Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Threat intelligence

Recently added to CISA KEV (confirmed exploited, per CISA)

CVEAddedDue dateRansomware use
CVE-2026-463002026-10-282026-10-31not reported
CVE-2026-417092026-10-282026-11-11not reported
CVE-2026-1114972026-10-272026-11-10not reported
CVE-2026-483562026-10-272026-11-10not reported
CVE-2026-1096182026-10-262026-10-29Unknown
CVE-2026-1096192026-10-262026-10-29Unknown
CVE-2026-1146252026-10-232026-10-26Unknown
CVE-2026-1104472026-10-232026-10-26Unknown
CVE-2026-1069312026-10-202026-10-23Unknown
CVE-2026-966562026-10-202026-10-23Unknown

Threat reporting

supply-chain
GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub
malware
Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
threat-intel
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
ransomware
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
malware
Fake ChatGPT, Claude apps spread malware via signed AI binaries
malware
Hiding Capabilities in AI Models
threat-intel
Training AIs to Solve CAPTCHAs
threat-intel
Sednit reloaded: Back in the trenches
threat-intel
Protecting education: How MDR can tip the balance in favor of schools
threat-intel
This month in security with Tony Anscombe – February 2026 edition
malware
PromptSpy ushers in the era of Android threats using GenAI
ransomware
Naming and shaming: How ransomware groups tighten the screws on victims