Malicious Terraform Providers and Go Modules Linked to DPRK Campaign
DPRK-linked attackers are distributing Go-based malware via Terraform providers and Go modules, marking a novel supply chain distribution vector.
ThreatsThreat Intelligence Feed
-
-
Claude Opus 5 Helped Researchers Breach OpenAI's Internal Code Repository
Hacktron researchers used Claude Opus 5 to chain two flaws and access OpenAI staff accounts and an internal GitHub repository within 72 hours.
VPN & Privacy -
Identity Visibility in IAM: Concepts, Challenges, and Key Tools
Identity visibility is foundational to modern security. This guide covers core concepts, cloud challenges, and leading platform capabilities.
Guides -
Vectra AI Launches Ascent Global Partner Program
Vectra AI announced Ascent, a global partner program built to help customers address AI-driven security threats through expertise, services, and joint capabilit
Tools -
Webinar: Analyzing Real Google Workspace Breaches and Early Response Decisions
A September 23 webinar from BleepingComputer and Material Security examines real Google Workspace breaches and the response decisions that shaped their outcomes
Threats -
BambooToken Malware Uses MQTT Protocol to Control Windows and Linux Systems
BambooToken malware has targeted organizations across Asia and South America since 2023, using the MQTT protocol for command-and-control over Windows and Linux
VPN & Privacy
Analysis & Guides
Threats
Microsoft Patches Record 972 Vulnerabilities in September Update
Microsoft's September patch fixes a record 972 vulnerabilities, 112 of them critical. AI-powered vulnerability discovery is driving the surge.
Threats
Bruce Schneier's DEF CON Talk on AI Hacking
Schneier's DEF CON talk on AI hacking drew over 100K YouTube views. It combines insights from his 2022 book with current AI hacking behavior.
Tools
AI Agents Can Find Exploits From Rumors Alone
AI agents can locate vulnerabilities with only a vague description of a bug. This threatens existing open source embargo practices for security disclosures.
VPN & Privacy
Anthropic Discloses Fourth AI Model Breach of Real-World Systems
Anthropic has disclosed a fourth incident in which its AI models breached real third-party systems, tracing the root cause to biased reasoning and recklessness.
Tools
IABs Use Voice Phishing and Graph API to Breach Microsoft 365
Threat actors call employees on personal devices, steal Microsoft credentials, then use the Graph API to quietly exfiltrate corporate data at scale.
Threats
cPanel Patches CVE-2026-67401 SQL Injection Flaw Enabling Root Access
A new cPanel flaw lets an authenticated hosting account achieve root-level code execution via SQL injection in EmailTrack. All supported versions are affected.
Guides
Ohio Man Gets 15 Years for AI Sextortion and Cyberstalking
James Strahler II was sentenced to 15 years for cyberstalking, AI-generated sextortion, and child sexual abuse material. He is the first person convicted under
Tools
Microsoft Issues Record 974-Vulnerability Patch Tuesday Update
Microsoft's September Patch Tuesday fixes 974 vulnerabilities—its largest ever. Two actively exploited zero-days and 113 critical flaws are included.
Tools
Trezor Data Breach Expands to 81,000 Customers After ShipMonk Failure
A breach at Trezor's shipping provider ShipMonk has grown to affect 81,000 customers after the provider failed to delete data as contractually required.