CVE-2026-1337 · CRITICAL · Apache RCE zero-day actively exploited Salt Typhoon linked to new telco intrusions across 6 nations CISA adds 4 KEVs to catalog · Patch by June 18 Verizon DBIR 2026 · 68% of breaches involve human element EU Cyber Resilience Act enforcement begins Q3 2026 AI-assisted phishing surges 340% YoY according to Proofpoint CVE-2026-1337 · CRITICAL · Apache RCE zero-day actively exploited Salt Typhoon linked to new telco intrusions across 6 nations CISA adds 4 KEVs to catalog · Patch by June 18 Verizon DBIR 2026 · 68% of breaches involve human element EU Cyber Resilience Act enforcement begins Q3 2026 AI-assisted phishing surges 340% YoY according to Proofpoint
Intelligence for the connected age

THE CYBER
THREAT
LANDSCAPE
HAS CHANGED.

Real-time analysis, deep research, and actionable intelligence for security professionals navigating an increasingly hostile digital world.

0x4A 0x75 0x6E 0x65 POST /api/v2/auth HTTP/1.1 Host: target.internal Authorization: Bearer eyJhbGciOiJSUzI1NiJ9... Content-Type: application/json {"username":"admin","password":"$2b$12$...","mfa_bypass":true} HTTP/1.1 200 OK Set-Cookie: session=AAAA... X-Frame-Options: DENY ROP chain: 0x7fff00401234 → 0x7fff00408abc → 0x7fff004012ef SHELLCODE: \x90\x90\x90\x90\x31\xc0\x50... kernel exploit detected: CVE-2026-3892 privilege escalation via UAF in io_uring subsystem lateral movement T1021.001 T1078 T1003.001 LSASS dump successful 45 credentials extracted
Breaking
Nation-State Jun 2, 2026 9 min read
Salt Typhoon Expands Campaign to European Telcos Using Novel Living-Off-the-Land Technique

Chinese APT group linked to a sweeping new campaign targeting telecom backbone infrastructure across Germany, France, and the Netherlands — exploiting legitimate network management tools to avoid detection for an average of 214 days.

4.2B
Records
Exposed YTD
$4.9M
Avg. Cost
of a Breach
23,487
CVEs Published
in 2026
214d
Avg. Dwell
Time (APT)
01 Latest Intel
All Articles →
Threat Intelligence
Ransomware Groups Now Targeting OT/ICS Networks in Critical Infrastructure

New analysis reveals a 180% surge in operational technology attacks as ransomware actors shift focus from data exfiltration to physical disruption — demanding higher ransoms from utilities and manufacturers.

AI & Security
LLM-Powered Phishing: How Attackers Are Weaponising Generative AI at Scale

Threat actors are deploying fine-tuned language models to craft hyper-personalised spear-phishing emails at a rate previously impossible. Detection evasion rates have jumped to 94% against legacy email gateways.

Breach Report
HealthNet Data Breach Exposes 14M Patient Records via Unpatched API Endpoint

A misconfigured REST API left millions of patient records including SSNs and prescription data openly accessible for 78 days. HIPAA penalties could reach $500M as OCR launches formal investigation.

Research
Post-Quantum Cryptography Migration: Why Most Enterprises Are Behind Schedule

With NIST's PQC standards finalised, only 11% of Fortune 500 companies have begun migration planning. The harvest-now-decrypt-later threat window is rapidly closing — and most security teams aren't ready.

Policy & Compliance
EU Cyber Resilience Act: What Product Manufacturers Need to Know Before Q3

The CRA's enforcement deadline is approaching fast. We break down the key obligations for hardware and software manufacturers, the penalties for non-compliance, and a practical compliance checklist for security teams.

Vulnerability
Zero-Day in Widely-Used VPN Client Allows Unauthenticated Remote Code Execution

A critical memory corruption bug in GlobalProtect's packet parsing engine enables full system takeover without credentials. Over 95,000 internet-facing instances remain unpatched 48 hours after disclosure.

// Live Feed Active Threat Advisories
Critical
Apache HTTP Server Remote Code Execution Affects versions 2.4.0–2.4.62 · Actively exploited in the wild · No authentication required
CVE-2026-1337
CVSS 9.8
Critical
Ivanti Connect Secure Authentication Bypass Nation-state actors targeting government and defence sectors · Patch available
CVE-2026-2048
CVSS 9.4
High
Windows CLFS Driver Privilege Escalation Ransomware operators using for post-exploitation · Patch Tuesday June 2026
CVE-2026-3014
CVSS 8.8
High
Fortinet FortiOS SSL-VPN Heap Overflow Pre-auth vulnerability allowing arbitrary code execution · 40,000+ exposed instances
CVE-2026-3891
CVSS 8.1
Medium
Kubernetes API Server Information Disclosure Misconfigured RBAC allows cluster secrets enumeration · Cloud-native environments at risk
CVE-2026-4122
CVSS 6.5
02 Deep Dives
All Research →
Research · 22 min read
The Architecture of Modern APT Infrastructure: How Nation-State Groups Build, Maintain, and Abandon C2 Networks

An exhaustive technical analysis of command-and-control infrastructure patterns across six major state-sponsored threat actors, from initial infrastructure acquisition through operational security failures that led to attribution.

01
AI Security · 18 min read
Prompt Injection at Scale: Red-Teaming Enterprise LLM Deployments Across 50 Fortune 500 Organisations

Our red team conducted authorised assessments across 50 major enterprises deploying AI copilots and found critical data exfiltration vectors in 76% of deployments. Here's what we found — and how to fix it.

02
Policy · 15 min read
From SEC Disclosure Rules to NIS2: How the Global Regulatory Tide Is Reshaping Enterprise Security Governance

A comprehensive mapping of the evolving global compliance landscape — and why security leaders need to reframe cybersecurity as a board-level resilience issue rather than an IT function.

03
03 Industry Coverage
All Sectors →
Financial Services
SWIFT Network Targeted in Coordinated Attack by Lazarus Group — $200M at Risk

North Korean hackers have resumed SWIFT-targeting operations, this time using a sophisticated supply chain compromise of a major payment software vendor to insert fraudulent transfer instructions across multiple correspondent banks simultaneously.

Manufacturing & OT
The Converged Threat: When IT and OT Networks Collide in a Ransomware Attack

An automotive manufacturer's factory floor was shut down for 9 days after ransomware pivoted from a corporate workstation to industrial control systems through a poorly segmented network. A full reconstruction of how it happened — and how to prevent it.