A major government data exposure has compromised sensitive contact directories belonging to the United Kingdom's Police National Legal Database (PNLD). The incident, originating from an unauthenticated Microsoft Power Apps Portals misconfiguration linked to backend Microsoft Datavers...
Cyber Security Intelligence Archive
Read Full Intelligence Report »
Industrial Supply Chain Threat: Cl0p Exploits PTC Windchill PLM Zero-Day
Executive Summary
Cybersecurity research teams and federal agencies have confirmed active, widespread zero-day exploitation of PTC’s product lifecycle management (PLM) software, Windchill and FlexPLM. Tracked ...
While modern enterprises invest millions in cloud firewalls, Zero Trust identity architectures, and Endpoint Detection and Response (EDR) platforms, the physical security boundary remains one of the most frequently breached perimeters during red team assessments and targeted adversar...
The paradigm of enterprise data breaches has fundamentally shifted from traditional network perimeter penetration to identity and token compromise. Adversaries no longer rely primarily on weaponizing binary memory corruption exploits against external firewalls. Instead, state-sponsor...
State-Sponsored Threat: China-Linked APT Clusters Target Southeast Asian Critical Infrastructure
Executive Summary
A highly coordinated, state-sponsored cyber espionage campaign has targeted critical national infrastructure across Southeast Asia. Security researchers have revealed ...
Unpatched Security Flaws Discovered in FatFs Filesystem Bundled in Millions of IoT Devices
Executive Summary
A critical series of unpatched vulnerabilities has been disclosed in FatFs, an extremely popular open-source filesystem library bundled into the firmware of millions of embe...
Active Zero-Day: Cisco Catalyst SD-WAN Targeted in Privilege Escalation Attack
Executive Summary
A critical zero-day vulnerability impacting Software-Defined Wide Area Network (SD-WAN) infrastructure has faced active exploitation by sophisticated threat actors. Cloud intelligence a...
Cybersecurity Warning: Fake GitHub PoC Repos Distribute New ChocoPoC RAT
Executive Summary
Security researchers and bug hunters have increasingly become the targets of malicious social engineering campaigns. A recent joint investigation by YesWeHack and Sekoia has uncovered a decep...
CISA Sounds Alarm: SharePoint Server RCE CVE-2026-45659 Added to KEV Catalog
Executive Summary
The Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity remote code execution (RCE) vulnerability in Microsoft SharePoint Server to its Known Exploited Vulne...
Global Network Exposure: FortiBleed Leak Exposes 86,000 Fortinet Firewall Credentials
Executive Summary
A massive credential leak has exposed critical network infrastructure perimeters globally. Tracked as the "FortiBleed" incident, security firm Cydome recently revealed that more ...
Urgent Warning: Critical Oracle PeopleSoft and E-Business Flaws Under Active Exploit
Executive Summary
Vulnerabilities in widely deployed enterprise resource planning (ERP) suites are increasingly being weaponized by cybercriminals to execute massive corporate data thefts. A critic...
Critical Flaw: Nuance PowerScribe RCE CVE-2026-26142 Threatens Radiology Databases
Executive Summary
A critical remote code execution (RCE) vulnerability has been disclosed affecting Nuance PowerScribe, a widely deployed radiology reporting and clinical dictation platform used acro...