Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Vulnerabilities & Exploits

GreyNoise Adds Vendor CVE & Tag Spike Feeds for Rapid Threat Detection

GreyNoise Adds Vendor CVE & Tag Spike Feeds for Rapid Threat Detection

GreyNoise has released two new event streams—Vendor CVE Spike and Tag Spike—that automatically flag sudden surges in Internet‑wide traffic targeting freshly disclosed vulnerabilities. The feeds pull data from GreyNoise’s global sensor network, correlate it with vendor‑specific CVE identifiers and custom tags, and surface spikes that

Cyber Threats surge as AI tools expose data 🚨. New vendor CVE spikes and cloud actor tracking reshape defenses 🤖.

Hello, here is your Daily Cybersecurity & AI Threat Intelligence newsletter for 2026-02-10. Today's headlines * GreyNoise launches real‑time Vendor CVE and Tag Spike alerts. * Unit42 uncovers extensive global espionage campaigns exploiting multiple vulnerabilities. * AI chat agents can inadvertently leak malicious link previews. * Novel cloud‑log techniques reveal

CrowdStrike Boosts Linux Web‑Shell Detection with Real‑Time AI Threat Hunting

CrowdStrike Boosts Linux Web‑Shell Detection with Real‑Time AI Threat Hunting

CrowdStrike’s latest Falcon update adds dedicated modules that continuously monitor script execution on Linux hosts. By applying AI‑driven behavior analysis, the platform can spot the characteristic file reads, command injections, and network callbacks of modern web‑shells as they happen, flagging them before an attacker establishes persistence. For

Malware & Ransomware

Digital Parasites Keep Ransomware Inside Networks Longer, Extending Dwell Time

Digital Parasites Keep Ransomware Inside Networks Longer, Extending Dwell Time

Picus Security’s Red Report, cited by The Hacker News, reveals a tactical evolution from flash‑in‑the‑pan ransomware strikes to “digital parasite” operations. Instead of encrypting files immediately, adversaries embed stealthy footholds, linger for weeks or months, and slowly siphon data while subtly manipulating systems. This covert presence

Threat Intelligence

APT TA423 Watering‑Hole Injects ScanBox Keylogger into News Sites

A Chinese‑based threat group identified as APT TA423 has been running a watering‑hole campaign that compromises high‑traffic news websites frequented by professionals in targeted industries. The attackers inject the ScanBox reconnaissance framework—a lightweight keylogger and credential‑harvesting tool—into the pages of these sites. When a

Threat Intelligence

CISA Flags Surge of Public Attack Tools Lowering Threat Actor Barriers

The Cybersecurity and Infrastructure Security Agency (CISA) released an advisory that catalogs dozens of freely available tools that have already been weaponized in real‑world incidents. These include ransomware kits, credential‑dumping utilities, exploit frameworks, and post‑exploitation modules that are now hosted on public repositories, underground forums, and even

Threat Intelligence

Romanian Oil Pipeline Operator Conpet Disrupted by Cyber Intrusion

Romanian Oil Pipeline Operator Conpet Disrupted by Cyber Intrusion

On 9 February, Check Point’s Threat Intelligence Report documented a successful cyber intrusion against Conpet, Romania’s national oil pipeline operator. Attackers gained access to the company’s IT environment, forcing critical services offline and severing communication channels with partners, regulators, and customers. The breach left Conpet unable to