Where Cyber News Becomes Intelligence.
LLM security, agents, MCP, prompt injection, model risks, data exposure and security controls for AI systems.
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks. Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever.
LiteLLM Supply Chain Attack: 2,500+ Companies Exposed in the Largest AI Supply Chain Breach of 2026. The security significance comes from trust: Trivy or the affected component sits in a software, development or delivery path that downstream teams may already allow to run automatically.
A security weakness in the affected technology is being tracked as a newly reported vulnerability. This is an overview of the campaign, examining the countries affected, potential impact of BadIIS infections, the attack chain, and post-compromise tactics.
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories. Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow them to execute arbitrary code on unpatched servers, according to threat intelligence company Defused.
What the Data Says About AI in Security Operations in 2026. According to Prophet Security's State of AI in Security Operations 2026 report (produced from ViB’s survey of 250+ cybersecurity pros), 40% of security teams now use AI daily.
A security weakness in the affected technology is being tracked as a newly reported vulnerability. AI is changing the harder part: how much time defenders have left to act.
A security weakness in Windows is being tracked as a newly reported vulnerability. The security flaw, which does not have a CVE identifier, works against Kiro IDE 0.7.45 on Windows, according to Mindguard.
AI-Agent-Driven Offensive Operation : Exposed Adversary Open Directory Reveals Autonomous Crypto-Theft Campaign Leading to Mass Wallet and Credential Compromise. The exposed infrastructure also revealed a developing blockchain-based command-and-control system designed to make future operations mo...
Caught in 4K: The Aurora Files. A misconfigured server opened a window straight into an Aurora ransomware operator's playbook: attacker tools, AI-assisted planning, and a look inside the actual negotiation panel where a victims and the operator settled on payment.
A security weakness in the affected technology is being tracked as a newly reported vulnerability. By structuring the analysis process, enforcing skeptical validation steps, and injecting domain-specific huma.
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit. The vast majority of the targets are located in Brazil, Bolivia, China, Canada, and Vietnam.
A security weakness in Azure is being tracked as a newly reported vulnerability. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts.
A security weakness in Hugging Face is being tracked as a newly reported vulnerability. The analysis maps the published incident to Qualys Container Runtime Security, Kubernetes Security Posture Management, and Cloud Detection.