<?xml version='1.0' encoding='utf-8'?>
<rss version="2.0">
  <channel>
    <title>Whats The Hax?: Threat intelligence headlines</title>
    <link>https://whatsthehax.com/threat-intel.html</link>
    <description>Headlines indexed by Whats The Hax?, attributed and linked to their original publishers.</description>
    <language>en-US</language>
    <lastBuildDate>Fri, 04 Sep 2026 00:00:00 GMT</lastBuildDate>
    <item>
      <title>Angry Birds: Toy Ghouls’ new toys</title>
      <link>https://securelist.com/toy-ghouls-new-hivemq-and-element-backdoors/121270/</link>
      <guid isPermaLink="false">urn:sha256:9fe6be474acc49c38f5cfaf115b0d2636c75588e283f4ecbe524457d1202c0cc</guid>
      <description>Headline from Securelist; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 04 Sep 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Securelist</source>
    </item>
    <item>
      <title>Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set</title>
      <link>https://securelist.com/mirage-kitten-new-backdoors-noderabbit-pollcat/121244/</link>
      <guid isPermaLink="false">urn:sha256:eac188700be16a552143f8b0c9883ff74b9f9b2e1c64642bbe7faad157d7196e</guid>
      <description>Headline from Securelist; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 01 Sep 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Securelist</source>
    </item>
    <item>
      <title>ValleyRAT masquerading as adware</title>
      <link>https://securelist.com/valleyrat-backdoor-adware/121175/</link>
      <guid isPermaLink="false">urn:sha256:f0e556fd3c0033d9dfc3b0dca561c136730be01c9850f8ae9439fa2b8e2ef670</guid>
      <description>Headline from Securelist; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 31 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Securelist</source>
    </item>
    <item>
      <title>Threat landscape for industrial automation systems. Q2 2026</title>
      <link>https://securelist.com/industrial-threat-report-q2-2026/121159/</link>
      <guid isPermaLink="false">urn:sha256:ddf86d51562485adca6fa45b9b78a5be15fdf77c17876a1b5bd35ce90903509a</guid>
      <description>Headline from Securelist; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 27 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Securelist</source>
    </item>
    <item>
      <title>Exploits and vulnerabilities in Q2 2026</title>
      <link>https://securelist.com/vulnerabilities-and-exploits-in-q2-2026/121091/</link>
      <guid isPermaLink="false">urn:sha256:b298462301ed0275f7027d47844b0303140fd808617ba7c6e8008f5b7ece26e8</guid>
      <description>Headline from Securelist; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 26 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Securelist</source>
    </item>
    <item>
      <title>The invisible passenger in your car</title>
      <link>https://securelist.com/android-head-unit-malware/121106/</link>
      <guid isPermaLink="false">urn:sha256:c0486c254f229048697736b3ec5be10bcbe61e4ea33ec744dfb9a92615b8e55d</guid>
      <description>Headline from Securelist; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 21 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Securelist</source>
    </item>
    <item>
      <title>APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit</title>
      <link>https://securelist.com/honeymyte-coolclient-driver-rootkit/121028/</link>
      <guid isPermaLink="false">urn:sha256:9232cff77ce0ef8f62b1586a231989d5db6b27cdeaa4460ee6bde794a9fc4608</guid>
      <description>Headline from Securelist; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Securelist</source>
    </item>
    <item>
      <title>Armored Likho expands its cyber-espionage toolkit</title>
      <link>https://securelist.com/armored-likho-still-toolkit/121033/</link>
      <guid isPermaLink="false">urn:sha256:42d8bff3928fddf8872e28bba00bde329d52761c6315cece983a2bf3493a2b46</guid>
      <description>Headline from Securelist; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 13 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Securelist</source>
    </item>
    <item>
      <title>Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants</title>
      <link>https://securelist.com/tr/head-mare-targets-trueconf-server-with-phantomcore/120988/</link>
      <guid isPermaLink="false">urn:sha256:5533e30134fef6c13dbf03eab738318c0e477dc0073572b16135eb57695304d4</guid>
      <description>Headline from Securelist; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 11 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Securelist</source>
    </item>
    <item>
      <title>Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection</title>
      <link>https://securelist.com/project-cav3rn-continues/120991/</link>
      <guid isPermaLink="false">urn:sha256:32961d8cee58e088f99c67f8a42e1eca7dcc2c2ff99df237090f607a716552ef</guid>
      <description>Headline from Securelist; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 11 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Securelist</source>
    </item>
    <item>
      <title>Recorded Future Announces Automated Signature Creation, Accelerating Vulnerability Prioritization</title>
      <link>https://www.recordedfuture.com/blog/automated-signature-creation</link>
      <guid isPermaLink="false">urn:sha256:863ee2f1c66746b239c80c1ffb445d68802d6f76cc0a089631cb15cd6506da31</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 04 Sep 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>H1 2026 Malware Vulnerability Trends</title>
      <link>https://www.recordedfuture.com/research/h1-2026-malware-vulnerability-trends</link>
      <guid isPermaLink="false">urn:sha256:fa44b44a1fa5a7ac4ba22bb6153b74ebc98c424632dd731defbbc77bd4bfdc4d</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 03 Sep 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>The Agentic SOC – From AI Theater to Real Defense</title>
      <link>https://www.recordedfuture.com/blog/agentic-soc-real-defense</link>
      <guid isPermaLink="false">urn:sha256:af25ee96fda76ed3bce506d7ec324997c7a3d4c28a984bd0de65f410b06cf877</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 01 Sep 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>BlueDelta Targets Defense and Diplomacy with HOOKEDGE</title>
      <link>https://www.recordedfuture.com/research/bluedelta-targets-with-hookedge</link>
      <guid isPermaLink="false">urn:sha256:6bb5f30d0037bd12215df6ed12f5d59124b500ac2f3ddc2a56b521c7cadd70f3</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 27 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Recorded Future Launches AI Alert Filtering</title>
      <link>https://www.recordedfuture.com/blog/ai-alert-filtering</link>
      <guid isPermaLink="false">urn:sha256:e44f35c00ea39bc161ccf73955a6a9cdb7b8343bb9309384b8f15e170660bc2f</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 26 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Mexico’s Cybersecurity Plan 2025-2030: Turning Ambition Into Defense</title>
      <link>https://www.recordedfuture.com/blog/mexico-cybersecurity-plan</link>
      <guid isPermaLink="false">urn:sha256:127e741f10ecc0f49a79f218c8927392e0d4d2ab4bd4baef4bf0757766381808</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 25 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Recorded Future Launches 6 New Capabilities for Third-Party Risk</title>
      <link>https://www.recordedfuture.com/blog/native-risk-ratings</link>
      <guid isPermaLink="false">urn:sha256:9b80f99a8be898017531f6f792723f949021377f7394cb88fff7462cb201eb44</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 19 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>CopyCop Targets AI Investment in Armenia</title>
      <link>https://www.recordedfuture.com/blog/copycop-targets-ai-investment</link>
      <guid isPermaLink="false">urn:sha256:f5b07a7c0ba9976efd1223c8f08376f1af0f009299aadeef843dbd5cbb66b0a1</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 18 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>PurpleDelta's Fraudulent Employment Operations</title>
      <link>https://www.recordedfuture.com/research/purpledelta-fraudulent-employment-operations</link>
      <guid isPermaLink="false">urn:sha256:41b2e7fbab3d9954aa736f5662c0b9b07e6bc71e0ab79be320624d2b0517d413</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 18 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Malware Crypting Services and the Threat Actors Who Sell Them</title>
      <link>https://www.recordedfuture.com/research/malware-crypting-services-threat-actors</link>
      <guid isPermaLink="false">urn:sha256:181c8c0329caa4a38e1761cca8134b6a5a9753690374b6cde7bd24160743b383</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 13 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Mines, Minds, and Machines: The Journey of AI</title>
      <link>https://www.recordedfuture.com/blog/mines-minds-machines</link>
      <guid isPermaLink="false">urn:sha256:9c7dcfa9ea75487b11cd09d661e392eecc3f790c055aba4e052481b6f99a739d</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 11 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>The Hugging Face Hack Was Cheap Persistence at Work</title>
      <link>https://www.recordedfuture.com/blog/hugging-face-cheap-persistence</link>
      <guid isPermaLink="false">urn:sha256:90e55c1563dd0daa22e978b0e84385d29ab359383d8716d037a69e39216d4149</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 10 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>July 2026 CVE Landscape</title>
      <link>https://www.recordedfuture.com/blog/july-2026-cve-landscape</link>
      <guid isPermaLink="false">urn:sha256:5c5f75a9d399e71665aa7fc3d439477f6844993ece3798627470837ac27c867d</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 07 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Emerging Threats to Neurotechnology</title>
      <link>https://www.recordedfuture.com/research/emerging-threats-neurotechnology</link>
      <guid isPermaLink="false">urn:sha256:45b9d7abda7902cc1b1b157337f3efc3ffb75cd3a4b84d39f45f1d072199c717</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 06 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Hype vs. Reality: What the Hugging Face Incident Means for AI Safety</title>
      <link>https://www.recordedfuture.com/blog/hugging-face-ai-safety</link>
      <guid isPermaLink="false">urn:sha256:7450ac0b581fef682ecf665b82dda38ffc3d9ce9122f03e5ef5f578946c62cf4</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 05 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>8 Ways AI is Changing Threat Intelligence</title>
      <link>https://www.recordedfuture.com/blog/ai-changing-threat-intelligence</link>
      <guid isPermaLink="false">urn:sha256:d5fb7b2c67082feeb27e99f8a90896c539e6a0daae5bab42bd098096c5e428dc</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 03 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Dealing with AI-Generated Extortion</title>
      <link>https://www.recordedfuture.com/blog/ai-generated-extortion</link>
      <guid isPermaLink="false">urn:sha256:df48290d79808c3fc4f6e23e3c1d8237a755ed4963c618471d1173763da42ece</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 30 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Iran War’s Secondary Effects Shape 2026 US Violent Extremism</title>
      <link>https://www.recordedfuture.com/research/iran-violent-extremism-landscape</link>
      <guid isPermaLink="false">urn:sha256:fe215ebe4783a4d8894c676022b77d6b3f4438d3601f75bb7a5baae431fb2128</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 30 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Ransomware is the Scoreboard</title>
      <link>https://www.recordedfuture.com/blog/ransomware-is-the-scoreboard</link>
      <guid isPermaLink="false">urn:sha256:5daa282b02c41ecdfa81fb4c276ef5de7bd3b3e16c47efde1565676522e50aad</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 24 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>TAG-195 Upgrades MaaS Ecosystem with Modular Tools</title>
      <link>https://www.recordedfuture.com/research/tag-195-evolves-maas-ecosystem</link>
      <guid isPermaLink="false">urn:sha256:ac4457a397444e25dabd916cc7372e9a115762df1bdcdac1d72c20f2d42449fd</guid>
      <description>Headline from Recorded Future; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Recorded Future</source>
    </item>
    <item>
      <title>Proofpoint Brings OpenAI GPT Cyber Models into Security Operations to Help Defenders Investigate Threats Faster</title>
      <link>https://www.proofpoint.com/us/newsroom/press-releases/proofpoint-soc-analyst-agent-openai-daybreak</link>
      <guid isPermaLink="false">urn:sha256:595fc3f520e566f1a390ad54a3c60fe605d3f56a74346f4fe25f280ec2b85f66</guid>
      <description>Headline from Proofpoint News Feed; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 03 Sep 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Proofpoint News Feed</source>
    </item>
    <item>
      <title>Cybercriminals Turn to Indirect Prompt Injection Attacks</title>
      <link>https://www.proofpoint.com/us/newsroom/news/cybercriminals-turn-indirect-prompt-injection-attacks</link>
      <guid isPermaLink="false">urn:sha256:f5017f69e9de35098aeacde3591c731a1cc7194b65ca276e20f6193390230814</guid>
      <description>Headline from Proofpoint News Feed; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 13 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Proofpoint News Feed</source>
    </item>
    <item>
      <title>Russian hackers can steal emails without a click</title>
      <link>https://www.proofpoint.com/us/newsroom/news/russian-hackers-can-steal-emails-without-click</link>
      <guid isPermaLink="false">urn:sha256:caf9a415eda01667ce20bad247c938c02b7f0e778548a2f966b90ea5a91eb45e</guid>
      <description>Headline from Proofpoint News Feed; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 07 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Proofpoint News Feed</source>
    </item>
    <item>
      <title>Proofpoint Joins Google Unified Security Recommended Program to Help Organizations Defend Against Today’s Most Sophisticated Threats</title>
      <link>https://www.proofpoint.com/us/newsroom/press-releases/proofpoint-joins-google-unified-security-recommended-program-help</link>
      <guid isPermaLink="false">urn:sha256:dbd169078d80e9f6dedae766b2e9e3fdafc0abb34358a19b0735289262379c86</guid>
      <description>Headline from Proofpoint News Feed; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 04 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Proofpoint News Feed</source>
    </item>
    <item>
      <title>Proofpoint Launches OEM Program to Help Security Providers Embed Trusted Threat Intelligence and Detection Capabilities</title>
      <link>https://www.proofpoint.com/us/newsroom/press-releases/proofpoint-launches-oem-program-help-security-providers-embed-trusted-threat</link>
      <guid isPermaLink="false">urn:sha256:9ab8c1a0adf3cf30bfb9141812bd54858c0c7a6a99f71823ff4c5b05dbb516e7</guid>
      <description>Headline from Proofpoint News Feed; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 04 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Proofpoint News Feed</source>
    </item>
    <item>
      <title>Max-severity Exchange server flaw under active exploitation by Kremlin hackers</title>
      <link>https://www.proofpoint.com/us/newsroom/news/max-severity-exchange-server-flaw-under-active-exploitation-kremlin-hackers</link>
      <guid isPermaLink="false">urn:sha256:8cc7f97aa7e1251f57e6bf63e0ea3ae3f6fe42dbd0e64dfbc46c82e8acb1c94b</guid>
      <description>Headline from Proofpoint News Feed; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 30 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Proofpoint News Feed</source>
    </item>
    <item>
      <title>New warnings that Russian operatives are targeting the emails of US nuclear scientists and defense contractors</title>
      <link>https://www.proofpoint.com/us/newsroom/news/new-warnings-russian-operatives-are-targeting-emails-us-nuclear-scientists-and-defense</link>
      <guid isPermaLink="false">urn:sha256:807df8150770ebde23c24bb281cd72b2e6db06f217d9c7f7f1221d12bed64375</guid>
      <description>Headline from Proofpoint News Feed; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Proofpoint News Feed</source>
    </item>
    <item>
      <title>Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes</title>
      <link>https://www.proofpoint.com/us/newsroom/news/russian-espionage-group-exploited-zimbra-zero-day-steal-mail-and-2fa-codes</link>
      <guid isPermaLink="false">urn:sha256:e3542de48ee9f9fcef81c9d802e6be5aea224f9bebd9dea38652643ef0a7308f</guid>
      <description>Headline from Proofpoint News Feed; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Proofpoint News Feed</source>
    </item>
    <item>
      <title>US and allies say Russian hackers stole emails without social engineering</title>
      <link>https://www.proofpoint.com/us/newsroom/news/us-and-allies-say-russian-hackers-stole-emails-without-social-engineering</link>
      <guid isPermaLink="false">urn:sha256:904f78fb98448ea609515371718d831cbd28111d4963fa147d0c2b24afeb5897</guid>
      <description>Headline from Proofpoint News Feed; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Proofpoint News Feed</source>
    </item>
    <item>
      <title>If you pay a hacker’s ransom, chances are that they’ll come back for more</title>
      <link>https://www.proofpoint.com/us/newsroom/news/if-you-pay-hackers-ransom-chances-are-theyll-come-back-more</link>
      <guid isPermaLink="false">urn:sha256:ec9266b1255f4108f0ac71c9333b950bfa4f0c3e56b5e5460ab725c714c84cf8</guid>
      <description>Headline from Proofpoint News Feed; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 22 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Proofpoint News Feed</source>
    </item>
    <item>
      <title>I’ve been deepfaked: What do I do?</title>
      <link>https://www.welivesecurity.com/en/how-to/ive-been-deepfaked-what-do/</link>
      <guid isPermaLink="false">urn:sha256:112848ac2faa1575d6d855bd73734c24ca8d20671399197829a33fa8bad4632e</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 02 Sep 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>This month in security with Tony Anscombe – August 2026 edition</title>
      <link>https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-august-2026/</link>
      <guid isPermaLink="false">urn:sha256:84ee8f8e79085c48dd6115b4bb3735163fe8cc3566166c08db1ee5bad9d8b674</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 31 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>AI-assisted reconnaissance: Why everyone could be a viable target for fraud</title>
      <link>https://www.welivesecurity.com/en/privacy/ai-powered-osint-why-everyone-viable-target-fraud/</link>
      <guid isPermaLink="false">urn:sha256:e00635063fe010e9b0914c04f95326f78af32f90f55870521dcd58afa3a16fe6</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 27 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>How QR-code phishing can slip past corporate security measures</title>
      <link>https://www.welivesecurity.com/en/business-security/qr-code-phishing-slip-past-corporate-security-measures/</link>
      <guid isPermaLink="false">urn:sha256:61b4bc04a8461a96542f911f8424a03d9d206c03367aefe20469b1d57a9128f0</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 17 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?</title>
      <link>https://www.welivesecurity.com/en/business-security/black-hat-usa-2026-vulnerability-discovery-decline-ai-era/</link>
      <guid isPermaLink="false">urn:sha256:212ff8b76f582436202aa5c01a2d0cc7e9ecd78d3e72217dde37639c273675be</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 13 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility</title>
      <link>https://www.welivesecurity.com/en/business-security/black-hat-usa-2026-hugging-face-hack-human-responsibility/</link>
      <guid isPermaLink="false">urn:sha256:ea9d6a0f4efc0cc70ea2ad29af10dbfa61e5818102d0e6b87055f12ab0f0ffc1</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 13 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Black Hat USA 2026: AI is racing ahead of cybersecurity controls</title>
      <link>https://www.welivesecurity.com/en/business-security/black-hat-usa-2026-ai-racing-cybersecurity-controls/</link>
      <guid isPermaLink="false">urn:sha256:2724ff524e8063f5f0218fc0325027ba81663f72cda3b2c2c5614deb54b7e335</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Are AI tutors safe for your kids?</title>
      <link>https://www.welivesecurity.com/en/kids-online/ai-tutors-safe-kids/</link>
      <guid isPermaLink="false">urn:sha256:08d90065a79835b639ebd10c1f60cfde7f74aac7c124fdad30762e389e68b3cd</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 10 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>This month in security with Tony Anscombe – July 2026 edition</title>
      <link>https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-july-2026/</link>
      <guid isPermaLink="false">urn:sha256:fa7f4c7271bf78ca662e679aae87c7891e506148c135bee512d5743c17d091f8</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Beyond the screenshot: Why you should verify what you see</title>
      <link>https://www.welivesecurity.com/en/cybersecurity/beyond-screenshot-why-verify-you-see/</link>
      <guid isPermaLink="false">urn:sha256:13e2f8189ecbe9fa5daa5e39a5bc7c6443199854496c405b7b793ca02900c753</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 30 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Forgotten UEFI shims undermining Secure Boot</title>
      <link>https://www.welivesecurity.com/en/eset-research/forgotten-uefi-shims-undermining-secure-boot/</link>
      <guid isPermaLink="false">urn:sha256:d35a9bd68f1f330b8da7cbd1ab35477a891e5f836a34498c6befd51b456b30b3</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 14 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>ESET Threat Report H1 2026</title>
      <link>https://www.welivesecurity.com/en/eset-research/eset-threat-report-h1-2026/</link>
      <guid isPermaLink="false">urn:sha256:51dcc956461456c4f0e9626b7faa696cf23a0ad558edbd10533b00f6e685b5f9</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 08 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Cyber readiness for SMBs: Getting the basics right</title>
      <link>https://www.welivesecurity.com/en/business-security/cyber-readiness-smbs-getting-basics-right/</link>
      <guid isPermaLink="false">urn:sha256:1f336395320b29df9e6017842006346b68b4f4e011c19aaa9d2020e7c11a2ea5</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 03 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>This month in security with Tony Anscombe – June 2026 edition</title>
      <link>https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-june-2026/</link>
      <guid isPermaLink="false">urn:sha256:8cd6580e606f0cbf0291f3709b7046cb34363480bf8dff37a088879649e744d0</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 30 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Inside the inbox: Why cybercriminals want to break into your email account</title>
      <link>https://www.welivesecurity.com/en/cybersecurity/inside-inbox-cybercriminals-want-break-email-account/</link>
      <guid isPermaLink="false">urn:sha256:923ef9b39201dd462a2d09813e244ed75a485d6e5149f96f565335b38e424c1b</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 29 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>SMB cyber readiness: the road to resilience starts here</title>
      <link>https://www.welivesecurity.com/en/business-security/smb-cyber-readiness-road-resilience-starts-here/</link>
      <guid isPermaLink="false">urn:sha256:49be493636b685f2bd2a33999de4cca291d5739adb6b03a0386eb855609fff50</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 26 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances</title>
      <link>https://www.welivesecurity.com/en/eset-research/gamaredon-2025-leveraging-tunnels-workers-dead-drops-new-alliances/</link>
      <guid isPermaLink="false">urn:sha256:e15d27bf2629c0ca10aef50df8b30901f54b76e413c012da0143c6af6efbc7bc</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 25 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>ESET takes part in Operation Endgame to disrupt Amadey and Stealc</title>
      <link>https://www.welivesecurity.com/en/eset-research/eset-takes-part-operation-endgame-disrupt-amadey-stealc/</link>
      <guid isPermaLink="false">urn:sha256:fb7681d95d33fee21a0e4fa539efc3a5d2112e4f619da6a7ce2bdfe6dc9b3abd</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 24 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Killing me gently: Inside Gentlemen’s EDR killer framework</title>
      <link>https://www.welivesecurity.com/en/eset-research/killing-me-gently-inside-gentlemens-edr-killer-framework/</link>
      <guid isPermaLink="false">urn:sha256:e5e1822d06283cba2e5370b055e268d926e321fcd34bb3d7cbf23a4d0086cb92</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 18 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Protecting legacy OT systems against modern cyberthreats</title>
      <link>https://www.welivesecurity.com/en/critical-infrastructure/protecting-legacy-ot-systems-modern-threats/</link>
      <guid isPermaLink="false">urn:sha256:41f3681bf291c542fd4bf50f78d2665114661b1a209607f4213d17f5cd92a75b</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 17 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>FishMonger’s arsenal upgraded: SprySOCKS for Windows</title>
      <link>https://www.welivesecurity.com/en/eset-research/fishmongers-arsenal-upgraded-sprysocks-windows/</link>
      <guid isPermaLink="false">urn:sha256:ff80b256acceafc23ada147b8329377304d4b643b24daadce35c772d550c6a26</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 16 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>EvilTokens: A phishing attack that doesn’t steal your password</title>
      <link>https://www.welivesecurity.com/en/cybercrime/eviltokens-phishing-doesnt-steal-password/</link>
      <guid isPermaLink="false">urn:sha256:5fc875796a82820e409aa2c7a1aa6d50057d476f21391a07a3925286f545bca1</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 15 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>OceanLotus: From external espionage to domestic targeting</title>
      <link>https://www.welivesecurity.com/en/eset-research/oceanlotus-external-espionage-domestic-targeting/</link>
      <guid isPermaLink="false">urn:sha256:4e69a2e9d524b024f2bd4d888a39b99ba0950cf88e6dac7b730917f9aceaab9a</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 11 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Unpacking SMB cyber-readiness – and what makes or breaks it</title>
      <link>https://www.welivesecurity.com/en/business-security/smb-cyber-readiness-what-makes-breaks-it/</link>
      <guid isPermaLink="false">urn:sha256:9123c70164db4b668d01d5dc6fadc9d54ac0aaa65d92816615e5b7422c4d101e</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 10 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Cybercriminals: the 'auditors' you never hired</title>
      <link>https://www.welivesecurity.com/en/business-security/cybercriminals-auditors-never-hired/</link>
      <guid isPermaLink="false">urn:sha256:18795e7936f0231088c187573cb89eb35985a3952d13e0caa5c54be7fbfb2984</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 09 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>Lessons for life: Why children’s data is a long-term identity risk</title>
      <link>https://www.welivesecurity.com/en/kids-online/lessons-life-childrens-data-long-term-identity-risk/</link>
      <guid isPermaLink="false">urn:sha256:3ec1883a1b5ba64e628757283122ff3067c4b783dd82264734007fade59a415c</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 03 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>This month in security with Tony Anscombe – May 2026 edition</title>
      <link>https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-may-2026/</link>
      <guid isPermaLink="false">urn:sha256:c1eb0f053dceabd20e084a86ef77d291dd7343e2b46f1a44eb0622908db44f37</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 29 May 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>ESET APT Activity Report Q4 2025–Q1 2026</title>
      <link>https://www.welivesecurity.com/en/eset-research/eset-apt-activity-report-q4-2025-q1-2026/</link>
      <guid isPermaLink="false">urn:sha256:6f67002f1856cfad5556d0b07081459de95b6d02e56248b92ba9897974055e4c</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 28 May 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>What to consider before asking an AI chatbot for health advice</title>
      <link>https://www.welivesecurity.com/en/privacy/what-consider-asking-ai-chatbot-health-advice/</link>
      <guid isPermaLink="false">urn:sha256:520085c1cf604e27b99663b89a67995c4910481f3a5e4a9d5b2ae0735baa4e56</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 27 May 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>BTMOB: A stealthy RAT burrowing deep into Android devices</title>
      <link>https://www.welivesecurity.com/en/malware/btmob-stealthy-rat-burrowing-deep-android-devices/</link>
      <guid isPermaLink="false">urn:sha256:8b6cbc48b0170b047ce51dc8cf239c9ea36720a577df1706d3cb693c8f93e338</guid>
      <description>Headline from WeLiveSecurity; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 26 May 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">WeLiveSecurity</source>
    </item>
    <item>
      <title>ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th)</title>
      <link>https://isc.sans.edu/diary/rss/33282</link>
      <guid isPermaLink="false">urn:sha256:d13f46274d348338b4d3ab9efd91d6c82014f62528ea06aff8e55773645c7f7c</guid>
      <description>Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 26 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">SANS Internet Storm Center, InfoCON: green</source>
    </item>
    <item>
      <title>Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)</title>
      <link>https://isc.sans.edu/diary/rss/33280</link>
      <guid isPermaLink="false">urn:sha256:082c3335f8d3cadd4280bba08a31aa48b81deec3fa294acaa1dfcf2dfd9080e0</guid>
      <description>Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 25 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">SANS Internet Storm Center, InfoCON: green</source>
    </item>
    <item>
      <title>ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th)</title>
      <link>https://isc.sans.edu/diary/rss/33278</link>
      <guid isPermaLink="false">urn:sha256:cf181618ca205e5ba912328752d52ac9fc3f90ebbcf96de8f9e54daec1ccd3c9</guid>
      <description>Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 25 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">SANS Internet Storm Center, InfoCON: green</source>
    </item>
    <item>
      <title>DOUBLECUP's PNG Payload, (Mon, Aug 24th)</title>
      <link>https://isc.sans.edu/diary/rss/33274</link>
      <guid isPermaLink="false">urn:sha256:49e937cf32ef9eb6c2458b43672625dbe558471377687df3c77c2844897d7d1d</guid>
      <description>Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 24 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">SANS Internet Storm Center, InfoCON: green</source>
    </item>
    <item>
      <title>ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th)</title>
      <link>https://isc.sans.edu/diary/rss/33276</link>
      <guid isPermaLink="false">urn:sha256:e879d9deb1381ec9038994a489dfcda8d907aa0be8cc4f0b2c7afc2f0f7b01ab</guid>
      <description>Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 24 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">SANS Internet Storm Center, InfoCON: green</source>
    </item>
    <item>
      <title>Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!, (Fri, Aug 21st)</title>
      <link>https://isc.sans.edu/diary/rss/33272</link>
      <guid isPermaLink="false">urn:sha256:a6a1a81514dddf80d2334abe6e2c44c9f6a7046f126c3be47549aa08fbb06bc1</guid>
      <description>Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 21 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">SANS Internet Storm Center, InfoCON: green</source>
    </item>
    <item>
      <title>ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st)</title>
      <link>https://isc.sans.edu/diary/rss/33270</link>
      <guid isPermaLink="false">urn:sha256:9fa40bc80f629177edf2646a78d0183bce26357079a5e5855c514897a7feaa37</guid>
      <description>Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 21 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">SANS Internet Storm Center, InfoCON: green</source>
    </item>
    <item>
      <title>Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays, (Fri, Aug 21st)</title>
      <link>https://isc.sans.edu/diary/rss/33268</link>
      <guid isPermaLink="false">urn:sha256:bf4c6777da1be26612504bea666947c221113a16e6b4fb67d36cfaed32b06ea3</guid>
      <description>Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 21 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">SANS Internet Storm Center, InfoCON: green</source>
    </item>
    <item>
      <title>Using Microsoft Graph and Powershell - Risk Detection Commands, (Thu, Aug 20th)</title>
      <link>https://isc.sans.edu/diary/rss/33266</link>
      <guid isPermaLink="false">urn:sha256:9f71b497c2f904c32141bd2f7e06578c8d17402c9606ca71d27b84724dd25461</guid>
      <description>Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 20 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">SANS Internet Storm Center, InfoCON: green</source>
    </item>
    <item>
      <title>Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses, (Thu, Aug 20th)</title>
      <link>https://isc.sans.edu/diary/rss/33264</link>
      <guid isPermaLink="false">urn:sha256:79b8346cde893f2cf16e830d1541642d74ce48f9f0aa5e425010d4349426d5fc</guid>
      <description>Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 20 Aug 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">SANS Internet Storm Center, InfoCON: green</source>
    </item>
    <item>
      <title>Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility</title>
      <link>https://www.trendmicro.com/en_us/research/26/g/open-secure-ai-alliance.html</link>
      <guid isPermaLink="false">urn:sha256:c50b7348d08dd51f02b3bb46db4b2499832e1eac562efc4874700574d91b2c15</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 30 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave</title>
      <link>https://www.trendmicro.com/en_us/research/26/g/tracking-fake-sites-in-the-2026-world-cup-scam-wave.html</link>
      <guid isPermaLink="false">urn:sha256:0d0c3af0a0c20be57ae1ad1ff5d467eceaf7e70fe5df9cbd55229b57b730f71b</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 29 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>The Signs Were There: What the First Autonomous Ransomware Case Confirms</title>
      <link>https://www.trendmicro.com/en_us/research/26/g/autonomous-ransomware.html</link>
      <guid isPermaLink="false">urn:sha256:ce0790fc47d89810bcf6670769faf9debf46e08b93e452e73054da47ed7cb83b</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 24 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It</title>
      <link>https://www.trendmicro.com/en_us/research/26/g/inside-the-openai-hugging-face-incident.html</link>
      <guid isPermaLink="false">urn:sha256:d8976dc3d8c3033edefe77028f82084959cb3944e6ca3e443dafb2ed7b3c022b</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure</title>
      <link>https://www.trendmicro.com/en_us/research/26/g/plc-exploitation.html</link>
      <guid isPermaLink="false">urn:sha256:45b10045ee34b66ac8ace59b582d039593552339c12e84e8adae614806490e28</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan</title>
      <link>https://www.trendmicro.com/en_us/research/26/g/tech-support-scams-targeting-japan.html</link>
      <guid isPermaLink="false">urn:sha256:57e3336e02334e48905bd85ae6764186ae6c0c25e7d4ce53197777a1de2c657f</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass</title>
      <link>https://www.trendmicro.com/en_us/research/26/g/device-code-phishing.html</link>
      <guid isPermaLink="false">urn:sha256:faa3c0f96335c1ea774746b478ed45fb239889cf439070063290fdb15859279c</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 22 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Volume Is Not Risk: Making Sense of the “Vulnpocalypse”</title>
      <link>https://www.trendmicro.com/en_us/research/26/g/making-sense-of-the-vulnpocalypse.html</link>
      <guid isPermaLink="false">urn:sha256:e9e157d2fd7f50206ca69dc854e4c3b0900d3d500b7a7a7ea1397106fb9c0b7b</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 21 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&amp;C Botnet</title>
      <link>https://www.trendmicro.com/en_us/research/26/g/actor-behind-patriot-bait-used-ai-to-deploy-c2-botnet.html</link>
      <guid isPermaLink="false">urn:sha256:485ede2543ceeccdcabbe055dfcc8b221294556a94d2eb15e5934c0961672319</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 14 Jul 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry</title>
      <link>https://www.trendmicro.com/en_us/research/26/f/tonresolver.html</link>
      <guid isPermaLink="false">urn:sha256:07e91a38240a44304b736610a69315c91f26a9df7276c5594b63615f3d9e5b0a</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 29 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>From Langflow to Monero: Inside CVE-2026-33017 Cryptominer</title>
      <link>https://www.trendmicro.com/en_us/research/26/f/from-langflow-to-monero-inside-cve-2026-33017-cryptominer.html</link>
      <guid isPermaLink="false">urn:sha256:7d04ecdd8c61a791908187295d3f008405142dc439f2dabac78214b6f0b633f8</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 23 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>PeopleSoft PeopleTools Pre-Authentication RCE: A PSIGW SSRF Chain That Executes Inside the JVM</title>
      <link>https://www.trendmicro.com/en_us/research/26/f/PeopleTools.html</link>
      <guid isPermaLink="false">urn:sha256:c1d14acc702e9ba0ccc0f5f4b9cb6a8b044b513962296368517ea1590ddcaf7a</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 18 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign</title>
      <link>https://www.trendmicro.com/en_us/research/26/f/claudeai-shared-chat-abused-in-malvertising.html</link>
      <guid isPermaLink="false">urn:sha256:066bfd91a5e6ca526639e3993c400fb43f9529c27cd0cfacde3db8dbcd458da5</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 17 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>GenAI Is Both Hunter and Hunted at Pwn2Own Berlin 2026</title>
      <link>https://www.trendmicro.com/en_us/research/26/f/pwn2own-genai.html</link>
      <guid isPermaLink="false">urn:sha256:ec29905766579d8ebc6e65d7bd5177e46232b909add656e84653ee42c695464c</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Wed, 10 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Governing Claude Enterprise in Environments Where Inline Controls Can't Go</title>
      <link>https://www.trendmicro.com/en_us/research/26/f/governing-claude-enterprise.html</link>
      <guid isPermaLink="false">urn:sha256:ac4fc3649a3aa74a0d5e88144544481a7544bf5c67980bc65c603b88a2d5883d</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 08 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open</title>
      <link>https://www.trendmicro.com/en_us/research/26/f/old-winrar-flaw-fuels-attacks-on-ukraine.html</link>
      <guid isPermaLink="false">urn:sha256:029ca59a3b48d3e1a91bf823b72461f7d1cb578c4662871f4c62b36bbdd29e40</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 08 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI's Biggest AI Showdown Yet</title>
      <link>https://www.trendmicro.com/en_us/research/26/f/pwn2own-berlin-2026.html</link>
      <guid isPermaLink="false">urn:sha256:94ba49773cdf55e9c508f519813589b40487105256c3ec04a3c9d25a5a9bf8bd</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Mon, 01 Jun 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Smart Contracts for C&amp;C: How ClearFake Hid in Plain Sight on BSC Testnet</title>
      <link>https://www.trendmicro.com/en_us/research/26/e/smart-contracts-for-command-and-control.html</link>
      <guid isPermaLink="false">urn:sha256:c9acf7ea905e30daa37776fb54408ff6d1875d46323bc82b43ff21dd22dd05e5</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Tue, 26 May 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware</title>
      <link>https://www.trendmicro.com/en_us/research/26/e/analyzing-void-dokkaebi-invisibleferret-malware.html</link>
      <guid isPermaLink="false">urn:sha256:4e41b13b8e78983f836b44c5fe9bc20256f919316ed04fd6d9a91ce2f367f7e9</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
    <item>
      <title>One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign</title>
      <link>https://www.trendmicro.com/en_us/research/26/e/inside-the-influence-and-fraud-patriot-bait-campaign.html</link>
      <guid isPermaLink="false">urn:sha256:5415322db5a85f2cd2f5c104c6371ee71d66d13d86bb2b258ad9bc48e4ce3cdc</guid>
      <description>Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.</description>
      <category>headline</category>
      <pubDate>Thu, 21 May 2026 00:00:00 GMT</pubDate>
      <source url="https://whatsthehax.com/threat-intel.html">Trend Micro Research, News, Perspectives</source>
    </item>
  </channel>
</rss>