Updated continuously · 4 new this hour

Today in threat intelligence.

Mallory correlates thousands of sources: vendor security advisories, government alerts, researcher write-ups, and underground reporting. We extract the facts that matter, so you can act on them right now.

sources monitoredcontinuously: 6,810
reports analyzedlast 24 hours: 12,242
stories surfacedlast 24 hours: 1,114

Free daily digest

Your morning threat briefing.

Top stories, newly exploited vulnerabilities, and CISA KEV additions. One email each morning.

Get the daily digest

Free · Unsubscribe anytime

Updated 2h ago

State Sponsored Espi…Botnet InfrastructureAi Enabled Threat Ac…+2

UK and Partners Expose Integrity Tech’s Role in China-Linked Cyber Espionage

The UK National Cyber Security Centre (NCSC) and eight international partners issued an advisory on 8 October 2026 exposing global cyber espionage enabled by China-based Integrity Technology Group, which has links to the Chinese government. China-linked actors used AI-enabled automated scanning, large-scale botnets and manual exploitation to compromise organisations and steal sensitive data, including from critical sectors. Integrity Tech personnel supported these operations through tool development, infrastructure acquisition and hosting, and network compromise. The reported activity is consistent with campaigns publicly known as Flax Typhoon, Ethereal Panda and Red Juliett, among others.

Timeline

14h agoGurucul publishes indicators and detection queries for Integrity Tech-enabled attacks
U.S. offers up to $10 million for information identifying or locating Zhang Yu

Emerging Technology Risk·24sources·Updated 27min ago

Latest

Enforcement ActionCybercrime Service E…+1

Your Mule Cashout Leader Pleads Guilty to Laundering Millions Through 15,000 U.S. Mules

Oleg Korniev, a 42-year-old Ukrainian-Russian dual citizen, pleaded guilty to money laundering, identity theft and computer fraud offenses tied to his operation of Your Mule Cashout (YMCO). The international organization recruited more than 15,000 U.S.-based money mules through fake employment offers and laundered at least $10 million stolen by cybercriminals from more than 750 U.S. bank accounts. The mules transferred proceeds to overseas cash-out contractors, primarily in Eastern Europe.

Regulatory & Policy

2·Updated 3h ago

Threat Infrastructur…Detection Content Up…+1

VirusTotal Adds Daily Public IPv4 Scanning to Hunt Malware Infrastructure

VirusTotal has added daily scanning of the public IPv4 address space, giving investigators exposed-service data and historical port activity to help uncover command-and-control servers and related malware infrastructure. Analysts can search service versions, SSH host keys, RDP fingerprints, HTTP headers, certificates, and other characteristics to connect hosts even when they have no malware detections. Published examples showed how shared SSH fingerprints and certificates linked infrastructure, how service searches narrowed potential stealer infrastructure, and how FTP banners matched previously researched command-delivery patterns.

Attack Surface Exposure

2·Updated 6h ago

Open Source Dependen…

Anthropic Launches Free OSS Scanner to Find Vulnerabilities in Open-Source Projects

Anthropic launched OSS Scanner, a free, opt-in service that uses its strongest AI models to repeatedly audit eligible open-source projects and email potential vulnerabilities directly to maintainers. Eligibility prioritizes established, widely used projects important to infrastructure and user security, particularly those exposed to remote attacks. Enrollment requires verified core-maintainer status, project configuration, and build instructions. The service builds projects in isolated virtual machines with network access, then disables Internet access before auditing. Reports include reproduction steps and proposed patches where available, but receive no human review before delivery.

Vulnerability Disclosure

7·Updated 57min ago

12 sections hidden

Find out if you're exposed

Don't read about it. Know when it affects you.

Mallory correlates every story on this page with your attack surface (assets, vendors, identities, subsidiaries) and surfaces a small set of evidence-based cases instead of 10,000 alerts.