Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
2 / 2 results
highperson_alertThreat Actorperson_alertThreat Actor
Canto Incognito Targets AI/LLM Infrastructure for Crypto Mining Botnet
Canto Incognito is a financially motivated threat actor attributed with moderate confidence to an Italian-speaking operator based on Italian-language artifacts and netflow indicators.
The Hacker News7 Oct · 13:33 UTC
highbug_reportVulnerabilitybug_reportVulnerability
PoeLLM botnet compromises 3,400+ AI servers for cryptomining
Exposed AI services including LiteLLM, Ollama, Gotenberg PDF converter, Gitea development toolkit, and Ivanti Sentry. Over 3,400 servers compromised globally, primarily in the United States and Western Europe.
BleepingComputer7 Oct · 13:04 UTC