Category: Threat Intel

A critical GitLab vulnerability, CVE-2026-19478 (CVSS 9.4), lets unauthenticated attackers modify or delete public projects and rewrite their data with no credentials. For the many software and fintech teams building…

Researchers at Varonis disclosed CoSnitch, a flaw that made Microsoft Copilot exfiltrate data without tripping obvious alarms — reportedly the third such Copilot flaw this year. Any Cyprus business connecting…

Adversa AI showed an attack on xAI’s Grok — “Cryptographic Context Injection” — that leaks a user’s identity, location and conversation to an attacker’s server. The technique generalises to almost…

As the Model Context Protocol (MCP) becomes the standard way to connect AI agents to tools, researchers are documenting tool-poisoning attacks — malicious instructions hidden in tool descriptions the model…

Attackers are exploiting CVE-2026-59310, a directory-traversal flaw in VMware vCenter, to deploy Babuk-derived ransomware. Internet-exposed management interfaces remain a top ransomware entry point. Our analysis vCenter is a crown jewel:…

An extortion group called Icarus reportedly broke into Klue’s systems using a credential issued back in 2022, exposing keys to customers’ cloud services for extortion. Our analysis This isn’t a…

Microsoft’s August 2026 Patch Tuesday fixed hundreds of CVEs including CVE-2026-68820, an actively exploited privilege-escalation zero-day in the Windows WinSock driver. It’s the kind of bug attackers use to turn…

Microsoft researchers found a path in Semantic Kernel where a single prompt could become host-level remote code execution — code running on the machine hosting the AI agent. Our analysis…

Poland’s CERT Polska has observed active exploitation of CVE-2026-73570 in Zimbra Collaboration. Email platforms sit at the intersection of internet exposure and sensitive data. Our analysis A mail-server foothold hands…

Ransomware crews increasingly target identity systems, admin controls and backups to stop victims recovering. June 2026 alone saw 721 publicly disclosed victims. Our analysis The shift from “encrypt files” to…