Search: “Recorded Future Intelligence Graph”

104 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 22 Vulnerability 20 Malware 18 Data breach 8 Policy & legal 8 Phishing & fraud 7 Threat actor 6 Industry 5 Exploit / PoC 4 Model release 2 AI industry 2 AI safety & security 1 Research 1

SeverityAll critical 43 high 25 medium 19 low 10 info 7

KlueセキュリティインシデントとRecorded Futureへの影響

Recorded Future disclosed a Klue incident that exposed some Salesforce business data, including contacts and emails, via a compromised OAuth token.

Recorded Future disclosed that unauthorized activity in marketing vendor Klue's integration layer, starting June 12, 2026 and contained the same day, affected some of its Salesforce data through a compromised OAuth token in the Salesforce-Klue integration. Impacted fields are limited to business data such as customer contact names, email addresses, and possibly business contract information. No evidence indicates Recorded Future's core platform, Intelligence Graph, internal databases, or customer platform data were accessed. The company revoked all relevant OAuth tokens, coordinated with Salesforce and law enforcement, and began reviewing all third-party Salesforce integrations.

Recorded FutureAug 12, 00:00 UTC · Aug 12, 2026Data breach

Cyber Caliphate: ISIS Plays Offense on the Web

Recorded FutureJul 31, 00:00 UTC · Jul 31, 2025Malware

Smarter Cybersecurity with IPv6: How Drip Architecture Defeats Spray-and

Recorded FutureJul 16, 00:00 UTC · Jul 16, 2026Ransomware CVE-2025-31324 CVE-2024-3400 CVE-2023-4966+1 CVEs

Experts warn of possible attacks after PoC code for CVE-2018

Security AffairsAug 27, 15:13 UTC · Aug 27, 2018Exploit / PoC CVE-2018-11776 CVE-2017-5638

Hidden Link Analysis Reveals 92% of Suspicious IPs Not Blacklisted

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Malware

Recorded Future Equips the West, Allies, and Friends to Collaborate on Global Cyber Defense

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability

Purchase Scam Networks: How fraudsters prey on victims

Recorded FutureApr 30, 00:00 UTC · Apr 30, 2025Phishing & fraud

Partner Spotlight: Gain a Complete View of Threats With Cisco Umbrella Investigate

Recorded FutureAug 23, 00:00 UTC · Aug 23, 2025Malware

Dutch intelligence unmasks previously unknown Russian hacking group 'Laundry Bear'

The RecordMay 27, 12:35 UTC · May 27, 2025Malware

Threat Intelligence Starter Resources

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Ransomware

Iranian Hackers’ Rising Interest in Targeting Android Systems With DroidJack, AndroRAT

Recorded FutureAug 12, 00:00 UTC · Aug 12, 2025Malware

Understanding the Retaliation Window: Cybersecurity Risks and Response Timing

Recorded FutureJun 30, 00:00 UTC · Jun 30, 2025Ransomware

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

The Hacker NewsJul 20, 14:33 UTC · Jul 20, 2026Malware

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Kaspersky details Iranian Cavern Manticore's expanded C2 framework using DNS and Google Apps Script, plus APT42's TAMECAT spyware in nuclear-sector phishing.

Kaspersky reported new components in the Cavern (Cav3rn) C2 framework, used by Iranian MOIS-affiliated Cavern Manticore (with overlaps to MuddyWater and OilRig's Lyceum) against Israeli entities, monitored since December 2025. The new GoogleService.dll module performs DNS A-record queries to choose between direct HTTPS and a Google Apps Script relay per transaction, with the DNS infrastructure able to rotate the Google deployment ID; Kaspersky also found an inter-component broker (rnp.dll) and linked the framework's plugin-based pivot to late April 2026. Separately, Group-IB and Kaspersky detailed HOLLOWGRAPH, a .NET NativeAOT DLL first seen in the wild June 7, 2026, that uses Microsoft 365 calendar events via the Graph API as two-way dead drops dated May 13, 2050, with DNS tunneling refreshing Entra ID credentials. DarkAtlas also reported APT42's TAMECAT modular surveillance framework delivered via LNK masquerading as PDFs in spear-phishing targeting the nuclear energy sector in April-May 2026, with the group using generative AI to accelerate operations.

The Hacker NewsAug 18, 12:12 UTC · 29d agoThreat actor