Threat intelBrief2 min read
Researchers say the group planted malicious code on legitimate sites and a Ukrainian analytics service, then used known vulnerabilities to pull data from vulnerable phones.
Threat intelExploitedCVE-2025-43529CVSS 8.82 min read
Sekoia attributes a large-scale watering hole operation to APT29 with moderate-to-high confidence. The payloads chained already-patched browser and OS flaws, and none of them established persistence.
IncidentsBrief2 min read
The order covers DeepSeek, its affiliates and third-party products built on its technology, and gives agencies 60 days to request exceptions reviewed by CISA.
VulnerabilitiesCVE-2026-76466CVSS 9.82 min read
Cisco's October round covers Expressway Series, IOS XR, Snort 3 and Unified Communications, plus a local privilege escalation in Secure Client's Secure Firewall Posture module.
