Topic

Threat Intelligence: news, advisories and analysis

8 articlesUpdated 16 Oct 2026

CyberSecureToday covers Threat Intelligence across 8 articles published between 8 Sep 2026 and 16 Oct 2026. The coverage includes 3 vulnerability advisories, 1 incident or breach report and 3 analysis or guidance pieces. 3 advisories are rated critical or high severity.

Stories on Threat Intelligence most often intersect with Detection Engineering, CERT-In and AI Security, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Autonomous AI Agents Infiltrate Live Production Systems in Escalating Exploitation Wave Across Indian Enterprises”, was published 16 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Autonomous AI Agents Infiltrate Live Production Systems in Escalating Exploitation Wave Across Indian Enterprises
CERT-In advisory CIAD-2026-0049 reveals autonomous AI agents infiltrated live systems, reading confidential data as threat actors weaponize agentic tooling.
Priya Raman16 Oct 202610 min read
ThreatsCloud & SaaSHigh
TASK#STOMP Malware Campaign Deploys Living-off-the-Land PowerShell Backdoor with Timestomping and Redundant Task Scheduler Persistence
Securonix uncovers TASK#STOMP campaign leveraging Living-off-the-Land VBScript stagers, masqueraded Scheduled Tasks, and resilient dual-PowerShell backdoors.
Daniel Okafor21 Sep 202615 min read
ThreatsCloud & SaaSCritical
Anthropic Threat Report: State-Sponsored Actors Exploit Claude for Automated Malware Evasion
Anthropic threat intelligence reveals nation-state groups, including Midnight Blizzard, attempted to weaponize Claude to automate malware obfuscation and EDR evasion.
Mei-Lin Chen17 Sep 202611 min read
ResearchGov & Defence
Anthropic says AI is moving from assistant to orchestrator in cyber operations
Anthropic’s September threat report describes how actors used Claude for reconnaissance, intrusion support, tool rebuilding and parallelized cyber operations.
Mei-Lin Chen12 Sep 20267 min read
NewsGov & Defence
A CVSS 10.0 ERP Flaw Your Scanner Will Never Report: The CERT-In Blind Spot
CERT-In scored an unauthenticated RCE in Manacle ERP at CVSS 10.0. The CVE is in NVD, but with no CPE data your scanner cannot match it. Here is how to fix that.
CST Editorial Desk11 Sep 20266 min read
ResearchEducation & Academia
Eight new ransomware brands in one week: why tracking group names has stopped working
One tracker logged 315 leak-site posts from 40 groups in a single August week, eight of them new. Brand-based detection cannot keep pace. Here is what to instrument instead.
Daniel Okafor10 Sep 20266 min read
ResearchEducation & Academia
Iran-Linked Screening Serpens Shipped Six RAT Builds in Ten Weeks
Unit 42 documented six new RAT variants from Iran-nexus Screening Serpens between February and April 2026. The hashes rotate; the AppDomainManager config file does not.
Mei-Lin Chen9 Sep 20266 min read
Cyber AttackGov & Defence
Gunra ransomware: what AA26-222A actually gives your detection engineers
Six agencies detailed Gunra's Fortinet entry, its forticloud-sync backdoor and an MFA bypass planted in a VDI server. Here is how to turn that into detection coverage.
Daniel Okafor8 Sep 20266 min read