Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.
AllCTICybercrimeDark Web
Stealer logs and data breaches: proactive defense
Risk Protection

September 16, 2026

Stealer Logs and Data Breaches: How to Build a Proactive DefenseStealer logs are structured files of credentials, session cookies, and payment data harvested from infected devices. They let attackers sign in as your users instead of breaking in. This guide covers
Revolut data breach extortion site infrastructure analysis
Cybercrime

September 15, 2026

Revolut Data Breach: Tracing the Extortion Site InfrastructureRevolut confirmed on 12 September 2026 that it disclosed customer files to a third party who submitted fraudulent information requests from a legitimate government agency email domain. A threat actor
TeamPCP: When the scanner is the attacker
Threat Actor Spotlight

September 12, 2026

TeamPCP (UNC6780): From Telegram Data Broker to Supply Chain CascadeTeamPCP, (UNC6780), evolved from a Telegram-based stolen data broker into the actor behind a supply chain cascade that has compromised Trivy, Checkmarx KICS, LiteLLM, and hundreds of downstream packag
CVE-2026-27825 Means We Need to Talk About KEV...and CVE, and CVSS...
Security Operations

September 10, 2026

CVE-2026-27825 Means We Need to Talk About KEV...and CVE, and CVSS...CVE-2026-27825 (CVSS 9.1) was patched on February 24, 2026, and published on the NVD on March 10. Six days later, KELA analysts found a working proof-of-concept exploit circulating on XSS.PRO, a major
Integrity Technology Group data leak analysis
Threat Landscape

September 8, 2026

Alleged Integrity Technology Group Data Leak: A Botnet, and a Purchase OrderIn August 2026, a threat actor advertised a dataset said to have been stolen from Integrity Technology Group, a Beijing security vendor sanctioned by the United States and the European Union, and four
How Secure Is Cloudflare WARP?
Security Operations

September 4, 2026

How Secure Is Cloudflare WARP?How secure is Cloudflare WARP? Very, for data in transit: it encrypts the connection from the device to Cloudflare's network and shuts down local network attacks like packet sniffing, rogue access poi
Prompt Injection Attack Explained: How to Stop Adversary Exploits
GenAI Security

September 4, 2026

Prompt Injection Attack Explained: How to Stop Adversary ExploitsA prompt injection attack hides malicious instructions in content an AI system reads, causing it to override the instructions it was given. Learn how these attacks work, see the documented cases that
Cybersecurity in telecommunications networks
Security Operations

September 4, 2026

Cybersecurity in Telecommunications: A CISO's Guide to New ThreatsTelecommunications networks face threats that most security programs were not built for: signaling protocol abuse, SIM swap fraud, and subscriber data traded underground. This guide sets out how CISOs
WordPress exploits traded on cybercrime forums
Cybercrime

September 3, 2026

WordPress Exploits on Cybercrime Forums: What Threat Actors Are SellingWordPress exploits are advertised, auctioned, and resold on cybercrime forums alongside high-value Windows zero-days. KELA tracked listings ranging from a USD 100 arbitrary file upload exploit for a W