Threat Intelligence News

Server racks and network equipment in a data center illustrating critical infrastructure cybersecurity

Threat Intelligence 2026-10-29 26 views

Volt Typhoon Uses Silent Train to Hide Zero-Day Campaigns

Lumen links Volt Typhoon to four zero-day campaigns using Silent Train, a changing relay network targeting enterprise systems and U.S. critical infrastructure.

Read more →

Server racks and network cables illustrating critical infrastructure cybersecurity

Threat Intelligence 2026-10-09 36 views

FBI Disrupts Flax Typhoon Scanning and Spear Phishing Tools

The FBI disrupted Flax Typhoon hacking tools linked to critical infrastructure targeting and university breaches, as officials released new defender guidance.

Read more →

Blue Ethernet cables connected to a network switch, illustrating enterprise network security

Threat Intelligence 2026-10-08 34 views

FortiBleed Attacks Lock Out Firewall Admins, Feed Ransomware

FortiBleed attackers reuse stolen credentials, lock administrators out of Fortinet devices and supply ransomware access, prompting renewed calls for action.

Read more →

Hands typing at a computer workstation in a dark room, illustrating RedFlick cyberespionage phishing

Threat Intelligence 2026-09-30 31 views

RedFlick Phishing Campaigns Affect Over 100 Organizations

Microsoft says Star Blizzard used RedFlick phishing to affect over 100 organizations, with protected archives, scheduled tasks and the CosmicPulse backdoor.

Read more →

Black server racks and network cabling in a data center, illustrating Azure cloud infrastructure security

Threat Intelligence 2026-09-29 33 views

JadePuffer-Linked Azure Attack Deletes Cloud Storage Accounts

Microsoft linked JadePuffer to an Azure attack that deleted cloud storage accounts through compromised service principals and targeted recovery controls.

Read more →

Cybersecurity analyst monitoring network activity linked to cyber espionage

Threat Intelligence 2026-08-27 44 views

FBI Disrupts QTFY Platforms Used in Chinese Cyber Espionage

U.S. authorities disabled QScan and QTRouter, platforms allegedly used by China-linked QTFY to target critical infrastructure and federal networks now.

Read more →

Server racks representing Microsoft Exchange and OWAReaper cybersecurity threats

Threat Intelligence 2026-07-30 50 views

OWAReaper Exploits Exchange Flaw for Persistent Mailbox Access

Laundry Bear is deploying OWAReaper through an Exchange OWA flaw to keep persistent mailbox access across government and critical industry targets in Europe.

Read more →

Globe with network connections representing international cyber espionage operations

Threat Intelligence 2026-05-06 93 views

China-Linked Hackers Target Asian Governments and NATO State

Chinese espionage operation SHADOW-EARTH-053 deploys ShadowPad across eight countries targeting governments, defense, and journalists.

Read more →

Close-up view of system hacking code on computer screen representing APT supply chain compromise

Threat Intelligence 2026-02-04 102 views

Lotus Blossom APT Hijacked Notepad++ Updates for Six Months

Rapid7 attributes Notepad++ supply chain attack to Chinese APT Lotus Blossom. Chrysalis backdoor deployed to targets across Asia and Americas.

Read more →

Hooded hacker at computer targeting AI systems representing LLM threat actors

Threat Intelligence 2026-01-15 105 views

Threat Actors Actively Targeting LLMs: GreyNoise Observes Attack Surge

GreyNoise detects surge in threat actors targeting LLM infrastructure, probing for vulnerabilities in model endpoints and AI deployment frameworks.

Read more →