Latest Reports
Intelligence Brief
Intelligence Brief: Poland Disconnects ePUAP, Police Seize 235 Servers, and United Blocks AI Agents
Poland disconnected ePUAP after stopping what its minister calls preparation for a December attack. Police seized 235 servers behind Gootloader, CastleRAT, and StealC, United blocked AI agents, France blamed Iran for sabotage hacktivists claimed, and C3RB3R encrypted unpatched Synology storage.
Intelligence Brief: Barracuda Root Access, Maersk Breach, and Synthetic Executives
Barracuda gateways face an exploited path to root, WhiteArmor claims data from a Maersk acquisition, prosecutors say AI impersonators stole US$129 million, and SonicWall VPNs let alternate credentials evade SAML controls. The cases expose the danger of authority inherited across trust boundaries.
Intelligence Brief: Outlook Zero-Day, Chrome Exploitation, and Arara’s 81 Million Addresses
An Outlook zero-day leaks NTLMv2 authentication responses, Chrome faces its eighth exploited zero-day of 2026, BYOD claims Vanderbilt, and Arara’s breach exposes more than 81 million email addresses.
Intelligence Brief: Spyware Against Politicians, Fake Nuclear Alerts, and White House Proxies
Spyware warnings in Thailand and Germany, fabricated nuclear alerts in Ukraine and Russia, and proxy traffic from White House address space raise questions about attribution and public trust. This edition also examines threats against Italian officials, UK cyber resilience, and US oversight of CISA.
Intelligence Brief: PAN-OS Exploits, Sony Breach, and Android Botnet
A new wave of intrusions exposes weaknesses in firewall management, subscriber databases, developer platforms, and device firmware. Investigate PAN-OS exploitation, Sony's stolen credentials, GitHub Actions abuse, the XCPE botnet, an OpenSSH bypass, and DigiCert's exposure of identity documents.
Intelligence Brief: Japan’s Cyber Emergency, Refrigeration Attacks, and Crypto Theft
Japan is investing in cyber defenses while attackers interfere with medical refrigeration and cryptocurrency domains. This edition examines Android banking fraud, prolonged patch delays, Iranian hacktivism, and the U.S. battle over threat intelligence sharing, with analysis beyond the headlines.