cyberintel.kalymoon.com · 36782 articles · updated every 4 hours · grows forever
Incident Involved an Unnamed Third-Party Vendor New York City's municipal healthcare system is notifying nearly 2 million patients of a hacking incident discovered earlier this year involving a third-…
Commission VP Henna Virkkunen Pledges Action in Tuesday Parliamentary Session The European Commission is defending its response to the advent of artificial intelligence models with strong cybersecurit…
Appeals Court Weighs Pentagon Authority Over Frontier AI Providers A majority of judges on a U.S. federal appeals court appeared disposed to allowing Defense Secretary Pete Hegseth to bar Anthropic fr…
Researchers Identify 455 Malicious Apps Tied to Global Malvertising Campaign Cybercriminals used malicious Android apps to funnel unwitting users to an ad fraud scam that generated up to 659 million d…
A ransomware group called The Gentlemen has been quietly building one of the most aggressive cybercriminal operations seen in recent years. Emerging publicly in the second half of 2025, the group rapi…
macOS users are facing a new and sophisticated threat as a variant of the SHub infostealer malware, dubbed “Reaper,” has been observed deploying a fake Google Software Update LaunchAgent to maintain p…
A newly documented attack chain linked to the threat group UAC-0184 has been observed using Windows’ built-in bitsadmin tool and HTA files to sneak malicious payloads onto targeted systems. The campai…
Until a few days ago, a publicly-accessible GitHub repository exposed credentials for both US government AWS accounts and internal Cybersecurity and Infrastructure Security Agency (CISA) systems. That…
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."
YellowKey, GreenPlasma, and MiniPlasma add to the growing list of vulnerabilities a security researcher disclosed over the past six weeks.
Verizon's "2026 Data Breach Investigations Report" ("DBIR") finds that exploits are now involved in 31% of initial access for breaches, while patching lags too far behind the bad guys.
Discord announced that all voice and video calls through the communication platform are now protected by default with end-to-end encryption (E2EE). [...]
Microsoft says it has disrupted a malware-signing-as-a-service (MSaaS) operation that abused the company's Artifact Signing service to generate fraudulent code-signing certificates used by ransomware …
A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. [...]
Meet the quantum computing stock that could crush IonQ in 2026 MSN
Five Years Later: Lessons Learned From Colonial Pipeline Ransomware Attack Infosecurity Magazine
secunet Security Networks stock (DE0007276503): cybersecurity specialist in focus after new quarterl AD HOC NEWS
White House questions tech industry on defensive AI use, cybersecurity resilience Cybersecurity Dive
Cybersecurity News: Adobe patches zero-day, Marimo flaw exploited, Venice flood threat CISO Series
Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence The Hacker News
Why Threat Intelligence Is the Missing Link in CTEM Prioritization and Validation The Hacker News
For a quarter century, the Google search box has been one of the most recognizable interfaces in computing: a thin white rectangle, a blinking cursor, a few typed words, and a list of blue links. On T…
Introducing a $100 AI Ultra plan — plus, new features and benefits for Google AI Plus, Pro and Ultra subscribers.