THREAT LEVEL: HIGH
LIVE FEED
BREAKING

Critical Zero-Day
Targets Global Banking
Infrastructure

Security researchers have identified an actively exploited vulnerability affecting over 340 financial institutions worldwide.

14 min ago CVSS 9.8 34 sources
Read Full Analysis
Ransomware
BlackCat Variant Deploys Novel Exfiltration Technique
1 hour ago · CVSS 8.9
Supply Chain
NPM Package Backdoor Affects 12,000 Projects
3 hours ago · CVSS 7.5
Patch Tuesday
Microsoft Addresses 4 Zero-Days in Latest Update
6 hours ago · 47 CVEs
Advertisement
Latest Intelligence
247 reports today
001
CriticalAPT
Chinese APT Group Deploys Spyware Framework Against Defense Contractors
A sophisticated threat actor linked to China's MSS has deployed a previously undocumented modular spyware framework targeting aerospace and defense supply chains.
002
VulnerabilityPoC
PoC Released for Ivanti Connect Secure Authentication Bypass
A working exploit for CVE-2025-0282 has been published, targeting a critical authentication bypass in Ivanti VPN appliances deployed by thousands of enterprises globally.
003
Data Breach
Genetic Data of 6.9 Million Users Exposed in API Misconfiguration
A misconfigured API endpoint exposed sensitive genetic and ancestry data, raising serious concerns about biometric data protection under current international privacy frameworks.
004
Research
NIST Releases Updated Framework for AI System Security Assessments
The National Institute of Standards and Technology has published comprehensive guidelines for evaluating security risks in AI-powered systems deployed in critical infrastructure.
Advertisement
005
MalwareIoT
New Mirai Variant Compromises 140,000 IoT Devices for DDoS Botnet
An evolved Mirai variant leverages default credentials and unpatched firmware vulnerabilities to assemble a massive botnet for coordinated distributed denial-of-service attacks.
006
Tool
CISA Releases Free Malware Analysis Platform for Critical Infrastructure
The Cybersecurity and Infrastructure Security Agency launches a no-cost dynamic malware analysis service designed for operators of critical infrastructure sectors.