// Cyber
Intel Feed

Last year’s “PhantomRaven” supply-chain campaign is back, with security researchers uncovering 88 new malicious packages in what they describe as the second, third, and fourth waves of the operation. …

Research from GitLab has exposed the latest tradecraft behind North Korean fake IT worker scams . GitLab banned 131 North Korean-attributed accounts last year, most of which involved JavaScript reposi…

In July 2025, McDonald’s had an unexpected problem on the menu, one involving McHire, its AI-powered platform used to recruit and screen job applicants. The system, developed by Paradox.ai, featured a…

Mithilfe sogenannter Zombie-ZIPs lassen sich fast alle Virenscanner austricksen. Pressmaster | shutterstock.com Eine neue Technik mit dem Namen „Zombie ZIP“ ist in der Lage, Payloads in komprimierten …

Drum prüfe… Ground Picture | shutterstock.com Security-Anbietern stehen viele Wege offen, um CISOs und Sicherheitsentscheider mit Lobpreisungen und Angeboten zu ihren jeweils aktuellen Produkten und L…

Threat actors are still having success tricking human resources staff into opening malware-infected phishing emails. The latest example is detailed by researchers at Aryaka, who this week described a …

Some of these campaigns are linked to Darcula, a Chinese-language phishing-as-a-service platform

CrackArmor AppArmor flaws let local Linux users gain root, break containers and enable DoS attacks

DNS-based attack in AWS Bedrock AgentCore lets AI sandboxes exfiltrate cloud data

The FBI wants to hear from gamers who have downloaded Steam titles containing malware

An issue with the Companies House website has put the personal and corporate information of millions at risk

A new law enforcement operation against phishing and ransomware operators led to the takedown of 45,000 malicious IP addresses

Operation Lightning sees international law enforcement partners shut down ‘SocksEscort,’ a major malicious proxy service used by cybercriminals worldwide

PixRevolution Android trojan hijacks Brazil’s PIX payments in real time using accessibility abuse

The critical vulnerability affecting both cloud and self-hosted n8n instances requires no authentication or even n8n account to be exploited

CISA issued urgent directive as attackers exploit Cisco SD-WAN flaw granting admin access to networks

The ICO has fined Police Scotland after it shared the entire contents of a victim’s phone with her alleged attacker

The pro-Iran Handala group claims to have wiped 200,000 systems in destructive wiper malware attack on US firm Stryker

French small and medium businesses remained the organizations most targeted by ransomware in 2025

Infosecurity Europe 2026 reveals its keynote line-up, featuring Jason Fox, Shlomo Kramer, Cynthia Kaiser and more, with sessions on AI, cloud security and post quantum threats

LeakyLooker flaws in Google Looker Studio let attackers run cross-tenant SQL attacks on cloud data

Over 250 legitimate websites, including news outlets and a US Senate candidate’s official webpage, been compromised to infect visitors with infostealers, warn Rapid7 researchers

BlackSanta malware targets HR staff with fake resumes, kills EDR and steals system data

Palo Alto Networks’ Unit 42 has developed a successful attack to bypass safety guardrails in popular generative AI tools