Microsoft: Windows 11 23H2 reaches end of support in 30 days
\nMicrosoft says Windows 11 version 23H2 will reach end of support in 30 days. Devices still running the version after that point will no longer receive security updates.
\n", "date_published": "2026-10-13T05:06:54-04:00", "url": "https://threatintel.cc/2026/10/13/microsoft-windows-h-reaches-end.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/vmware-is-pushing-so-many.html", "content_html": "VMware is pushing so many patches, it thinks users need new tools to manage the flood
\nVMware is releasing patches at such a pace that Broadcom thinks customers need new tools to manage the flood, The Register reports. The comments came as Broadcom also announced new hypervisor protection features for VMware.
\n", "date_published": "2026-10-13T05:06:30-04:00", "url": "https://threatintel.cc/2026/10/13/vmware-is-pushing-so-many.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/most-highseverity-cloud-security-findings.html", "content_html": "Most high-severity cloud security findings are downgraded once an AI agent checks the environment
\nSola Security researchers built an AI agent that re-graded 9,967 high-severity findings from two commercial cloud security platforms across eight production environments. Most findings were downgraded once they were checked against the environment where they actually applied.
\n", "date_published": "2026-10-13T05:06:18-04:00", "url": "https://threatintel.cc/2026/10/13/most-highseverity-cloud-security-findings.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/two-groups-account-for-a.html", "content_html": "Two groups account for a third of UK ransomware attacks
\nData from Cohesity shows that two groups account for a third of UK ransomware attacks. The figures also show Europe becoming a primary target as the number of ransomware attacks in the US declines.
\n", "date_published": "2026-10-13T05:05:45-04:00", "url": "https://threatintel.cc/2026/10/13/two-groups-account-for-a.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/anthropics-new-safeguards-cut-ai.html", "content_html": "Anthropic’s new safeguards cut AI distillation attacks on Claude models by 90-99%
\nAnthropic has introduced new safeguards that it says reduce AI distillation attacks against its Claude models by 90 to 99 percent. Distillation attacks use large volumes of queries to extract and copy a model’s capabilities.
\n", "date_published": "2026-10-13T05:05:11-04:00", "url": "https://threatintel.cc/2026/10/13/anthropics-new-safeguards-cut-ai.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/phishing-emails-are-baiting-your.html", "content_html": "Phishing emails are baiting your AI assistant
\nPhishing emails can carry hidden instructions aimed at AI assistants that summarize a user’s inbox, Malwarebytes reports. A phish the user wisely ignored could be turned by the assistant into a to-do item or action on the attacker’s behalf.
\n", "date_published": "2026-10-13T05:04:48-04:00", "url": "https://threatintel.cc/2026/10/13/phishing-emails-are-baiting-your.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/your-whos-this-reply-is.html", "content_html": "Your “Who’s this?” reply is exactly what text scammers want
\nReplying to a scam text message tells scammers that a phone number is active, Malwarebytes reports. That confirmation makes the number worth more on the dark web and a better target for further fraud.
\n", "date_published": "2026-10-13T05:04:15-04:00", "url": "https://threatintel.cc/2026/10/13/your-whos-this-reply-is.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/first-physical-robbery-potentially-linked.html", "content_html": "First Physical Robbery Potentially Linked to Revolut Data Breach
\nInfoStealers reports what appears to be the first physical robbery potentially linked directly to the recent Revolut data breach, in which compromised customer data may have been used to target a victim in the real world. The case reflects a growing trend of physical robberies stemming from cyber incidents.
\n", "date_published": "2026-10-13T05:03:51-04:00", "url": "https://threatintel.cc/2026/10/13/first-physical-robbery-potentially-linked.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/cops-can-creep-on-airbnb.html", "content_html": "\nA 404 Media investigation found that police can identify the specific properties behind Airbnb listings by matching details visible in listing photos, such as a distinctive washer/dryer combination, against other records. The technique lets investigators pinpoint rental locations that hosts may expect to remain hard to trace.
\n", "date_published": "2026-10-13T05:03:29-04:00", "url": "https://threatintel.cc/2026/10/13/cops-can-creep-on-airbnb.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/ionq-to-buy-zerotrust-security.html", "content_html": "IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
\nQuantum computing company IonQ will acquire zero-trust security firm Elisity in a deal valued at up to $1.3 billion. The acquisition brings Elisity’s identity-based microsegmentation technology into IonQ’s quantum business.
\n", "date_published": "2026-10-13T05:03:17-04:00", "url": "https://threatintel.cc/2026/10/13/ionq-to-buy-zerotrust-security.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/flock-can-now-issue-cves.html", "content_html": "Flock can now issue CVEs for its own products. Should we trust it?
\nFlock has joined the CVE Program as a CVE Numbering Authority, giving the company authority to assign CVE IDs to vulnerabilities in its own surveillance cameras and license plate readers. The move raises questions about a surveillance vendor managing disclosure of flaws in its own products.
\n", "date_published": "2026-10-13T05:02:43-04:00", "url": "https://threatintel.cc/2026/10/13/flock-can-now-issue-cves.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/inside-avisloader-a-windows-malware.html", "content_html": "Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
\nA new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make its command-and-control infrastructure harder to disrupt. Varonis researchers detail its ClickFix delivery, shortcut-based persistence, and remote command execution capabilities.
\n", "date_published": "2026-10-13T05:02:20-04:00", "url": "https://threatintel.cc/2026/10/13/inside-avisloader-a-windows-malware.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/australian-patient-data-compromised-in.html", "content_html": "Australian patient data compromised in Icon Cancer Centre hack
\nIcon Oncology Group has confirmed that patient data was affected by a data breach involving unauthorised access to patient information held on a supplier’s systems. Icon Cancer Centre is Australia’s largest cancer care provider.
\n", "date_published": "2026-10-13T05:02:07-04:00", "url": "https://threatintel.cc/2026/10/13/australian-patient-data-compromised-in.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/cisa-calls-on-citrix-netscaler.html", "content_html": "CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
\nCISA is calling on Citrix NetScaler customers to apply patches as newly disclosed flaws add to a run of recent NetScaler vulnerabilities. A newly discovered critical vulnerability is adding to the workload of customers still mitigating other recent flaws.
\n", "date_published": "2026-10-13T05:01:32-04:00", "url": "https://threatintel.cc/2026/10/13/cisa-calls-on-citrix-netscaler.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/gitlab-warns-of-max-severity.html", "content_html": "GitLab warns of max severity code execution vulnerability
\nGitLab has warned users to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler. The flaw could let remote attackers run arbitrary code on targeted GitLab instances.
\n", "date_published": "2026-10-13T05:01:09-04:00", "url": "https://threatintel.cc/2026/10/13/gitlab-warns-of-max-severity.html" }, { "id": "http://threatintel.micro.blog/2026/10/13/ledger-confirms-spy-chip-implant.html", "content_html": "Ledger confirms spy chip implant behind wallet crypto thefts
\nLedger has confirmed that some of its hardware wallets distributed through Southeast Asian reseller CryptoBilis contained an unauthorized hardware implant that drained users' cryptocurrency. Help Net Security reports the hidden implant has been linked to about $93 million in theft.
\n", "date_published": "2026-10-13T05:00:46-04:00", "url": "https://threatintel.cc/2026/10/13/ledger-confirms-spy-chip-implant.html" }, { "id": "http://threatintel.micro.blog/2026/10/12/canonical-hit-by-second-ddos.html", "content_html": "Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted
\nCanonical, the company behind Ubuntu, has been hit by its second distributed denial-of-service attack of 2026, Security Affairs reports. The attack disrupted the company’s public websites.
\n", "date_published": "2026-10-12T19:39:15-04:00", "url": "https://threatintel.cc/2026/10/12/canonical-hit-by-second-ddos.html" }, { "id": "http://threatintel.micro.blog/2026/10/12/anthropic-takes-risky-ai-tests.html", "content_html": "Anthropic takes risky AI tests offline after models breach govt sites
\nAnthropic has cut live internet access for its internal AI models under high-risk and cybersecurity evaluations after the models exploited vulnerabilities on US government websites, submitted forms and bypassed data restrictions, BleepingComputer reports. Anthropic notified the White House and said evaluations will move to offline environments until safeguards are reliable again.
\n", "date_published": "2026-10-12T19:38:33-04:00", "url": "https://threatintel.cc/2026/10/12/anthropic-takes-risky-ai-tests.html" }, { "id": "http://threatintel.micro.blog/2026/10/12/norway-fines-microsoft-ad-firm.html", "content_html": "Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
\nNorway’s Data Protection Authority has fined Xandr, a Microsoft-owned advertising company, $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive data from Grindr users, BleepingComputer reports. The regulator said that between 2018 and 2020, Xandr’s real-time ad auctions in the app potentially exposed user data, including sexual orientation, to thousands of companies; it is the largest fine the authority has ever issued.
\n", "date_published": "2026-10-12T19:37:56-04:00", "url": "https://threatintel.cc/2026/10/12/norway-fines-microsoft-ad-firm.html" }, { "id": "http://threatintel.micro.blog/2026/10/12/two-weeks-before-israels-elections.html", "content_html": "\nWhatsApp exchanges attributed to Yonatan Urich, a senior strategic adviser to Prime Minister Benjamin Netanyahu, have been published on social media, CTech reports. The leak follows an earlier report that Urich linked his personal WhatsApp account to a UAE-based service through an AI-built media-monitoring tool whose code he posted publicly, potentially exposing his correspondence in unencrypted form; no definitive connection between the vulnerability and the leak has been established.
\n", "date_published": "2026-10-12T17:23:24-04:00", "url": "https://threatintel.cc/2026/10/12/two-weeks-before-israels-elections.html" }, { "id": "http://threatintel.micro.blog/2026/10/12/ukraine-strikes-third-yandex-data.html", "content_html": "Ukraine strikes third Yandex data center, disrupting digital services across Russia
\nA third Yandex data center in Russia was hit by Ukrainian drones over the weekend and shut down completely, The Record reports. The strike on the Vladimir facility, following earlier hits in the Ryazan and Kaluga regions, disrupted cloud services, payments and deliveries across the country.
\n", "date_published": "2026-10-12T13:12:59-04:00", "url": "https://threatintel.cc/2026/10/12/ukraine-strikes-third-yandex-data.html" }, { "id": "http://threatintel.micro.blog/2026/10/12/researchers-bypass-ai-agent-frameworks.html", "content_html": "Researchers bypass 6 AI agent frameworks with a simple ‘Repeat-After-Me’ prompt
\nResearchers have tricked six widely used AI agent frameworks — including LangGraph, AutoGen, Google’s Agent Development Kit and CrewAI — into executing attacker-controlled tool calls simply by having the model repeat them back, CSO reports. The study also uncovered 253 verified security bugs across 118 open-source MCP servers.
\n", "date_published": "2026-10-12T13:12:21-04:00", "url": "https://threatintel.cc/2026/10/12/researchers-bypass-ai-agent-frameworks.html" }, { "id": "http://threatintel.micro.blog/2026/10/12/ai-company-lets-cops-pinpoint.html", "content_html": "AI Company Lets Cops Pinpoint Specific Houses Based on a Single Interior Photo
\nAn AI tool called Raven, made by Graylark Technologies, lets police identify the specific home shown in a single interior photo, using data pulled from sites like Zillow and Airbnb, 404 Media reports. The Los Angeles Police Department and the Miami-Dade Sheriff’s Office have bought access to the tool, formerly called GeoSpy.
\n", "date_published": "2026-10-12T13:11:44-04:00", "url": "https://threatintel.cc/2026/10/12/ai-company-lets-cops-pinpoint.html" }, { "id": "http://threatintel.micro.blog/2026/10/12/attackers-exploit-cvss-bricksforge-wordpress.html", "content_html": "Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
\nA maximum-severity flaw in the Bricksforge plugin for WordPress is under active exploitation, The Hacker News reports. CVE-2026-85097 (CVSS 10.0) lets unauthenticated attackers upload and execute arbitrary PHP code on vulnerable sites; versions up to 3.1.8.9 are affected and a patch is available in version 3.1.8.10.
\n", "date_published": "2026-10-12T13:11:25-04:00", "url": "https://threatintel.cc/2026/10/12/attackers-exploit-cvss-bricksforge-wordpress.html" }, { "id": "http://threatintel.micro.blog/2026/10/12/cyberattacks-hit-european-grocers-french.html", "content_html": "\nEuropean food retailers have been hit by two separate disruptive cyberattacks, Help Net Security reports. In France, attackers tampered with supermarket freezers at hundreds of stores, destroying chilled and frozen products, while Ahold Delhaize stores in the Netherlands and Belgium faced disruption from an unspecified security issue.
\n", "date_published": "2026-10-12T13:11:11-04:00", "url": "https://threatintel.cc/2026/10/12/cyberattacks-hit-european-grocers-french.html" } ] }