The top cyber threats from the last 24 hours — aggregated from 32 authoritative sources, deduplicated, ranked by priority, and refreshed every 5 minutes.
2 critical and 1 high-severity threats active now.
2 critical and 1 high-severity threats active now.
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote…
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326, is…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below…
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation's data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service. [...]
AI helped researchers exploit a Discourse flaw in under 72 hours, hijacking OpenAI staff accounts and exposing the risks of shared SSO. Three researchers at Hacktron just took over ChatGPT and Codex accounts belonging to OpenAI staff. The attack did not rely…
Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository. The chain began with a bug in the…
BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties…
Google Gemini escaped a cyber test environment, reached three real companies, and exposed why AI security tests need strict isolation. Google has confirmed that one of its Gemini models broke into the systems of three real companies during a cybersecurity…
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach research, including Verizon's annual Data Breach Investigations Report. This…
A Brevo supply-chain attack used compromised Cloudflare access to inject malware into websites, potentially affecting over 100,000 sites. Brevo, formerly known as Sendinblue, is a French cloud-based marketing and customer communication platform whose clients…
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026 and transferred more than $10.7 million in stolen cryptocurrency to North Korea. [...]
The company has secured over $7 million in contracts with US government agencies, including the US Space Force, the US Navy, and DARPA. The post TigerByte Cyber Emerges From Stealth With $3 Million in Funding appeared first on SecurityWeek.
High time to stop kicking the security can down the road, investor tells The Reg
TI News Feed is a live threat intel news feed — a single dashboard that aggregates the world's most authoritative cyber threat intelligence (TI) sources. Track zero-day vulnerabilities, critical CVEs, ransomware campaigns, data breaches and advanced persistent threat (APT) activity from the last 24 hours — automatically deduplicated and ranked by priority, refreshed every 5 minutes. It is the fastest way to stay on top of breaking threat intel without checking dozens of sources by hand.
Severity, recency and source authority combine into a single 0–100 priority score so the most urgent threats rise to the top automatically.
Near-duplicate coverage of the same CVE or breach is collapsed to one representative story — no noise, no repeats.
Only threat activity from the last 24 hours, refreshed every 5 minutes, so the board always reflects the current state of play.
Government CERTs, vendor threat-research teams and the most trusted security newsrooms — all in one console.
Security teams are flooded with cyber threat intelligence from hundreds of sources. The challenge is not access to information — it is signal. TI News Feed solves the noise problem by scoring every story against the signals that drive real-world risk: is the vulnerability being actively exploited in the wild, does it allow unauthenticated remote code execution, is it tied to a known ransomware operator or nation-state actor, and how recently was it disclosed. The result is a clear, continuously updated view of the threats that actually demand attention right now.
Whether you run a security operations center, hunt threats, manage vulnerabilities, or simply want to stay ahead of breaking cybersecurity news, TI News Feed gives you a single pane of glass. The Top Threats column ranks the highest-priority intelligence, while the Latest Intel column delivers a live chronological stream — both filtered to the last 24 hours and free of duplicate reporting. Every item links straight to the original source for full context and verification.
Threat intel — short for threat intelligence (TI) — is curated, evidence-based information about current and emerging cyber threats: newly disclosed vulnerabilities (CVEs), zero-day exploits, ransomware campaigns, data breaches, malware and nation-state (APT) activity. TI News Feed turns that raw threat intel into a single, live, priority-ranked news feed so you can see what matters at a glance.
TI stands for Threat Intelligence. TI News Feed is a free threat intel news feed that aggregates the most authoritative cyber threat intelligence sources, removes duplicate reporting, and ranks every story by priority — refreshed every 5 minutes.
A threat intelligence feed is a continuously updated stream of information about emerging cyber threats — newly disclosed vulnerabilities (CVEs), zero-day exploits, ransomware campaigns, data breaches, malware, and nation-state (APT) activity. TI News Feed aggregates dozens of the most authoritative threat intelligence feeds into a single real-time dashboard so security teams can see what matters without checking every source individually.
Every story is scored from 0 to 100 by blending three signals: severity (weighted keywords such as zero-day, actively exploited, remote code execution, critical, ransomware and supply chain), recency within the last 24 hours, and the authority of the publishing source (CERTs and vendor research teams rank highest). The highest-scoring stories surface in the Top Threats column.
TI News Feed refreshes automatically every 5 minutes. The server re-aggregates all sources on a 5-minute cache, and the dashboard polls for fresh intelligence in the background so you always see threat activity from the last 24 hours without reloading the page.
Yes. The same breach or CVE is often reported by many outlets within minutes. TI News Feed detects near-duplicate stories using canonical-URL matching, shared CVE identifiers and title-similarity analysis, then keeps only the single highest-priority copy so the feed stays clean and signal-dense.
TI News Feed pulls from government CERTs (CISA, NCSC), incident responders (SANS ISC), vendor threat-research teams (Cisco Talos, Palo Alto Unit 42, Microsoft MSRC, Google Project Zero, Check Point, SentinelLabs, ESET) and leading security newsrooms (Krebs on Security, BleepingComputer, The Record, Dark Reading and more).
Yes. TI News Feed is a free, open threat-intelligence dashboard. It links directly to each original source so you can read the full report and verify details first-hand.
32 authoritative cyber threat intelligence feeds — government CERTs, vendor threat-research teams and trusted security newsrooms — aggregated in real time.