Threat Intelligence

Find our latest news, analyses and insights on cybersecurity, emerging threats and digital security issues.

IA offensive : 44 agents IA automatisent des attaques contre des organisations japonaises

Artificial Intelligence, Threat Intelligence

By Defensy
October 28, 2026

Offensive AI: 44 AI Agents Automate Attacks on Japanese Organizations

In a report published on October 27, 2026, the TrendAI research team (Trend Micro) documents three attack infrastructures primarily targeting Japan, each illustrating a different level of AI use. In the most advanced case,...

More Details

Apple corrige 286 failles et étend aux anciens iPhone le correctif d’une zero-day CoreGraphics

Threat Intelligence

By Defensy
October 26, 2026

Apple Brings Exploited CoreGraphics Zero-Day Fix to Older iPhones

On October 26, 2026, Apple released a new wave of security updates across iOS, iPadOS, macOS, tvOS, watchOS, visionOS and Safari. The SANS Internet Storm Center counts 304 vulnerabilities fixed across these releases. The...

More Details

PHP2Shell : deux failles critiques dans le cœur de PHP permettent une exécution de code à distance

Threat Intelligence

By Defensy
October 21, 2026

PHP2Shell: Two Critical PHP Core Flaws Enable Remote Code Execution

On October 21, 2026, the PHP team shipped emergency updates for “PHP2Shell”, two critical vulnerabilities buried in the PHP engine itself. They let an unauthenticated attacker execute code remotely on a web server, before...

More Details

Threat Intelligence

By Defensy
September 14, 2026

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

On September 10, 2026, GitLab shipped a critical fix for CVE-2026-85706, a path traversal flaw rated 10.0 on the CVSS scale. It lets an unauthenticated attacker read arbitrary files from a self-managed GitLab server....

More Details

Threat Intelligence

By Defensy
September 14, 2026

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

On September 10 and 11, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. They affect three products found in many enterprise...

More Details

Threat Intelligence

By Defensy
September 14, 2026

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

On September 11, 2026, Socket’s threat research team revealed that a browser extension popular with Twitch viewers, “Twitch Enhanced Viewer | JeetBot”, was sending its users’ OAuth tokens to proxies run by a commercial...

More Details