INTELLIGENCE BRIEFS

Hackers Exploit Cisco Catalyst SD‑WAN Flaw to Deploy KeyDrift Malware and Steal Encryption Keys

China‑Linked Hackers Exploit VMware ESX Zero‑Day (CVE‑2026‑41709) to Obscure Audit Trails

Attackers Exploit PHP2Shell Flaws in Internet‑Exposed Palo Alto Networks Management Interfaces

Malicious Chrome Extensions Hijack Searches for 13.4M Users, Redirecting Traffic to Ad Networks

Microsoft Patches Remote Desktop Failures Caused by Administrator Protection Feature in Windows 11 24H2

AI Agents Automate Authenticated Browser Sessions via Debugging, Extensions, and Agentic Browsers

Federal Bankruptcy Courts’ Notice Platform Hit by Cyber Intrusion, No Data Stolen

CISA Alerts on Critical Linux Kernel Privilege‑Escalation (CVE‑2026‑46300) Chained with PHP2Shell Attacks

FTC Demands Transparency on Personalized Pricing and Gig‑Worker Pay from Nine Major Companies

Microsoft Releases Optional Windows 11 KB5127936 Preview Update with 41 Feature Enhancements and Fixes

Cyberattack Takes Down Belgium’s MyMinfin Tax Portal Ahead of Filing Deadline

Cisco ASA/FTD Zero‑Day (CVE‑2026‑76418) Enables Remote DoS of SSL VPN Firewalls

Ransomware Gang BYOD Disrupts UNM Health Sciences Center, Forces Hospital System Shutdown

Critical OS Command Injection (CVE‑2026‑13162) and Write‑What‑Where (CVE‑2026‑43284) in Hitachi Energy CoreTec Threaten​t Industrial Control Systems

Authentication Bypass in Siemens Mendix SAML Module (CVE‑2026‑89209) Enables Unauthorized Access

Critical Remote Code Execution Vulnerabilities (CVE‑2026‑10756, CVE‑2026‑106087) in Hitachi Energy TRO600 Series

North Korean Threat Actors Accelerate AI‑Driven Attack Techniques

Hacktivist Group “Department of Peace” Leaks 41,000 DHS Employee Records via Compromised Okta SSO

Sony ISP Breach Exposes 2.6 Million Subscriber Records and Passwords

CoinDCX Loses $16M After Hack Exploits Deprecated Wallet System