Nation-State Cyber Threats
WinRAR Flaw Exploited by Russia-Aligned Groups Against Ukrainian Organizations
Consumer compression software remains a reliable initial-access vector in the Russia-Ukraine cyber theater.
Policy & Government
CISA Rewrites Federal Patching with BOD 26-04 — Patch by Risk, Fix Criticals in 3 Days
CISA's new directive ends CVSS-led patching for federal agencies — risk becomes the prioritization signal, and the most dangerous bugs must be patched in three days.
Nation-State Cyber Threats
Researchers Disclose Growth of China-Linked JDY Botnet
A small-footprint, long-tail Chinese proxy network grows past 1,500 devices — defenders should account for this layer of reconnaissance infrastructure.
Cybersecurity 101
What Is the MITRE ATT&CK Framework? A Guide for Defenders
A defender's guide to the MITRE ATT&CK framework — what it is, how tactics, techniques, and matrices are structured, and how to use it for detection and threat intel.
Artificial Intelligence (AI)
Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards
Anthropic's Fable 5 launches with “cyber safeguards” baked in — a framing that would, days later, become the center of a precedent-setting US export-control action.
Supply Chain Attack
Miasma Supply-Chain Worm Open-Sourced on GitHub
Miasma's open-sourcing turns the previous day's Microsoft-repo incident into the first instance of a much broader supply-chain threat any actor can now reproduce.
Artificial Intelligence (AI)
Researchers Publish Prototype of Self-Replicating AI Worm Concept on Open-Weight Models
Half a century after Brunner imagined it, researchers publish a prototype — and the defender community gets a new detection-research agenda rather than an immediate operational threat.
Cybersecurity 101
What Is Cyber Threat Intelligence (CTI)? Types and Use Cases
Cyber threat intelligence (CTI) turns raw data into decisions. This guide covers the four types, the intelligence lifecycle, IOCs vs TTPs, the frameworks that structure analysis, and the use cases that make CTI valuable to SOC, IR, and vulnerability teams.
Vulnerabilities
Check Point VPN Zero-Day CVE-2026-50751 Exploited for a Month Before Patch; Qilin Ransomware Involved
A logic-flow weakness in Check Point's Remote Access VPN gave a Qilin ransomware affiliate and other attackers a month to operate before a patch arrived.
Threat Intelligence
Mandiant Documents UNC3753 Extortion Campaign Against US Legal-Services Firms
Mandiant's published findings on a financially motivated campaign give defenders in legal and financial services a sector advisory to act on.
Threat Intelligence
Meta Files Federal Contempt Motion Against NSO Group Over Alleged WhatsApp Targeting
Meta's contempt filing tests whether court-ordered restrictions are effectively binding on a commercial spyware vendor.
Supply Chain Attack
PyPI Discloses "Hades" Package-Poisoning Incident; 19 Packages Removed
Another package-poisoning incident lands across a language registry, reinforcing the case for default-behavior reform that GitHub has now begun applying to npm.