached
Edit Profile
Entity Relationships
Related YARA Rules View all on YARA Rules page →
90-Day Activity
All Articles (1228)
Last 90 Days
All Time
GTT launches AI-powered network defense platform
The platform aims to significantly reduce the time vulnerabilities and threats remain undetected on corporate networks, a concern amplified by recent warning...
Cloudflare announces plans for post-quantum certificate authority
The move addresses the significant size increase in post-quantum certificates, with new algorithms producing signatures of 2,420 bytes compared to the 64 byt...
Former IBM X-Force Red leaders launch AI-powered offensive cybersecurity startup
RemoteThreat's platform is designed to simulate nation-state level attacks for Fortune 500 organizations and provide government operators with tools to targe...
Rig Security launches with $12 million to manage AI agent identities
The startup's platform aims to solve a blind spot in identity security: AI agents often operate under employee credentials, making their actions indistinguis...
Phishing Abuses RMM Tools for Persistent Access
Microsoft observed phishing campaigns that abused MSP360 RMM to deploy ScreenConnect, creating redundant remote-access channels for follow-on activity The po...
Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected
Mandiant researchers said dozens of organizations have been impacted by attacks attributed to advanced and suspected state-sponsored threat groups. They expe...
Custom ChatGPTs push ClickFix attacks to deploy RAT malware
Custom variants of OpenAI's ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that use ClickFix attacks to del...
Controversial spyware firm Paragon to go public by end of year
The company plans to close the deal around the end of the year at which point Paragon will begin trading on Nasdaq under the REDLattice umbrella.
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and J...
Access control models: RBAC, ABAC, PBAC, DAC, and MAC compared
Automated AI agent used to breach cybersecurity nonprofit DIVD
The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as "loud and very, very messy." [.
Alleged ShinyHunters leader arrested in the Netherlands
The arrest of a 24-year-old man in Amsterdam, which occurred a week before ShinyHunters hacked the FBI, marks a major turning point for law enforcement’s pus...
Star Blizzard refines phishing and malware delivery with the RedFlick technique
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing ...
Retired or just abandoned? Proving an API, version, or endpoint is actually gone
Kiteworks lifts shutdown advisory after ‘credible threat intelligence’ from federal authorities
The company said it found and patched a previously unknown critical vulnerability in one product during the weekend shutdown, and has no indication it was ex...
Japanese railway operator Keio hit by ransomware attack
The ransomware attack, which occurred in the early hours of Saturday, September 26, 2026, appears to have primarily affected Keio's hospitality business, inc...
Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials
AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials
Anthropic MCP Python SDK Flaw Enables OAuth Credential Theft and Account Takeover
Security researchers have disclosed a high-severity vulnerability in Anthropic’s Model Context Protocol (MCP) Python SDK. This flaw could allow a malicious M...
Using AI to chart a course for our post-quantum migration
We’re building CryptoLabe, an internal AI-powered tool that discovers cryptography across our codebase, surfaces dependencies, and helps us progress toward a...