INTELLIGENCE BRIEFS

Embedded Browser Flaws in VS Code, Cursor, Copilot, Codex, and Claude Desktop Expose Developer Credentials

Volt Typhoon Leverages ‘Silent Train’ Relay Network to Exploit Zero‑Days in Enterprise Control Planes

Exploitation Attempts Detected Against Critical Oracle E‑Business Suite SQL Injection (CVE‑2026‑101767)

Chinese APT Warp Panda Chains VMware ESX Zero‑Day (CVE‑2026‑41709) with PHP2Shell & Fragnesia to Root Firewalls

Vishing Attacks Impersonating IT Help Desks Surge as Ransomware Activity Rises in Q3 2026

AI‑Enabled NIK C2 Framework Leverages OpenAI API for Real‑Time Data Theft and Ransomware

Ransomware Group BYOD Disrupts UNM Health Sciences Center, Diverts Ambulances and Exposes Student & Employee Data

Anthropic’s Claude Model Discovers Chained Zero‑Day Vulnerabilities Across Chrome, Safari, Android, Windows, and Linux

Shadowy AI Relay Disables Security Features in OpenAI Codex and Anthropic Claude for China

Cyber Vulnerabilities Surge Across Italian Organizations Without Clear Attribution

AI Adoption in Hospital Corridors Elevates Security Risks for Patient Care

Fraudsters Launch AI‑Powered Prediction‑Market Scams, Offering Affiliate‑Ready Platforms

Critical Remote Code Execution Vulnerability (CVE‑2026‑98432) in Linux Kernel TCP Stack Affects Ubuntu, RHEL and Others

Fake AI Desktop Apps Signed with Legitimate Certificates Deploy Cryptocurrency Miners

Google’s Gemini 4 Carbon AI Model Tops Benchmarks for Vulnerability Discovery, Exploitation, and Patching

Telegram Android Vulnerability Allows Remote Code Execution via Voice Calls

26,400 Valid Cloud & AI Credentials Exposed in Public Gitee Repositories

Active Exploitation of Cisco ASA/FTD VPN Flaw (CVE‑2026‑76418) Risks Firewall Availability

GitHub Introduces npm Firewall to Block Malicious Packages at Install Time

Critical Remote Code Execution in GitLab CI (CVE‑2026‑97229) Targeted on Alpine Linux’s GitLab Instance