// Cyber
Intel Feed

This is the first update to the TeamPCP supply chain campaign threat intelligence report, "When the Security Scanner Became the Weapon" (v3.0, March 25, 2026). That report covers the full campaign fro…

Cyborg's Nicolas Dupont on Closing the Encrypted Vector Search Gap Cyborg CEO Nicolas Dupont describes how vector databases concentrate sensitive enterprise data in a structurally unencrypted layer, a…

Capitol Meridian Partners' Niloofar Razi on Innovation Sandbox, AI-Driven Offense Cybersecurity can no longer stop at the system boundary. Organizations must understand how humans and AI agents behave…

Jim DuBois, Former Microsoft CIO and CISO, on Incentives, AI and Cyber's Future As AI reshapes cybersecurity, aligning security and innovation teams is more critical than ever. Former Microsoft CIO an…

A China-based threat actor known as Silver Fox, also tracked as Void Arachne, has significantly evolved its attack approach since early 2025, shifting from deploying remote access trojans to distribut…

A months-long investigation by Rapid7 Labs has exposed a sophisticated, state-sponsored espionage campaign by the China-nexus threat actor Red Menshen, which has embedded some of the most covert digit…

Russian law enforcement has arrested the suspected administrator of LeakBase, a prominent international hacker forum. The operation, coordinated by the Russian Ministry of Internal Affairs (MVD) along…

A new malware campaign called GhostClaw is actively targeting macOS users through fake GitHub repositories and AI-assisted development workflows. The campaign uses social engineering disguised as legi…

A critical local privilege escalation vulnerability has been identified in the IDrive Cloud Backup Client for Windows. Tracked as CVE-2026-1995, this local privilege escalation vulnerability affects t…

The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical security flaw affecting the Langflow platform to its Known Exploited Vulnerabilities (KEV) catalog on March …

A new and technically advanced rootkit called VoidLink has emerged as a serious threat to Linux systems, blending Loadable Kernel Modules (LKMs) with extended Berkeley Packet Filter (eBPF) programs to…

A threat actor known as “Snow” from SnowTeam posted an advertisement on the Russian-speaking TierOne (T1) cybercrime forum on March 25, 2026, introducing a new criminal service called Leak Bazaar. The…

A social engineering technique called ClickFix has resurfaced with significant force, tricking users on both Windows and macOS into manually executing malicious commands that quietly install malware o…

Security researchers from Georgia Tech have observed a surge in reported CVEs for which the flaw was introduced by AI-generated code

Move over shadow IT; shadow AI is the new risk on the scene. The explosion of available AI tools, leadership’s enthusiasm for the new technology, the push for employees to do more with less, nascent g…

Threats actors pounced on the code injection vulnerability within hours of its disclosure, demonstrating that organizations have little time to address critical bugs.

A long-term and ongoing campaign attributed to a China-nexus threat actor has embedded itself in telecom networks to conduct espionage against government networks. The strategic positioning activity, …

The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical vulnerability identified as CVE-2026-33017, which affects the Langflow framework …

Singapore Budget 2026: Cybersecurity will be core to AI resilience CRN Asia

SQMS Center team from Fermilab and NYU Langone advance in NIH Quantum Computing Challenge Fermilab (.gov)

RSAC 2026: IBM Sets Its Sights on Q-Day and Post-Quantum Readiness BizTech Magazine

Foster City declares State of Emergency following ransomware cyberattack CBS News

ShinyHunters flip the script on MFA in new data theft attacks Help Net Security

Proofpoint Boosts Deal Protection, Profitability With Launch Of New Partner Program crn.com