cyberintel.kalymoon.com · 42755 articles · updated every 4 hours · grows forever
NCSC Designs 'SilentGlass' Gadget to Protect Overlooked Computer Peripheral A new device called SilentGlass is designed to safeguard users against an often overlooked threat in modern computing enviro…
Routing Malicious Traffic Through Hacked IoT Devices Is Leading to 'IoC Extinction' Networks comprised of hacked domestic devices underpin a mounting number of Chinese nation-state hacking operations,…
Sean Plankey Abandons Bid After Yearlong Delay as CISA's Leadership Vacuum Deepens Sean Plankey withdrew his nomination after a 13-month stalled process, leaving the U.S. Cybersecurity and Infrastruct…
Socket has confirmed that Bitwarden CLI version 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign, exposing millions of users and thousands of enterprises to credential t…
A North Korean state-sponsored threat group is running an active campaign that tricks software developers into installing malware through fake job interviews and rigged coding tests. The group, tracke…
A rogue npm package named js-logger-pack has been caught quietly turning Hugging Face, a widely trusted AI model hosting platform, into both a malware delivery network and a stolen data storage backen…
North Korea has been running one of the most quietly effective cyber fraud operations in recent years. State-sponsored operatives working for the Pyongyang regime have been posing as legitimate remote…
Google Cloud’s COO advocated for combining general-purpose frontier large language models with task-specific AI agents
A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a custom malware suite on compromised hosts. "A…
Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest sensitive data from developer environments. [...]
Recently observed Trigona ransomware attacks are using a custom, command-line tool to steal data from compromised environments faster and more efficiently. [...]
The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects. [...]
Zscaler 2026 AI Threat Report: 91% Year-over-Year Surge in GlobeNewswire
Phishing, Deepfakes, and Supply Chain Attacks to Drive 2026’s Biggest Crypto Hacks: CertiK FinanceFeeds
Please enjoy this definitive ranking of MAFS Australia 2026’s many, many villains The Tab
The 2026 BEC Awards winners Badminton Europe
2026 Email Threat Research Report GovInfoSecurity
There’s a New Phishing Scam: Fake Invitations The New York Times
Purdue to host 27th Annual Cybersecurity Symposium on April 7 and 8 Purdue University
22 BRIDGE:BREAK Flaws Expose Thousands of Lantronix and Silex Serial-to-IP Converters The Hacker News
Cybersecurity from Bahrain to the world leading at world level Cyber Threat Intelligence conference in Germany ZAWYA
Bolster AI Emphasizes AI-Driven Cybersecurity and Threat Intelligence at INCEPT’26 TipRanks
GPT-5.5 is out . It's available in OpenAI Codex and is rolling out to paid ChatGPT subscribers. I've had some preview access and found it to be a fast, effective and highly capable model. As is usuall…
We’re open-sourcing Trailmark , a library that parses source code into a queryable call graph of functions, classes, call relationships, and semantic metadata, then exposes that graph through a Python…