Loading the current evidence view. Navigation and account controls remain available.
Intelligence reports
Loading the current evidence view. Navigation and account controls remain available.
Ordering reports and their extracted indicators.
Applying the current filters and ordering.
Forensia intelligence desk · 4,092 source documents · 4,061 stories
Live reporting, advisories and research arranged by editorial readiness. Thin sources stay visible, but they are clearly marked instead of being presented as complete analysis.
On this page
40 documents
Briefs ready now
40
Multi-source clusters
0
Publisher text withheld
40
Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
How to Secure Enterprise AI: From Adoption to Incident Readiness
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Attackers Steal METR API Key and Consume AI Credits Worth About $600,000
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
story desk
clustered evidenceWatchGuard Patches Critical Vulnerabilities
developing · new
Microsoft Rolls Out 22 Fresh Security Patches
source only · new
Google Patches 6th Chrome Zero-Day of 2026
developing · new
Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities
developing · new
Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities
source only · new
filter by source
sharing classification
TLP describes sharing sensitivity, not copyright permission. Reader text is limited to source-provided descriptive material; original reporting stays with its publisher.