threat-intelvia Dark Reading
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
Oct 28, 2026 UTC
Threat intel news
Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
threat-intelvia Schneier on Security
Training AIs to Solve CAPTCHAs
Interesting research: Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from...
Oct 19, 2026 UTC
threat-intelvia WeLiveSecurity (ESET)
Sednit reloaded: Back in the trenches
The resurgence of one of Russia’s most notorious APT groups
Mar 10, 2026 UTC
threat-intelvia WeLiveSecurity (ESET)
Protecting education: How MDR can tip the balance in favor of schools
The education sector is notoriously short on cash, but rich in assets for threat actors to target. How can managed detection and response (MDR) help learning institutions regain th...
Mar 4, 2026 UTC
threat-intelvia WeLiveSecurity (ESET)
This month in security with Tony Anscombe – February 2026 edition
In this roundup, Tony looks at how opportunistic threat actors are taking advantage of weak authentication, unmanaged exposure, and popular AI tools
Feb 28, 2026 UTC
threat-intelvia WeLiveSecurity (ESET)
ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025
The attack involved data-wiping malware that ESET researchers have now analyzed and named DynoWiper
Jan 23, 2026 UTC
threat-intelvia WeLiveSecurity (ESET)
OceanLotus: From external espionage to domestic targeting
A shift in operational pattern of the infamous Vietnam-aligned APT group
Jun 11, 2026 UTC
threat-intelvia WeLiveSecurity (ESET)
ESET APT Activity Report Q4 2025–Q1 2026
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026
May 28, 2026 UTC
threat-intelvia WeLiveSecurity (ESET)
Webworm: New burrowing techniques
ESET researchers describe new tools and techniques that the Webworm APT group recently added to its arsenal
May 20, 2026 UTC
threat-intelvia WeLiveSecurity (ESET)
FrostyNeighbor: Fresh mischief and digital shenanigans
ESET researchers uncovered new activities attributed to FrostyNeighbor, updating its compromise chain to support the group’s continual cyberespionage operations
May 14, 2026 UTC
threat-intelvia WeLiveSecurity (ESET)
As breakout time accelerates, prevention-first cybersecurity takes center stage
Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy.
Apr 7, 2026 UTC
threat-intelvia The Hacker News
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the...
Oct 27, 2026 UTC