INTELLIGENCE BRIEFS

Denial-of-Service in Docker Desktop grpcfuse Kernel Module (CVE-2026-8936) Risks Local Container Environments

Hackers Exploit Meta AI Support Chatbot to Hijack Instagram Accounts

Survey Reveals Widespread Use of Advanced Obfuscation and Anti‑Analysis Protections in 2.5 M Android Apps

Qualys Launches Enterprise Risk Operating Center (ROC) to Consolidate Fragmented Security Signals

Microsoft Security Blog Publishes Updated Taxonomy of Agentic AI Failure Modes After Year of Red‑Team Testing

US Companies Pilot Chinese DeepSeek AI Amid Rising Silicon Valley Costs, Sparking Data Residency and Supply‑Chain Concerns

Cisco Talos Highlights AI‑Driven Threat Hunting Evolution and Operational Endurance

Microsoft 365 Android Apps Contain Debug Flag Allowing Silent Token Harvesting

China‑Linked TA4922 Expands Phishing Attacks to U.K., Germany, Italy, and South Africa

Mega‑Scale Event Security Lessons Highlight AI‑Driven Threats for Enterprises

UN World Food Programme Self‑Registration App Breach Exposes Data of 600,000 Gaza Households

FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads

Threat Actors Publish Playbook Targeting Gaps in Vulnerability Management Programs

Gamaredon Exploits WinRAR CVE‑2025‑8088 to Deploy Modular Spyware Against Ukrainian Targets

Researcher Publishes VS Code Zero‑Day Exploit Allowing GitHub Token Theft via github.dev

Operation KRATOS Dismantles Nine Illegal Streaming Crime Groups, 29 Arrests Across 13 Nations

Lazarus Group Launches npm Brandjacking Campaign, Injecting Malware into Developer Packages

Chinese Spy Networks Deploy Fake Job Ads to Harvest Military Personnel Data

Open‑Source Dependency Compromise Fuels Rapid Software Supply‑Chain Attacks

Common Android Auto Misconfigurations Lead to Feature Loss and Connectivity Issues