Discussions, questions and news about Threat Intelligence from cybersecurity professionals on Cyberr.
0 members · 439 posts
George Botnaru — Senior Software Engineer
3/3 on today's Cyberr daily challenge. Senior level: network security, threat intelligence and cloud security. Try today's set. https://cyberr.ai/daily/8ed58eb1-2954-47e8-8968-8de0ec95acb3
· 3 reactions · 1 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
3/3 on today's Cyberr daily challenge. Senior level: incident response, threat intelligence and vulnerability management. Try today's set. https://cyberr.ai/daily/56a5c879-ca55-4d63-ae18-e72789195c68
· 3 reactions · 0 comments
Illia Timchenko — Cybersecurity Expert
Clean sweep on today's Cyberr daily challenge: 3/3 in Threat intelligence at senior level. Think you'd beat me? https://cyberr.ai/daily/ae5d933f-5bd6-4d54-b845-a549a7470ea0
· 3 reactions · 0 comments
Edwin M. — Full-Spectrum Information / Network / Cyber Security Professional
3/3 on today's Cyberr daily challenge. Senior level: network security, threat intelligence and incident response. Try today's set. https://cyberr.ai/daily/c87b056c-16fe-4f01-93c0-a3766f6c93f8
· 1 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
Nearly 11,000 cybercrime networks dismantled in major international operation across Africa Twenty-one countries took part in Operation Serengeti III, which led to 1,462 arrests and the recovery of more than $105 million linked to criminal activities. The operation, codenamed Se…
· 9 reactions · 1 comments
James Macgregor Watson — Decision Intelligence Executive
"Why would anyone bother targeting us?" might be one of the most expensive questions an organization can ask when it's being used to justify doing nothing. I've heard variations of that argument throughout my career, usually somewhere between a CTI assessment identifying a credi…
· 5 reactions · 1 comments
samuel watua Soita — Full Stack Software Engineer
Imagine discovering a security incident because your AI bill suddenly exploded. That's not just a finance problem. It can be a cybersecurity problem. Google Threat Intelligence has documented a growing threat known as LLM-jacking—where attackers steal access to AI services or co…
· 2 reactions · 0 comments
Ben Nguyen — Data Scientist
It is a great article 📰 Trust Is Not What It Seems — And Fraudsters Are Counting on It https://www.darkreading.com/cyber-risk/trust-is-not-what-it-seems-and-fraudsters-are-counting-on-it via Dark Reading · 🛡️ Powered by Cyberr Threat Intelligence — platform.cyberr.ai/news
· 5 reactions · 6 comments
Mike M — Technical Support Specialist
A critical flaw threatens websites worldwide. Millions of California student records are exposed. An AI coding service suffers a security breach. This week's cybersecurity news reveals a common concern: even when we take precautions to protect our devices and accounts, the servi…
· 10 reactions · 2 comments
Schomer — Principal Security Solutions Architect & Founder
The Architectural Manifesto: Part 2 — Why "Black October" Proves Your Threat Model is Dead. The global cybersecurity ecosystem is scrambling over the new PHP "php2shell" zero-days (CVE-2026-109618 & CVE-2026-109619). CISA is yelling to patch, tech stacks are forcing emergency of…
· 6 reactions · 0 comments
I’ve been developing PhilSIEM, my own hands-on cybersecurity project, combining honeypot monitoring, threat intelligence and security event analysis. The goal is to build a practical environment for detecting suspicious activity, investigating alerts and developing real-world SO…
· 8 reactions · 2 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
When Ransomware Operators Become Buyers Underground markets are not only places where compromised access is offered for sale. They are also places where demand becomes visible. When ransomware actors seek access to corporate networks, the requirements themselves can provide usef…
· 6 reactions · 1 comments
Erlend Andreas Gjære — Co-founder / Chief Executive Officer at Secure Practice AS
Websites are going offline due PHP2Shell, with WordPress and 70% of the Internet affected. The biggest risk here may however be not the most obvious one, and may eventuall affect a lot more people than we'd like to think. A vulnerable webshop based on e.g. WooCommerce may of cou…
· 11 reactions · 2 comments
samuel watua Soita — Full Stack Software Engineer
The scariest vulnerability isn't necessarily the one with the highest CVSS score. It's the one attackers are already exploiting while defenders are still trying to understand it. Recent threat intelligence shows the pace of zero-day exploitation is increasing. Google Threat Inte…
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
🚀 [PROJECT MILESTONE] Secure Agentic Commerce is Here: Introducing ETB PayShield for the PayPal AI Hackathon High-volume digital checkouts and autonomous AI commerce flows face an overlooked vulnerability vector: traditional application security configurations run too high up t…
· 3 reactions · 2 comments
samuel watua Soita — Full Stack Software Engineer
A critical vulnerability doesn't automatically mean you're compromised. But an exposed critical vulnerability is a very different story. This distinction is becoming increasingly important. Organizations are dealing with an enormous volume of vulnerabilities. Google Threat Intel…
· 1 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
Your EDR says “no malware detected.” Should you be relieved? Not necessarily. CrowdStrike's 2026 Global Threat Report found that 82% of detections in 2025 were malware-free. It also reported an 89% increase in attacks by AI-enabled adversaries. This tells us something important…
· 2 reactions · 0 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
Before the Ransomware Attack: The Initial Access Broker Economy Not every ransomware operation begins with the ransomware group gaining initial access. In some cases, that access may already be available through an Initial Access Broker (IAB). Compromised VPN credentials, expose…
· 8 reactions · 5 comments
Schomer — Principal Security Solutions Architect & Founder
🔒 Announcing ETB PayShield: Layer-Zero Security for Agentic Commerce Traditional application security models operate post-execution, leaving automated transaction nodes and AI agents exposed to severe injection vectors and zero-click exploits. As the founder of ETBV, I engineer…
· 4 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
What happens when vulnerabilities are discovered faster than organizations can patch them? We may be approaching that reality. Google Threat Intelligence reports that monthly vulnerability disclosures more than doubled in 2026—from 5,045 in January to 10,477 in July, reaching 10…
· 1 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
A vulnerability doesn't have to be complicated to become dangerous. It just needs to reach the right server. The cybersecurity community is currently dealing with PHP2Shell — two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Both are rated 9.2 CVSS v4.0 and…
· 2 reactions · 0 comments
Ahmad Temitope — Threat Intelligence and Research Analyst
Hello Cyberr.ai! My name is Ahmad Temitope, and I am a Cyber Threat Intelligence and Research Analyst specializing in External Attack Surface Management (EASM), detection engineering, and threat analysis. Over the past few years, I’ve had the privilege of working across security…
· 5 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Under the Hood: Real-Time STIX 2.1 Telemetry of a Blocked PHP2Shell Cascade When an automated exploit cascade hits your environment, you don’t have time to wait for a database write or an application-layer parsing loop. True security requires capturing, validating, and stripping…
· 4 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
A vulnerability in PHP just turned a programming language into a cybersecurity headline. Two critical vulnerabilities. CVE-2026-109618 CVE-2026-109619 Both carry a CVSS v4.0 score of 9.2 and can enable unauthenticated remote code execution on affected PHP systems. What makes thi…
· 5 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
PHP2Shell is Proving It: Traditional Vulnerability Management is Dead. The industry is currently running in circles trying to patch CVE-2026-109618 and CVE-2026-109619. But the real crisis isn't the code flaws themselves—it’s the architectural blindspots they expose. Two critica…
· 3 reactions · 0 comments