Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
2 / 2 results
highperson_alertThreat Actorperson_alertThreat Actor
ClickFix Operators Dominate Initial Access via Social Engineering
ClickFix operators are threat actors leveraging a social engineering technique that manipulates users into executing malicious commands through clipboard manipulation.
Microsoft1 Sep · 09:30 UTC
criticalbug_reportVulnerabilitybug_reportVulnerability
Ghost CMS SQL injection (CVE-2026-26980) exploited in ClickFix campaign
Ghost CMS Content API, all versions prior to patch. Over 700 sites confirmed compromised. Unauthenticated attackers can exploit the SQL injection vulnerability remotely.
CVE-2026-2698025 May · 10:02 UTC