Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
2 / 2 results
highbug_reportVulnerabilitybug_reportVulnerability
AhsayCBS backup flaws exploited to deploy XMRig miners and web shells
Ahsay AhsayCBS backup utility, all versions including the latest 10.3.4. Two vulnerabilities: CVE-2026-105133 (CVSS v4 5.5, improper authentication) and CVE-2026-105134 (CVSS v4 9.3, OS command injection).
CVE-2026-1051339 Oct · 10:47 UTC
highperson_alertThreat Actorperson_alertThreat Actor
ClickFix Abuses Steam Forums to Deliver XMRig Cryptominer
ClickFix is a threat actor conducting social engineering campaigns that leverage fake technical support content to distribute malware. The actor exploits user trust in community-driven platforms, specifically targeting gaming communities through Stea…
Steam25 Jul · 20:37 UTC