cyberintel.kalymoon.com · 43942 articles · updated every 4 hours · grows forever
Maintainers of Thymeleaf, a widely used template engine for Java web applications, fixed a rare critical vulnerability that allows unauthenticated attackers to execute malicious code on servers. The v…
In embracing device code phishing, attackers trick victims into handing over account access by using a service's legitimate new-device login flow.
Industry and ad hoc coalitions appear poised to help fill the gap created by NIST's decision to cut back on CVE data enrichment.
Q4 2025 PitchBook Analyst Note: AI Propels Next Phase of Cybersecurity Investment PitchBook
From Protest to Peril: Cellebrite Used Against Jordanian Civil Society The Citizen Lab
Locked phones hit 75% of cases as Cellebrite widens device access Stock Titan
Google Chrome Security Update Fixes 29 Vulnerabilities, Including Remote Code Execution Flaws cyberpress.org
CVE-2026-33032 Enables Full Nginx Server Takeover Risk The Cyber Express
This year's PyCon US is coming up next month from May 13th to May 19th, with the core conference talks from Friday 15th to Sunday 17th and tutorial and sprint days either side. It's in Long Beach, Cal…
Pretty fantastic video from Japan of a giant squid eating another squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderati…
Code: github.com/ElleNajt/controllability tldr: Yueh-Han et al. (2026) showed that models have a harder time making their chain of thought follow user instruction compared to controlling their respons…
LinkedIn UK’s £500m Sovereign AI Fund has launched, backing its first 7 startups—Callosum, Prima Mente & more—with compute access & equity.
A vulnerability was found in Veeam Backup and Replication and Software Appliance and classified as critical . Affected is an unknown function of the component Windows Driver Signature Enforcement . Su…
A vulnerability was found in aguilatechnologies WP Customer Area Plugin up to 8.3.4 on WordPress. It has been classified as critical . Affected by this vulnerability is the function ajax_attach_file .…
A vulnerability was found in HKUDS OpenHarness . It has been declared as problematic . Affected by this issue is some unknown functionality of the component Path Normalization Handler . Executing a ma…
A vulnerability was found in Imagination Graphics DDK up to 1.17 RTM/1.18 RTM/23.2 RTM/24.2 RTM/25.3 RTM . It has been rated as problematic . This affects an unknown part of the component GPU Handler …
A vulnerability categorized as critical has been discovered in HKUDS OpenHarness . This vulnerability affects the function web_fetch/web_search of the component HTTP Service . The manipulation results…
Domain compromise accelerates fast. Predictive shielding slowed it down. This real-world attack shows how exposure-based containment stopped credential abuse and broke the threat actor's momentum. The…
Optimizing Value and Utility Hinges on AI Scaffolding, Says Aisle's Ondrej Vlcek While the world is in "awe" of how Mythos can find vulnerabilities and chain together exploits, the next step is to ide…
Also: NY State Regs Test Resilience vs Compliance, OT Security Nears Breaking Point In this week's panel, four ISMG editors explore the industry's response to Anthropic's Mythos AI breakthrough, wheth…
Point Predictive's Frank McKenna on Detecting Hidden Signals in Synthetic IDs Fraud detection is moving beyond verification toward identity intelligence. Frank McKenna, co-founder and chief fraud stra…
The European Union Is Cutting Ties With US Tech Companies The European Commission made a significant move towards "digital sovereignty" by awarding a 180 million euro - approximately $213 million - cl…
A global wave of email-borne worms hit industrial control systems (ICS) in the fourth quarter of 2025, marking one of the most concerning threat shifts seen across operational technology (OT) environm…