TLP: WHITECYBER THREAT INTELLIGENCE BRIEF HACKTIVIST THREAT SERIES NoName057(16) A pro-Russian hacktivist collective pairs Telegram-based recruitment and propaganda with DDoSia, a volunteer-driven attack platform, to sustain persistent, crowd-funded DDoS campaigns against government, financial, and infrastructure targets across NATO-aligned countries. Prepared by: Cyber Threat Intelligence07
trending topics
This roundup covers vishing, AiTM phishing, a macOS kernel exploit, XSS-to-RCE risk, and a critical Chrome patch, all pointing to the same trend: stolen access over broken security.
trending topics
This week's roundup covers five stories with a common thread: attackers are increasingly exploiting the systems and workflows we're conditioned to trust, rather than breaking through obvious defenses. A Linux kernel bug turns a routine bridge teardown into a memory-safety hole. Three flaws in HashiCorp&
trending topics
AI just had a big week on both sides of the security line, catching a 13-year-old Chrome bug on one hand, breaching real companies during a botched test on the other. Add a hard-coded credential zero-day, a patchable NGINX flaw, and an autonomous DeepSeek-powered intrusion
trending topics
This week's security news covers a lot of ground, but a pattern runs through nearly all of it: systems built to enforce a trust boundary quietly failing to do so. This roundup covers five separate disclosures: a Check Point authentication bypass already under active exploitation, an OpenAI agent
trending topics
msaRAT: The Malware That Never Talks to the Internet Directly Cisco Talos has uncovered a new Rust-based remote access trojan tied to the Chaos ransomware group, and it takes an unusual approach to command-and-control that keeps the malware itself completely off the network. What You Need to
trending topics
FakeGit Used 7,600 GitHub Repositories and AI Registries to Deliver SmartLoader Malware A supply chain attack doesn't need to wait for a developer to stumble onto a poisoned package anymore. Here's how a campaign called FakeGit turned thousands of fake GitHub repos into a distribution
New MacOS Stealer ClickLock Uses ClickFix to Steal Login Credentials ClickLock doesn't hack your Mac so much as ask nicely. Here's how it tricks people into handing over their password, and what to watch for so it doesn't happen to you. What You Need
Exploited AD FS Flaw Gives Attackers a Path Through Elevated Access Microsoft's July 2026 Patch Tuesday disclosed CVE-2026-56155, an actively exploited privilege escalation vulnerability in Active Directory Federation Services. What You Need to Know CVE-2026-56155 is already being exploited in the wild, and it
Shouting into the IT void
Microsoft’s GigaWiper Shows How “All-in-One” Malware Has Become the New Normal Microsoft has disclosed details on GigaWiper, a Windows backdoor that blends long-term remote access with the ability to destroy data on demand. Here's what it does and what defenders should do about it.
FortiBleed 2026: Threat Intelligence Brief TLP: WHITEAudience: Security Leadership and OperationsPrepared by: Threat IntelligenceDate: 10 July 2026 Executive Summary FortiBleed is a large scale, financially motivated credential harvesting campaign disclosed in June 2026 after security researcher Volodymyr "Bob" Diachenko discovered an exposed command server left open by the
TRENDING TOPICS July 08, 2026 Ubiquiti Patches Max-Severity UniFi OS Vulnerability Ubiquiti disclosed seven critical vulnerabilities in UniFi OS today, and one of them is about as bad as it gets. What You Need to Know CVE-2026-50746 is a maximum-severity command injection flaw in the UniFi
TRENDING TOPICS July 01, 2026 Oracle E‑Business At Risk: CVE-2026-46817 Lets Attackers Take Over Oracle Payments And Exposed ERP Systems Oracle Payments has a critical, actively exploited vulnerability, and hundreds of internet-facing EBS instances are sitting exposed right now. Here's what's at
TRENDING TOPICS June 26, 2026 Attackers Are Abusing Shopify’s Shop App for Callback Phishing Threat actors have found a new way into people's phones: fake order receipts planted inside a trusted shopping app. Here's how the scam works and what to do if you spot
TRENDING TOPICS June 24, 2026 New macOS ClickFix Campaign Silently Mounts DMGs To Deliver AMOS Infostealer A new ClickFix variant is tricking Mac users into installing an infostealer through Terminal, and it's built to avoid every visual cue users normally rely on to spot trouble. Here's
TRENDING TOPICS June 17, 2026 Rokarolla Android Trojan Emerges as Major Threat to Banking and Crypto Apps A newly identified Android banking trojan known as Rokarolla is targeting 217 banking and cryptocurrency applications, combining financial theft with deep device control. The malware can steal lock screen PINs, intercept and send
TRENDING TOPICS June 12, 2026 Critical UniFi OS and UID Agent Flaws Expose Networks to High-Risk Compromise Ubiquiti has disclosed multiple critical vulnerabilities affecting UniFi OS devices and the UID Enterprise Agent, with CVE-2026-47367 leading the pack at a CVSS score of 9.9. The flaw stems
TRENDING TOPICS June 10, 2026 Critical 0-day in Veeam Backup & Replication: CVE-2026-44963 A critical zero-day vulnerability tracked as CVE-2026-44963 has been disclosed in Veeam Backup and Replication, targeting one of the most sensitive components in the enterprise environment: the backup server itself. The
TLP: WHITE | THREAT INTELLIGENCE BRIEF Prepared by: Threat Intelligence | 5 June 2026 Russia-Linked Threat Intelligence Series New Russia-Linked Threat Actor Uses AI to Supercharge Multi-Vector Attacks Against Ukraine What security teams, threat intelligence analysts, and executive leadership need to know about GREYVIBE and the AI-enabled threat
TRENDING TOPICS June 05, 2026 Cisco Patches Critical RCE Flaw CVE-2026-20230 in Unified Communications Manager Cisco has released urgent security updates addressing CVE-2026-20230, a critical remote code execution vulnerability in Unified Communications Manager (Unified CM) that could allow unauthenticated attackers to gain root-level control over
TRENDING TOPICS JUNE 03, 2026 One-click VS Code GitHub .dev Exploit Leaks Full GitHub Tokens A newly disclosed attack against GitHub.dev shows how a single malicious link can give an attacker read and write access to every repository a developer can reach. GitHub.dev is the browser-based
