cyberintel.kalymoon.com · 4634 articles · updated every 4 hours · grows forever
A Taiwanese student experimenting with software-defined radio technology shut down three bullet trains for nearly an hour, leading to an anti-terrorism response.
Also, YellowKey Bypasses BitLocker, Škoda Breach, Kingdom Market Operator Jailed This week, U.S. lawmakers urged action on AI, a BitLocker exploit. Škoda, Nvidia’s GeForce NOW partner and telehealth f…
Akamai Says Startup LayerX's Browser Telemetry Will Strengthen Access Decisions Akamai said its proposed $205 million acquisition of LayerX will add enterprise browser security and AI usage controls t…
Researchers Say Nation-State Actors Are Evolving Persistence Techniques An apparent Chinese nation-state hacking group gussied up its tooling with new modular functionality, say security researchers w…
Reports: Trump Administration Approval of Nvidia H200 Sales Poses Frontier AI Risks Trump administration discussions on AI governance with China are colliding with reports that Washington may permit e…
A Chinese state-linked hacking group known as FamousSparrow has quietly infiltrated an Azerbaijani oil and gas company, exploiting an unpatched Microsoft Exchange server to plant multiple backdoors in…
A Russian state-sponsored hacking group known as Sandworm has been caught making a calculated pivot from compromised IT networks into operational technology systems that control physical infrastructur…
Linux admins reeling from handling last month’s CopyFail and last week’s Dirty Frag kernel vulnerabilities have a new headache to deal with: Fragnesia. “This is a significant vulnerability,” Robert Be…
Researchers have found a critical vulnerability in the widely used Nginx web server that can potentially lead to remote code execution under certain conditions. The flaw is a heap buffer overflow that…
This is the second time this year a threat actor has leveraged a CVSS 10.0 vulnerability in Cisco's network control system.
The acquisition looks to boost visibility into third-party ecosystems, which are becoming a bigger concern as vectors for supply chain attacks.
Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed attackers to gain administrat…
Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain admin-level access to websites. [...]
The TeamPCP hacker group is threatening to leak source code from the Mistral AI project unless a buyer is found for the data. [...]
CISA adds second critical flaw in Ivanti EPMM to exploited vulnerabilities catalog Cybersecurity Dive
Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark Microsoft
Israel's Digital Health Stress Test: AI, Cybersecurity, and Wartime Care Redefine the 2026 Healthcare IT Market newswire.com
Also: Indictments in Theft Case, KelpDAO Restarts Operations This week, banking Trojan TCLBanker targeted crypto platforms, three people indicted in a violent digital assets-related robbery, Kelp DAO …
As Regulators Tighten Liability Rules, Banks Face Pressure to Justify Fraud Losses So far, banks have managed to strike a balance between fraud prevention and customer convenience, often accepting a c…
France's Mistral Makes Digital Sovereignty Case for a European Mythos The European Central Bank added to mounting warnings sent to financial institutions that they must urgently act to protect their s…
Lesson one for aspiring dark web kingpins: don't have your laundered gold bars shipped to your home address. Read more in my article on the Hot for Security blog.