Threat Intelligence
Meta Files Federal Contempt Motion Against NSO Group Over Alleged WhatsApp Targeting
Meta's contempt filing tests whether court-ordered restrictions are effectively binding on a commercial spyware vendor.
Latest
Supply Chain Attack
PyPI Discloses "Hades" Package-Poisoning Incident; 19 Packages Removed
Another package-poisoning incident lands across a language registry, reinforcing the case for default-behavior reform that GitHub has now begun applying to npm.
Cybersecurity 101
Threat Intelligence and Threat Actors: The Defender's Link
A hub guide to how threat intelligence and threat actors connect: using intelligence to attribute activity, model the threat, and prioritise defences around the adversaries most likely to target you — with links to the deep-dive guides on each.
Cybersecurity 101
What Is Cyber Resilience? A 2026 Guide to the Four Pillars
Cyber resilience is the ability to anticipate, withstand, recover from, and adapt to cyberattacks. A clear guide to how it differs from cybersecurity, the four pillars, key practices, frameworks, and metrics.
Artificial Intelligence (AI)
Free Apps Are Quietly Turning Smart TVs into Web-Scraping Proxies for the AI Industry
Bright Data, formerly Luminati, runs the largest residential proxy network in the world — and a researcher has now mapped how consumer apps and always-on smart TVs become its silent infrastructure.
Artificial Intelligence (AI)
OpenAI Launches ChatGPT Lockdown Mode to Curb Prompt-Injection Data Theft
OpenAI's Lockdown Mode is the first big consumer-facing prompt-injection defense from a frontier AI lab — but the company itself concedes the feature reduces, rather than eliminates, the risk.
Cybersecurity 101
Data Breach Notification Laws Explained (2026 Guide)
A practitioner's guide to data breach notification laws in 2026: what triggers a notice, who you must tell, the GDPR 72-hour rule, HIPAA, SEC and US state deadlines, the penalties for getting it wrong, and how to build notification into your incident response plan.
Vulnerabilities
Cisco SD-WAN Manager Zero-Day CVE-2026-20245 Is Exploited in the Wild With No Patch Yet
Cisco warns that CVE-2026-20245, a zero-day in Catalyst SD-WAN Manager, is being exploited to gain root, with no patch available. Exploitation needs netadmin access — obtainable by chaining CVE-2026-20182 — making it Cisco's seventh exploited SD-WAN zero-day of 2026.
Data Breaches
DentaQuest Breach Hits 2.6 Million as ShinyHunters Leaks a 234 GB Data Trove
DentaQuest, a Sun Life dental-benefits administrator serving 35 million people, confirmed a breach of 2.6 million accounts after ShinyHunters leaked about 234 GB of data — including names, dates of birth, Medicaid IDs and health-insurance information.
Nation-State Cyber Threats
OP-512: A China-Linked Cluster Is Planting Custom Web Shells on Microsoft IIS Servers
ReliaQuest disclosed OP-512, a previously unreported, China-linked espionage cluster that plants a custom three-web-shell framework on Microsoft IIS servers — the fourth such group to target IIS in a year. For anyone running IIS, it is a prompt to go hunting.
Cyber Attacks
PCPJack Hijacked 230 AWS, Google Cloud, and Azure Servers Into a Covert SMTP Relay
Hunt.io found that a threat actor called PCPJack hijacked about 230 AWS, Google Cloud and Azure servers into a covert SMTP relay network — quietly converting business servers into verified mail proxies synced to a downstream consumer every five minutes.
Phishing
FIFA World Cup Scams Are Already Live — Days Before Kickoff, the FBI Is Warning Fans
Days before the June 11 kickoff, the FBI and researchers warn that FIFA World Cup 2026 fraud is already live — thousands of lookalike FIFA domains, banking malware hidden in pirate streaming apps, and login pages cloned well enough to take over real accounts.