Artificial Intelligence (AI)
Half a century after Brunner imagined it, researchers publish a prototype — and the defender community gets a new detection-research agenda rather than an immediate operational threat.
Cybersecurity 101
Cyber threat intelligence (CTI) turns raw data into decisions. This guide covers the four types, the intelligence lifecycle, IOCs vs TTPs, the frameworks that structure analysis, and the use cases that make CTI valuable to SOC, IR, and vulnerability teams.
Vulnerabilities
A logic-flow weakness in Check Point's Remote Access VPN gave a Qilin ransomware affiliate and other attackers a month to operate before a patch arrived.
Threat Intelligence
Mandiant's published findings on a financially motivated campaign give defenders in legal and financial services a sector advisory to act on.
Threat Intelligence
Meta's contempt filing tests whether court-ordered restrictions are effectively binding on a commercial spyware vendor.
Supply Chain Attack
Another package-poisoning incident lands across a language registry, reinforcing the case for default-behavior reform that GitHub has now begun applying to npm.
Cybersecurity 101
A hub guide to how threat intelligence and threat actors connect: using intelligence to attribute activity, model the threat, and prioritise defences around the adversaries most likely to target you — with links to the deep-dive guides on each.
Vulnerabilities
Cisco warns that CVE-2026-20245, a zero-day in Catalyst SD-WAN Manager, is being exploited to gain root, with no patch available. Exploitation needs netadmin access — obtainable by chaining CVE-2026-20182 — making it Cisco's seventh exploited SD-WAN zero-day of 2026.
Data Breaches
DentaQuest, a Sun Life dental-benefits administrator serving 35 million people, confirmed a breach of 2.6 million accounts after ShinyHunters leaked about 234 GB of data — including names, dates of birth, Medicaid IDs and health-insurance information.
Nation-State Cyber Threats
ReliaQuest disclosed OP-512, a previously unreported, China-linked espionage cluster that plants a custom three-web-shell framework on Microsoft IIS servers — the fourth such group to target IIS in a year. For anyone running IIS, it is a prompt to go hunting.
Cyber Attacks
Hunt.io found that a threat actor called PCPJack hijacked about 230 AWS, Google Cloud and Azure servers into a covert SMTP relay network — quietly converting business servers into verified mail proxies synced to a downstream consumer every five minutes.
phishing
Days before the June 11 kickoff, the FBI and researchers warn that FIFA World Cup 2026 fraud is already live — thousands of lookalike FIFA domains, banking malware hidden in pirate streaming apps, and login pages cloned well enough to take over real accounts.