2026-03-25 12:13 UTC
Other
Other
Esquema de Phishing GTFire: Evitando la detección mediante servicios de Google
Cómo GTFire abusa de Google Firebase y Google Translate para escalar campañas globales de phishing
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 4,555 matching records.
AUTO-POLL // 2026-10-07 03:30 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P0 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 7
CLEAR
P0
COOL // 2 ARTICLES
TUE
Oct 6
RANSOMWARE
P3
COOL // 61 ARTICLES
MON
Oct 5
RANSOMWARE
P5
COOL // 48 ARTICLES
SUN
Oct 4
RANSOMWARE
P10
WARM // 11 ARTICLES
SAT
Oct 3
RANSOMWARE
P4
COOL // 14 ARTICLES
FRI
Oct 2
RANSOMWARE
P7
COOL // 46 ARTICLES
THU
Oct 1
RANSOMWARE
P8
COOL // 63 ARTICLES
2026-03-25 10:00 UTC
Other
Other
Virtual machines, virtually everywhere – and with real security gaps
Cloud VMs offer unmatched speed, scale and flexibility – all of which could eventually count for little if they’re left to fend for themselves
P0
2026-03-25 07:51 UTC
Government
Government
2026-004: Critical Vulnerability in SharePoint Exploited
On 17 March 2026, Microsoft updated one of its January 2026 security advisories related to a remote code execution vulnerability in Microsoft SharePoint. Specifically, Microsoft raised the CVSS score and changed the FAQ section to indicate that the vulnerability could be exploited by an unauthenticated attacker. This vulnerability was added in the CISA's Known Exploited Vulnerabilities (KEV) catalogue on 18 March 2026. Additionally, three further RCE flaws affecting Microsoft SharePoint were ad…
P55
2026-03-25 07:09 UTC
Other
Other
Cloud Phones: The Invisible Threat
Tracing the evolution of cloud phone technology from harmless social media engagement automation to industrial-scale financial fraud that’s invisible to modern detection systems.
P0
2026-03-24 14:00 UTC
Security Journalism
Security Journalism
ITDR for Google Workspace | Huntress Managed ITDR
Huntress now delivers ITDR for Google Workspace to protect identities against BEC, inbox rule manipulation, and account takeover, all with a 24/7 SOC-led response.
P0
2026-03-24 10:00 UTC
Other
Other
Cloud workload security: Mind the gaps
As IT infrastructure expands, visibility and control often lag behind – until an incident forces a reckoning
P0
2026-03-23 21:00 UTC
Security Journalism
Security Journalism
Threat Actors Abuse Railway.com PaaS as Microsoft 365 Token Attack Infrastructure
Railway PaaS is being weaponized as a clean token replay engine in an active AiTM and device code phishing campaign impacting 268+ M365 organizations and 100+ MSPs.
P0
2026-03-23 18:03 UTC
Government
Government
2026-003: Multiple Vulnerabilities in Citrix NetScaler and Citrix ADC
On 23 March 2026, Citrix published a security advisory addressing multiple vulnerabilities affecting NetScaler ADC and NetScaler Gateway. These vulnerabilities may lead to sensitive information disclosure and user session mix-up under specific configurations. At the time of writing, there is no public evidence of active exploitation. It is strongly recommended updating affected gateways, prioritising internet-facing assets. It is also recommended to preserve evidence for further investigation.
P0
2026-03-23 15:00 UTC
Security Journalism
Security Journalism
A _declassified Look Inside the Dark Economy of Cybercrime
Uncover the dark economy of cybercrime, from organized scam centers and the criminal customer journey to the use of generative AI in scaling attacks.
P0
2026-03-23 13:00 UTC
Security Journalism
Security Journalism
7 Key Manufacturing Cybersecurity Trends for 2026 | Huntress
Explore the latest manufacturing cybersecurity trends, from ransomware to OT takeovers, and real-world risks to production. Learn how to secure your plant.
P15
2026-03-23 12:00 UTC
Government
Government
Reflections from the Second NIST Cyber AI Profile Workshop
Thank you to everyone who participated in the Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile) Workshop in January! The input we received on the Preliminary Draft during this workshop has been invaluable and is informing the development of the next draft of the NIST Cyber AI Profile. We are working toward publishing a full workshop summary soon that captures themes and highlights from the event. In the interim, we would like to share a preview of what we heard… Bac…
P0
2026-03-20 12:00 UTC
Government
Government
All aboard: the NIST Cybersecurity for IoT Program is headed to our next stop! Share your input on where we’re headed during our Future Directions Two-Day Workshop on March 31st.
Workshop Details… We’re looking forward to hearing from the community during our “Future Directions” Workshop! Date: March 31 - April 1, 2026 Where: NIST’s Gaithersburg campus! Registration and Details: HERE Can’t make it? We still want to hear from you – email us at IoTSecurity [at] nist.gov (IoTSecurity[at]nist[dot]gov). All Aboard for Product Cybersecurity The NIST Cybersecurity for Internet of Things (IoT) Program was established to help real-world practitioners navigate the gray areas betw…
P0
2026-03-20 10:00 UTC
Other
Other
Move fast and save things: A quick guide to recovering a hacked account
What you do – and how fast – after an account is compromised often matters more than it may seem
P0
2026-03-20 00:00 UTC
Government
Government
Note d’alerte – Ciblage des messageries instantanées (20 mars 2026)
Le CERT-FR observe une recrudescence de campagnes d’attaques ciblant les comptes de messagerie instantanées. Ces campagnes ciblent particulièrement les secteurs régaliens (personnalités politiques, cadres de l’administration) mais aussi les personnels de la société civile exerçant des fonctions...
P0
2026-03-19 14:00 UTC
Security Journalism
Security Journalism
Meet Cody Browning, a Beekeeper in Cybersecurity
Meet Huntress Reseller Sales Manager Cody Browning. Learn how his grandmother's vishing scam inspired his career and fuels our mission to bring human-led cybersecurity to all businesses.
P0
2026-03-19 14:00 UTC
Security Journalism
Security Journalism
How a Tax Search Leads to Kernel-Mode AV/EDR Kill
Huntress uncovers a tax-themed malvertising campaign using Google Ads, dual cloaking, rogue ScreenConnect, and an undocumented Huawei driver to kill AV/EDR.
P0
2026-03-19 09:55 UTC
Other
Other
EDR killers explained: Beyond the drivers
ESET researchers dive deeper into the EDR killer ecosystem, disclosing how attackers abuse vulnerable drivers
P0
2026-03-19 07:09 UTC
Other
Other
How Hastalamuerte Operates: Group-IB’s Analysis of The Gentlemen’s Attack Methods
The report provides an overview on tactics, techniques, and procedures (TTPs) of The Gentlemen observed by Group-IB in intrusions conducted by its affiliates, as well as relevant information about the group's capabilities collected from underground private sources.
P0
2026-03-18 14:00 UTC
Security Journalism
Security Journalism
Something Phishy in the /tmp Folder
Huntress’ AI-Centric SOC recently stopped a MacSync infostealer attack on a macOS device. The malware attempted to scrape credentials, browser cookies, and crypto wallets, but Huntress contained the threat before any data was sent to the attacker. Learn how we did it.
P0
2026-03-18 07:04 UTC
Other
Other
AI Exposure and CTEM: The Next Frontier of External Risk
Prepared by: Sudhanshu Chauhan 🔗 (Director, RedHunt Labs) and Devang Solanki 🔗 (Security Researcher, RedHunt Labs) There is a loop in cybersecurity. A new technology enters the enterprise. Adoption moves faster than governance. Security teams hear about it during incident response instead of during planning. And the exposure window, that gap between deployment and visibility, gets exploited before anyone realizes it even existed. We saw it with open cloud storage buckets. We saw it with expos…
P15
2026-03-17 14:00 UTC
Security Journalism
Security Journalism
Huntress Expands Into Proactive Security Posture Management
Huntress "shifts left" with Managed ESPM and Managed ISPM. We proactively harden your endpoints and identities to close the security gaps that attackers love to exploit.
P0
2026-03-16 21:00 UTC
Security Journalism
Security Journalism
Phishing Techniques Spotted: Email Examples & Red Flags
From fake UPS shipping notifications to PayPal-themed callback phishing, here are the five top phishing techniques we’re seeing this year.
P0
2026-03-16 12:00 UTC
Security Journalism
Security Journalism
3-2-1 Backup Rule: What It Is + How To Implement | Huntress
Discover how the 3-2-1 backup rule strengthens your backup strategy against ransomware. Plus, learn how to implement cloud backup best practices with ease.
P15
2026-03-13 16:18 UTC
Other
Other
The Rise of Fake Shipment Tracking Scams in MEA
Did you really lose your shipment on the way?
P0
2026-03-13 10:55 UTC
Other
Other
Six Supply Chain Attack Groups to Watch Out for in 2026
Who's attacking your vendors? Read about the six main supply chain attack groups who are driving SaaS, open-source, and MSP compromise in 2026. Learn how npm supply chain attacks threaten your security today, based on threat intelligence collected by Group-IB.
P0
2026-03-13 10:00 UTC
Other
Other
Face value: What it takes to fool facial recognition
ESET’s Jake Moore used smart glasses, deepfakes and face swaps to ‘hack’ widely-used facial recognition systems – and he'll demo it all at RSAC 2026
P0
2026-03-13 07:00 UTC
Security Journalism
Security Journalism
How the Huntress SOC Stopped a VPN-Based Ransomware Attack
Get an insider look at how the Huntress SOC stopped an unsecured VPN based ransomware attack. Learn why your business needs more than just software to stay secure.
P15
2026-03-12 14:17 UTC
Other
Other
Cyber fallout from the Iran war: What to have on your radar
The cybersecurity implications of the war in the Middle East extend far beyond the region. Here’s where to focus your defenses.
P0
2026-03-12 14:00 UTC
Security Journalism
Security Journalism
Data Exfiltration and Threat Actor Infrastructure Exposed
Threat actors are people, too, and like everyone else, make mistakes. These mistakes can reveal insights into the threat actor, or even expose access to their infrastructure.
P0
2026-03-12 05:00 UTC
Vendor Research
Vendor Research
Announcing Cloudflare Account Abuse Protection: prevent fraudulent attacks from bots and humans
Blocking bots isn’t enough anymore. Cloudflare’s new fraud prevention capabilities — now available in Early Access — help stop account abuse before it starts.
P0