INTELLIGENCE BRIEFS

Coldcard Firmware Vulnerability Leads to $88 M Bitcoin Theft, Manufacturer Destroys Affected Inventory

Hackers Exfiltrate 31,000 Beneficial‑Owner Records from Liechtenstein Registry

Amgen Discloses Patient Data Theft from Third‑Party Cloud Providers

Russian State‑Sponsored Hackers Hijack Hotel Wi‑Fi Captive Portals to Phish Credentials and Deploy Espionage Malware

Cisco Talos Webinar Highlights Q2 2026 High‑Impact Incidents

Critical Authentication Bypass Vulnerability (CVE‑2026‑28323) Discovered in SolarWinds Web Help Desk

INC Ransomware Exploits SonicWall SMA 1000 VPN Flaws to Encrypt Victim Networks

Chinese Hacker Deploys DeepSeek‑Powered AI Agent to Autonomously Exploit Vulnerable Workflow Platforms

Simbian Launches AI Threat Hunt Agent to Fill Detection Gaps Across Enterprise Environments

Mimecast Launches AI Agent Risk Center to Govern Unsanctioned AI Tools

Malware Can Bypass Chrome’s Google Password Manager Passkeys, Hijacking User Accounts

$88M Bitcoin Theft Exposes Weak Randomness in Crypto Wallets, Undermining Access Controls

Ransomware Builder Leak, Remote‑Access Abuse, and Insider Keylogger Highlight Security Gaps in Brazilian Educational Institutions

CISA Issues Guidance on Secure Use of Open‑Source Software for Federal Agencies

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE iOS Malware via Fake AWS Sign‑In Pages

Critical Arbitrary File Read & RCE in Ruby on Rails Active Storage (CVE‑2026‑66066)

PNLD Breach Leaks UK Police & Government Contact Details on Dark Web

Qodana 2026.2 Adds Post‑Quantum Crypto Checks for JVM Code

Critical Vulnerability (CVE‑2026‑17583) in Thermo Fisher Applied Biosystems Software Enables Near‑Undetectable DNA File Tampering

Authentication Bypass (CVE‑2026‑18577) Lets Attackers Hijack N‑able N‑central RMM Servers