Clear Infosec Threat Intelligence Bulletin – Aug 26th, 2026

The banking Trojan, post-law enforcement takedown, is sprucing itself up with features that make detection and analysis harder. Read more

With some simple HTML that’s invisible to users, attackers can manipulate AI-powered email summarizers into producing malicious information. Read more

Every time you add an extension or plugin to your browser, there’s a risk that you might be doing more than managing your cryptocurrency wallet, generating pass… Read more

The ransomware gang Gunra has been creating havoc – exploiting unpatched VPNs and firewalls to steal data, encrypt systems, and extort victims across healthcare… Read more

A few weeks ago, on a busy day, threat-modeling expert Adam Shostack opened an email from a client. Someone at that organization had vibe… Read more

Akira ransomware affiliates were seen using a new technique to evade endpoint detection and response (EDR), where they rebooted a comprom… Read more

Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in Geo… Read more

Artificial intelligence (AI) has quickly become a strategic priority for enterprise security teams. Yet despite growing investment in AI-… Read more

Cybersecurity researchers have disclosed details of a new macOS-oriented, Rust-based information stealer called AmnesiaStealer that’s capable of hijacking Chrom… Read more

Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealt… Read more

The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence (AI)-… Read more

A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3 pr… Read more

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security… Read more

Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it p… Read more

A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in que… Read more

Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully explo… Read more

It is the best of times, it is the worst of times – especially if your job is keeping systems patched and up to date. Microsoft has gone from 60-90 Windows sec… Read more

Anthropic’s Claude Code appears to be having trouble displaying summaries of its "thinking," according to several bug reports, while the underlying reasoning t… Read more

Microsoft’s consumer Copilot app and Microsoft 365 Copilot are separate no more, with a unified Copilot app beginning its rollout Thursday – minus a few featur… Read more

xAI’s Grok web chat agent is currently vulnerable to a novel form of prompt injection, according to security researchers with Adversa AI. The technique allows … Read more