Category: Threat Intel

A critical code-injection vulnerability in GitLab, tracked as CVE-2026-19478 (CVSS 9.4), allows unauthenticated attackers to modify or delete publicly accessible projects and rewrite their data — with no credentials required.…

Researchers at Varonis disclosed CoSnitch, a flaw that let Microsoft Copilot “hack itself” and move data elsewhere without raising obvious red flags — reportedly the third critical exfiltration flaw found…

Adversa AI disclosed an attack on xAI’s Grok using “Cryptographic Context Injection” that can send a user’s name, location, subscription tier and conversation prompts to an attacker-controlled server. Guardrails and…

As the Model Context Protocol (MCP) becomes the standard way to connect AI agents to tools and data, researchers are documenting tool-poisoning attacks — malicious instructions hidden in tool descriptions…

Attackers are exploiting CVE-2026-59310, a severe directory-traversal vulnerability in VMware vCenter, to deploy Babuk-derived ransomware. Internet-exposed management interfaces remain a favourite ransomware entry point. The gap between “patch available” and…

An extortion group called Icarus reportedly broke into Klue’s systems using a credential issued back in 2022, exposing keys to customers’ cloud services and enabling data theft for extortion. In…

Microsoft researchers found a path in Semantic Kernel where a single prompt could turn prompt injection into host-level remote code execution — code running on the device hosting the AI…

Microsoft’s August 2026 Patch Tuesday addressed hundreds of CVEs, including CVE-2026-68820 — an actively exploited elevation-of-privilege zero-day in the Windows Ancillary Function Driver for WinSock. Patching matters, but the real…

Poland’s CERT Polska has observed active exploitation of CVE-2026-73570 in Zimbra Collaboration. Email and collaboration servers are high-value targets — a foothold there often means access to sensitive communications and…

Ransomware has evolved: crews now target identity systems, administrative controls, backups and recovery infrastructure to stop victims from restoring operations. With 721 publicly disclosed victims recorded in June 2026 alone,…