Clear Infosec Threat Intelligence Bulletin – Oct 29th, 2026

Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII. Read more

Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the unseen information comes to light. Read more

Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts. Read more

The AfD has confirmed that hackers breached its hosting provider. A leak site now claims to offer 421,179 of the party’s internal emails, and shows AI-written s… Read more

Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and w… Read more

Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that po… Read more

Bank of America has had to spend big on IT in response to an AI security audit and findings that its anti-money-laundering (AML) controls… Read more

The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an attacker operating inside a virtua… Read more

Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI communit… Read more

Fresh research suggests recent panic over AI-generated malware may be overblown. Last month Anthropic detailed how Russia-linked cyber… Read more

Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use… Read more

Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a rese… Read more

AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CER… Read more

Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backu… Read more

GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the s… Read more

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and… Read more

An independent evaluation of OpenAI’s internal misalignment monitoring system revealed that the system was not fit for purpose during a period when the company… Read more