THREAT OPS › Threat News

Threat Intelligence News

2671 reports from 110+ open cyber-threat-intelligence sources — APT activity, malware, vulnerabilities and campaigns, newest first.

Malware Identified in Attacks Exploiting Ivanti Connect Secure Vulnerabilitiesjpcert_blog · 2025-07-18
Llama 4 Series Vulnerability Assessment: Scout vs. Maverickprotectai_blog · 2025-07-16
How to catch GitHub Actions workflow injections before attackers dogithub_security_lab · 2025-07-16
Repeater Strike: manual testing, amplifiedportswigger_research · 2025-07-15
KongTuke FileFix Leads to New Interlock RAT Variantdfirreport · 2025-07-14
Advancing Protection in Chrome on Androidgoogle_security · 2025-07-08
Hide Your RDP: Password Spray Leads to RansomHub Deploymentdfirreport · 2025-06-30
Security Advisory: Anthropic's Slack MCP Server Vulnerable to Data Exfiltrationembracethered · 2025-06-24
AI Risk Report: Fast-Growing Threats in AI Runtimeprotectai_blog · 2025-06-23
The Cost of Being Wordy: Detecting Resource-Draining Promptsprotectai_blog · 2025-06-17
[play] NF Stroth & Associates — ransomware leak-site postransomwatch · 2025-06-16
[play] Jasper Products — ransomware leak-site postransomwatch · 2025-06-16
[rhysida] CNPC USA — ransomware leak-site postransomwatch · 2025-06-16
[handala] TBN Israel Hacked — ransomware leak-site postransomwatch · 2025-06-16
[handala] Israel’s fuel supply system Data — ransomware leak-site postransomwatch · 2025-06-15
[play] S&H Express — ransomware leak-site postransomwatch · 2025-06-15
[play] Rollex — ransomware leak-site postransomwatch · 2025-06-14
[play] Project Partners — ransomware leak-site postransomwatch · 2025-06-14
[play] NPD Products — ransomware leak-site postransomwatch · 2025-06-14
[handala] 099 ISP Hacked — ransomware leak-site postransomwatch · 2025-06-14
[handala] Y.G. New Idan Hacked — ransomware leak-site postransomwatch · 2025-06-14
[handala] Israel’s fuel supply system Hacked — ransomware leak-site postransomwatch · 2025-06-14
[handala] Israel’s fuel supply system Hacked — ransomware leak-site postransomwatch · 2025-06-14
[handala] Aerodreams Hacked — ransomware leak-site postransomwatch · 2025-06-14
Mitigating prompt injection attacks with a layered defense strategygoogle_security · 2025-06-13
[flocker] Ajmanre.gov.ae — ransomware leak-site postransomwatch · 2025-06-12
Security Spotlight: AppSec to AI, a Security Engineer's Journeyprotectai_blog · 2025-06-12
[incransom] alleray-labrouste — ransomware leak-site postransomwatch · 2025-06-12
[spacebears] AP Lettering — ransomware leak-site postransomwatch · 2025-06-11
[incransom] Mount Rogers Community Services — ransomware leak-site postransomwatch · 2025-06-10
[play] Homestead Gardens — ransomware leak-site postransomwatch · 2025-06-09
[play] Community Choice Credit Union — ransomware leak-site postransomwatch · 2025-06-09
[ransomhouse] EUC Sjlland — ransomware leak-site postransomwatch · 2025-06-09
Hosting COM Servers with an MCP Serverembracethered · 2025-06-09
[rhysida] Hudson River Housing — ransomware leak-site postransomwatch · 2025-06-07
[incransom] waiwhetu-medical-centre — ransomware leak-site postransomwatch · 2025-06-07
[incransom] Nunez Dental — ransomware leak-site postransomwatch · 2025-06-06
[incransom] MTTEXPERTISES.COM — ransomware leak-site postransomwatch · 2025-06-06
[incransom] Kittery Police Department — ransomware leak-site postransomwatch · 2025-06-06
[play] Triumph Construction — ransomware leak-site postransomwatch · 2025-06-05
[play] Ebac — ransomware leak-site postransomwatch · 2025-06-05
[flocker] A*****e.gov.ae — ransomware leak-site postransomwatch · 2025-06-05
[incransom] iscamen — ransomware leak-site postransomwatch · 2025-06-05
[flocker] Lts.com.vn — ransomware leak-site postransomwatch · 2025-06-05
[metaencryptor] https://devimco.com/ — ransomware leak-site postransomwatch · 2025-06-04
YARA-X 1.0.0: The Stable Release and Its Advantagesvirustotal_blog · 2025-06-04
Balancing Velocity and Vulnerability with llamafileprotectai_blog · 2025-06-04
[incransom] cemeteries.local — ransomware leak-site postransomwatch · 2025-06-04
[incransom] Funktel GmbH — ransomware leak-site postransomwatch · 2025-06-04
What 17,845 GitHub Repos Taught Us About Malicious MCP Serversvirustotal_blog · 2025-06-04
[play] Sorter Construction — ransomware leak-site postransomwatch · 2025-06-03
[play] Rochon — ransomware leak-site postransomwatch · 2025-06-03
[incransom] Sandhills Medical Foundation — ransomware leak-site postransomwatch · 2025-06-03
[kairos] Jericho Fire Department — ransomware leak-site postransomwatch · 2025-06-03
[play] FLOE Internationa — ransomware leak-site postransomwatch · 2025-06-03
[play] Capital Trade — ransomware leak-site postransomwatch · 2025-06-02
[ransomhouse] Vinda Group — ransomware leak-site postransomwatch · 2025-06-02
[blacksuit] http://www.kcac.com — ransomware leak-site postransomwatch · 2025-06-02
[incransom] valuestoreit — ransomware leak-site postransomwatch · 2025-06-02
[incransom] Universidad Técnica del Norte Ecuador — ransomware leak-site postransomwatch · 2025-06-02
[flocker] Dcsdev.org — ransomware leak-site postransomwatch · 2025-06-01
[flocker] Trustgrp.ae — ransomware leak-site postransomwatch · 2025-05-31
[incransom] sitro.com.au — ransomware leak-site postransomwatch · 2025-05-31
[incransom] mysfa.org — ransomware leak-site postransomwatch · 2025-05-30
[play] W.E. Bowers — ransomware leak-site postransomwatch · 2025-05-30
[play] Tri-Point Solutions — ransomware leak-site postransomwatch · 2025-05-30
[play] Anchor Industries — ransomware leak-site postransomwatch · 2025-05-30
[arcusmedia] STANDBYTE — ransomware leak-site postransomwatch · 2025-05-30
[arcusmedia] Acorn Sales — ransomware leak-site postransomwatch · 2025-05-30
[lockbit3] geruestba — ransomware leak-site postransomwatch · 2025-05-30
[ransomblog_noname] UnigazJordan — ransomware leak-site postransomwatch · 2025-05-30
[embargo] M&H Electric Fabricators — ransomware leak-site postransomwatch · 2025-05-30
[incransom] Jordan Drug — ransomware leak-site postransomwatch · 2025-05-30
[blacksuit] http://www.innsofaurora.com — ransomware leak-site postransomwatch · 2025-05-29
[blacksuit] http://metromont.com — ransomware leak-site postransomwatch · 2025-05-29
[ransomblog_noname] Mulia Raya — ransomware leak-site postransomwatch · 2025-05-29
[NVD] CVE-2025-5273 (MEDIUM 6.5) — Versions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the hosnvd · 2025-05-29
[play] KDV Label — ransomware leak-site postransomwatch · 2025-05-28
[play] Eliel Cycling — ransomware leak-site postransomwatch · 2025-05-28
Security Spotlight: Securing Cloud & AI Products with Guardrailsprotectai_blog · 2025-05-28
[rhysida] Cator Ruma & Associates — ransomware leak-site postransomwatch · 2025-05-28
[flocker] l*s.com.vn — ransomware leak-site postransomwatch · 2025-05-28
[spacebears] Fujipoly Ltd — ransomware leak-site postransomwatch · 2025-05-28
[hunters] Wrap & Send Services — ransomware leak-site postransomwatch · 2025-05-27
[hunters] Eight8Ate Holdings, Inc — ransomware leak-site postransomwatch · 2025-05-27
[ciphbit] http://www.iptelecom.at — ransomware leak-site postransomwatch · 2025-05-27
[hunters] Corantioquia — ransomware leak-site postransomwatch · 2025-05-27
[play] WAT Supplies — ransomware leak-site postransomwatch · 2025-05-27
[play] Media Links — ransomware leak-site postransomwatch · 2025-05-26
[play] Frederick's Machine & Tool Shop — ransomware leak-site postransomwatch · 2025-05-26
[rhysida] Carrera Chevrolet — ransomware leak-site postransomwatch · 2025-05-26
[arcusmedia] Antea Luce — ransomware leak-site postransomwatch · 2025-05-26
[embargo] allstarflooring.com — ransomware leak-site postransomwatch · 2025-05-26
[incransom] oxparkrec.org — ransomware leak-site postransomwatch · 2025-05-25
[flocker] D****v.org — ransomware leak-site postransomwatch · 2025-05-25
[nitrogen] Seneca Gaming & Entertainment — ransomware leak-site postransomwatch · 2025-05-25
AI ClickFix: Hijacking Computer-Use Agents Using ClickFixembracethered · 2025-05-24
[nitrogen] Coweta County School System — ransomware leak-site postransomwatch · 2025-05-24
[flocker] T******p.ae — ransomware leak-site postransomwatch · 2025-05-24
Assessing the Security of 4 Popular AI Reasoning Modelsprotectai_blog · 2025-05-21