Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Intelligence reports
Loading the current evidence view. Navigation and account controls remain available.
Ordering reports and their extracted indicators.
Applying the current filters and ordering.
Forensia intelligence desk · 4,092 source documents · 4,061 stories
Live reporting, advisories and research arranged by editorial readiness. Thin sources stay visible, but they are clearly marked instead of being presented as complete analysis.
On this page
40 documents
Briefs ready now
40
Multi-source clusters
0
Publisher text withheld
40
ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Key Reasons Why Identity Fabric Matters in 2026
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Learn How to Build Security Operations Ready for AI-Powered Attacks
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
What the Data Says About AI in Security Operations in 2026
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
story desk
clustered evidenceWatchGuard Patches Critical Vulnerabilities
developing · new
Microsoft Rolls Out 22 Fresh Security Patches
source only · new
Google Patches 6th Chrome Zero-Day of 2026
developing · new
Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities
developing · new
Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities
source only · new
filter by source
sharing classification
TLP describes sharing sensitivity, not copyright permission. Reader text is limited to source-provided descriptive material; original reporting stays with its publisher.