Threat Intelligence

AI provider API keys are now a primary attacker target — the October 2026 Railway incident went after them, and an unverified listing claims to sell an OpenRouter user database and keys. A step-by-step IR playbook for suspected LLM/AI API-key exposure.

BadBox 2.0 is a botnet that HUMAN Security says infected more than 1 million off-brand Android devices across 222 countries — via supply-chain backdoors and trojanized apps — for ad fraud and residential-proxy abuse. What it is and how to defend against it.

An independent, attributed roundup of the major cybersecurity incidents of October 2026 — from the PHP2Shell critical RCEs and the ConnectWise Cloud Backup supply-chain compromise to breaches at ETS, Denmark’s population register, Zeabur, Railway, Burger King Japan and more. Each item carries a verification status (confirmed, claimed or rumoured) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

A plain-English explainer on parked domains: what domain parking means, the difference between legitimate and malicious parking, how parked domains enable typosquatting and phishing, and the DNS, monitoring and brand-protection defenses that reduce the risk.

A methodology explainer for security leaders: how cyber-threat-intelligence analysts correlate leak-FORUM POST METADATA — not the leaked data — to spot a recycled breach sold as new, match duplicate threads across forums, cluster threat-actor aliases into one persona, and map a campaign over time. Each correlation saves a defender time, money and panic. Defensive, vendor-neutral, with a free synthetic training lab. Credits Iván Castañeda (@ivancastl) / darkforums-ip-intel as real-world prior art.

A 2026 Semperis ransomware report, covered by The Register, finds 37% of ransomware attacks now involve psychological or physical threats against staff — doxxing, swatting, threats to families, even packages sent to investigators' homes. Here is what the numbers say, the caveats that come with a self-reported vendor survey, and what the shift from data-encryption to human coercion changes for incident-response planning and a security leader's duty of care.

Researchers at swarmcha.se report that between 28 Sept and 8 Oct 2026, a fleet of internet-connected AI agents running on Tencent Cloud repeatedly tried to extract Amap (Alibaba mapping) data — bypassing anti-bot defences by abusing a public URL-scanning service as a remote browser, and in several cases using exposed API credentials found in public source. Attribution to any specific Tencent team is explicitly uncertain. Here is what was reported, the heavy caveats the authors themselves raise, and what it means for anyone running or defending against internet-connected AI agents.

A threat researcher reports finding a live, custom-built attack-orchestration platform — "Cairn" — that lets an LLM run intrusions end-to-end with no human in the loop per session: one Docker/Kali container per victim, a fact-graph that remembers what was tried, 229,828 AI-dispatched attack events across 13 days, and a ShellShock-over-SMTP vector that actually landed. Here is what was reported, what is genuinely new (a model reading its own prior work), the IOCs and CVEs involved, and the defences that matter — treated as a single-source disclosure, not yet corroborated by major vendors.

New research from Anthropic’s Frontier Red Team argues that small open-weight AI models are months, not years, from being able to self-replicate across ordinary consumer hardware — no data centre required. The team ran 9B-parameter inference on cheap Android TV boxes and other IoT devices. Here is what the research actually found (and what it did not), why it reframes AI risk as an epidemic-response problem, and the concrete defences — network-anomaly detection, honeypots, ISP quarantine, killing default passwords — that security leaders can act on now.

A dark-web monitoring account reports that the ransomware group "The Gentlemen" has named Deloitte on its extortion leak site, with the entry marked "Data info — soon." As of now this is an unverified claim: a listing appeared, no data or proof has been published, and Deloitte has not confirmed any incident. Here is what "being named" on a leak site actually means, why even a Big Four audit-and-cyber firm appearing matters, how to read these claims without panicking, and the exact playbook if you are a Deloitte client or sit in their supply chain.

A16z, using Epoch.ai data across 21 major software vendors (Apple, AWS, Microsoft, Google, Cisco, Oracle and more), shows critical-severity CVEs that never cleared ~100 a month for four years suddenly jumping past 600 a month since spring 2026; high-severity reports spiked toward ~2,200 a month. In parallel, Kevin Mandia (Mandiant’s founder) says his new venture Armadin has found 90+ zero-days in production at customer sites this year using models post-trained with real red-teamers — black-box, from the internet, no source code. What’s confirmed vs. reported, why the curve bent, and what a security leader should do now.

A lab has released apex-flash-1, an open-weights model post-trained for cybersecurity, and framed offensive security as an economics problem: cheap capable models plus harnesses plus compute make finding and exploiting vulnerabilities a scaling exercise. The self-reported claims ($1M in bounties, #1 on the HackerOne US leaderboard, trillions of tokens a month) are the team’s own, but the trend they describe is corroborated by Anthropic’s own threat reports of largely-automated intrusion campaigns. What is claim vs. signal, why the cost-to-breach is falling, and the concrete playbook for a security leader when attack becomes industrialised.

An independent, attributed roundup of the major cybersecurity incidents of September 2026 — from the actively-exploited Citrix NetScaler and Arista VeloCloud zero-days to the Pentagon Defense Manpower Data Center breach, the Gyazo compromise, the Keio ransomware attack and the disputed ShinyHunters FBI-jobs claim. Each item carries a verification status (confirmed, claimed, reported or rumoured) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

Anthropic says Zhipu’s open-weight GLM-5.3 can build end-to-end exploits without robust safeguards. The capability finding is right; the policy cure is not.

Dutch police arrested a ShinyHunters suspect; days later an "Umbreon" defacement hit the FBI jobs site — maybe a frame-up. Why attribution is adversarial.

Influence operations use coordinated inauthentic activity to manipulate opinion. What they are, the signals that reveal them, and how organisations can detect and respond to campaigns that target them.

Threat intelligence APIs provide programmatic access to indicators, reputation data and context about threats. What free options can do, where they fit, and how to use them well.

IP reputation APIs tell you whether an IP address is associated with malicious activity. What they check, where they fit in a security stack, and how to evaluate free and paid options.

Breach-lookup APIs let you check whether an email, domain or password has appeared in a known data breach. What the free options can and cannot do, safe ways to use them, and where they fit.

Federal prosecutors arrested Oxygen Forensics CEO Lee Reiber and Russian national Oleg Davydov, alleging the Virginia-based digital-forensics vendor concealed Russian ownership and Russian-developed software while selling to the Secret Service, HSI, DHS OIG and other agencies. What the complaint alleges, what it explicitly does not, and what it means for vendor-risk programs everywhere.

ShinyHunters claims a PeopleSoft zero-day on apply.fbijobs.gov let it steal 2–3TB from FBI GovCloud. What’s confirmed, what isn’t, and what to do now.

A local zero-day in Meta’s Muse Mac client lets unprivileged malware hijack prompts, steal the agent’s auth, and pivot to a linked iPhone.

Hacktron chained a libheif overflow, RCE on community.openai.com, and an SSO flaw into ChatGPT/Codex takeover and internal repo access in under 72 hours.

Elastic Security Labs is investigating @apexacc/cli, an npm package still live on the registry that disables Windows Smart App Control and AV exclusions, then chains Base64 PowerShell through Python/PyInstaller, PyArmor and a Go shellcode loader to an infostealer. What we know so far, credited to the source.

VirusTotal released VTAI: a free, no-API-key MCP server and REST API letting AI coding agents check file, URL, domain and IP reputation. What the 7 tools actually do, the real limits, and what to know before wiring it into an agent.

VirusTotal shipped VTAI, a free MCP server and REST API for checking files, URLs, domains and IPs — no paid key required. Here is how it actually compares to the abuse.ch feeds, urlscan.io, Google Safe Browsing and MetaDefender Cloud on coverage, quotas and auth friction.

AI-enabled cyberattacks are real but bounded. Learn how attackers misuse LLMs for phishing and recon, why guardrails limit uplift, and how to defend.

How AI-scaled influence operations and LLM sockpuppets really work, the detection signals that expose them, and how comms teams and platforms defend.

How AI supercharges surveillance and profiling, the privacy and security risks it creates, and the governance safeguards a CISO or DPO can put in place.

Why frontier AI labs restrict dangerous dual-use biology, how layered safeguards and responsible scaling work, and what security leaders should know.

How frontier AI labs restrict weapons and CBRN uplift: dual-use risk, export controls, responsible scaling, and layered safeguards for security leaders.

How AI labs detect AI misuse with monitoring, classifiers and threat intelligence, plus the AI trust and safety lessons CISOs can apply to their own AI.

Cl0p's dark-web leak site has listed four organizations as alleged victims. These are unverified extortion claims, not confirmed breaches. Here is how to read a leak-site listing, why Cl0p keeps hitting file-transfer software, and the defensive steps that actually matter.

A defensive threat-intelligence explainer on the venue types that power the ransomware economy - forums, RaaS portals, initial-access brokers, leak sites - and how defenders and law enforcement monitor and disrupt them.

A defensive awareness briefing for CISOs and staff on how ransomware operations recruit affiliates and insiders, the traits they hunt for as red flags, the manipulation tactics they use, the legal and personal consequences, and how to recognize and avoid being pulled in.

An analytical look at the ransomware business: the RaaS affiliate model and revenue splits, how demands are sized and negotiated, the crypto rails crews use -- and how blockchain analysis and law enforcement follow and seize the money.

Inside the operational security ransomware operators use to stay anonymous, and the recurring OPSEC mistakes, blockchain tracing, infrastructure seizures and leaks that keep unmasking them anyway.

Attackers are mass-exploiting CVE-2026-0768, a CVSS 9.8 unauthenticated RCE in the Langflow AI app builder, to run code as root and harvest OpenAI API keys and cloud secrets. What the flaw is, why AI gateways are the target, and what to do today.

OpenVuln is Z.ai’s free tool that points its GLM-5.3 model at any GitHub repo to hunt vulnerabilities. How it works, the numbers, and what it means for OSS.

Backdoored LiteLLM 1.82.7 and 1.82.8 stayed on PyPI for 40 minutes in March 2026 — long enough to compromise over 2,400 organizations. A 153GB archive of the stolen data has now surfaced. Here is exactly what happened, the IOCs, and the remediation checklist.

From RovoBlast to EchoLeak — a single click can now turn your enterprise AI assistant into a data exfiltration tool. Here is how the attacks work, a timeline of every known incident, and what security leaders should do about it.

An independent, attributed roundup of the major cybersecurity incidents of June 2026 — from the Oracle PeopleSoft zero-day (CVE-2026-35273) that ShinyHunters used against 100-plus universities and Microsoft’s record ~206-CVE Patch Tuesday to breaches at iRhythm, Novo Nordisk, Tata Electronics and Kodak and a wave of npm supply-chain compromises. Each item carries a verification status (confirmed, claimed or reported) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of May 2026 — from the ShinyHunters Canvas/Instructure extortion and the TanStack supply-chain worm that reached OpenAI to the DigiCert code-signing abuse, a suspected Iranian attack on US gas-station tank gauges, and breaches at Carnival, Charter/Spectrum, West Pharmaceutical and more. Each item carries a verification status (confirmed, claimed or reported) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of April 2026 — from the ShinyHunters Salesforce extortion wave hitting Charter/Spectrum, ADT, Pitney Bowes, Vimeo and Medtronic, to the ChipSoft ransomware attack on Dutch hospitals, the France Titres (ANTS) identity-portal breach, a Microsoft SharePoint zero-day and the ~$290M Kelp DAO crypto theft. Each item carries a verification status (confirmed, claimed or reported) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of March 2026 — from the TeamPCP supply-chain campaign that poisoned LiteLLM and security-scanner packages on PyPI, to the Handala wiper that erased 200,000+ Stryker devices, the Cl0p Oracle E-Business Suite extortion wave, and breaches at Cegedim Sante, Navia, Aura, Crunchyroll and Telus. Each item carries a verification status (confirmed, claimed or rumoured) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of February 2026 — from Microsoft’s six actively-exploited zero-days and the BeyondTrust and Ivanti EPMM flaws to breaches at the University of Mississippi Medical Center, France’s national bank account registry (FICOBA), CarGurus, Figure, Advantest and Singapore’s four telcos. Each item carries a verification status (confirmed, reported or claimed) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of January 2026 — the ShinyHunters wave against Match Group, Bumble and Crunchbase, a 149-million-credential infostealer dump, large healthcare and regulator breaches disclosed this month (Covenant Health, CIRO, Under Armour), and the actively-exploited vulnerabilities CISA added to its KEV catalog (Zimbra, Versa Concerto and more). Each item carries a verification status (confirmed, claimed or reported) and a clearly-labelled subjective editorial severity, with a defensive takeaway.