Exploitation Alert: Critical Gitea Docker Flaw Under Active Exploitation
Executive Summary
A critical, maximum-severity authentication bypass vulnerability affecting Gitea Docker images has entered a phase of high active threat following reports of in-the-wild exploitation. Tracked...
Evasive Evolution: Retooled Ousaban Banking Trojan Targets Europe with Daily-Changing C2 Infrastructure
Executive Summary
The notorious Brazilian banking trojan Ousaban (also tracked as Javali) has undergone a major strategic upgrade, expanding its operations out of Latin America t...
Holiday Ransomware: South Dakota's Pennington County Government Network Shut Down by Cyberattack
Executive Summary
A major cybersecurity incident occurring over the July 4 holiday weekend has forced the shutdown of municipal services across Pennington County, South Dakota. The Coun...
SEC Disclosure: AdaptHealth Contractor Social Engineering Attack Exposes Billing Databases
Executive Summary
Healthcare equipment giant AdaptHealth has submitted a formal Form 8-K disclosure to the U.S. Securities and Exchange Commission (SEC), confirming a material cybersecurity i...
Network Security: AI Enterprise Modernization Rapidly Expands Corporate Attack Surfaces
Executive Summary
As enterprises globally race to integrate generative and agentic artificial intelligence solutions, their underlying network infrastructures are undergoing a massive, rapid ove...
Iranian Espionage: Cavern Manticore deploys New modular Cavern C2 Framework in Israel
Executive Summary
An Iranian state-sponsored cyber espionage group affiliated with the Ministry of Intelligence and Security (MOIS) has deployed a previously undocumented modular command-and-contr...
Defensive Strategy: CISA Releases Comprehensive Operational Security (OPSEC) Guide for Election Officials
Executive Summary
With the objective of securing critical democratic infrastructure, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released its official ...
Industrial Cyber Threat: CISA Warns of Active Exploitation of PTC Windchill CVE-2026-12569
Executive Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical remote code execution (RCE) vulnerability in the PTC Windchill and FlexPLM p...
Ransomware Attack: Genesis Group Compromises Enterprise Provider SBI Software
Executive Summary
U.S. enterprise software provider SBI Software has fallen victim to a highly disruptive ransomware attack executed by the threat group genesis. Specializing in operations, logistics, inv...
Spyware Scandal: Citizen Lab Confirms Pegasus Attack on MEP Investigating Surveillance Abuses
Executive Summary
A major geopolitical surveillance scandal has been confirmed following a forensic report published by the cybersecurity research group Citizen Lab and validated by Amnest...
Healthcare Breach: Cottage Hospital Data Intrusion Exposes SSNs and Protected Health Information
Executive Summary
Healthcare provider Cottage Hospital has disclosed a serious data breach following unauthorized access to its internal computer network. In filings submitted to state ...
Edge Compromise: Sophisticated Espionage Campaign Targets Cisco and Partner Networks
Executive Summary
Threat researchers at Mandiant have disclosed a highly sophisticated, state-sponsored cyber espionage campaign targeting Cisco and its major supply chain partners. Reported on Jul...