Please turn JavaScript on

CybelAngel

We bring you the latest updates from CybelAngel through a simple and fast subscription.

We can deliver your news in your inbox, on your phone or you can read them here on this website on your personal news page.

Unsubscribe at any time without hassle.

CybelAngel's title: External Threat Intelligence | CybelAngel

Is this your feed? Claim it!

Publisher:  Unclaimed!
Message frequency:  0.72 / day

Message History

On Friday, November 6, SonicWall published an advisory fixing seven SonicOS vulnerabilities. One of them, CVE-2026-19868 (CVSS 7.1), lets attackers skip SAML sign-in on the SSL VPN, MFA included, and CISA says it is already exploited. BleepingComputer has the details. No panic needed, just a firmware upgrade and a few uncomfortable questions. Here are the […]

The post ...


Read full story

In June, investigators seized 326 servers in one operation against the infostealers that feed ransomware gangs. In July, two members of Scattered Spider went to prison for five and a half years each. In October, researchers followed $6.36 billion across ten blockchains after the Binance theft, while another team read an Iran-linked actor’s command center […]

The post <...


Read full story

Here are the main stories you missed last week. Key takeaways 1. Zyxel: The exploit behind 996 compromised GS1900 switches still worked after the patch everyone was told to install The headline: Zyxel patched CVE-2026-107441, a CVSS 8.8 out-of-bounds write in the web management interface of its GS1900 switches. Zyxel describes the attacker as LAN-based […]

The post


Read full story

A vendor data breach is a security incident at a supplier, service provider, or software platform that exposes your data or gives attackers a route into your environment. Your response clock starts when you become aware of it, not when the vendor finishes its investigation. This guide covers the six questions to answer in the […]

The post


Read full story

The exploits were old. The delivery route was a marketing script. On November 4, French security firm Sekoia detailed Poisoned Source, a watering hole campaign it links to Russia’s APT29 with moderate to high confidence. The attackers hijacked a Ukrainian web analytics tracker for a week and used it to push iOS and Android exploit […]

The post


Read full story