CYBERSECURITY INTEL FREE'Dself-hosted CTI

LATEST // SURFACE WEB

Aggregated cybersecurity reporting, advisories and research. 6 matching records.
AUTO-POLL // 2026-08-16 03:50 UTC
SURFACE WEB DARK / DEEP WEB
RESET
2026-07-28 23:19 UTC
Vendor Research
TIER 2

Coordinated "cyberattack" on U.S. water utilities: What you need to know

Tenable Blog · Research Special Operations · indexed 2026-08-16 02:02 UTC

A coordinated cyber attack disrupted water and wastewater systems in at least 12 U.S. states, including more than 30 Minnesota communities. Here is what defenders need to know about the attack so far. This FAQ also details recent cyberactivity targeting internet-exposed PLCs, and how to protect exposed infrastructure.Change logUpdate August 10: Added Columbus Water Works as a second confirmed Georgia victim. Added a table summarizing publicly confirmed affected entities to date.This is an active situation. Tenable's Research Special Operations team is monitoring developments and will update t…

DFIRICS / OTLaw EnforcementMalwareMicrosoftThreat IntelligenceVulnerabilities CVE-2021-22681
P45
2026-07-02 19:27 UTC
Independent Research
TIER 2

FBI Seizes NetNut Proxy Platform, Popa Botnet

Krebs on Security · BrianKrebs · indexed 2026-08-16 02:02 UTC

The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technologies [NASDAQ: ALAR]. The action comes roughly two weeks after KrebsOnSecurity published findings from multiple security firms connecting NetNut to the Popa botnet, a collection of at least two million devices that have been compromised by malicious software with little or no consent from victims.

DFIRLaw EnforcementMalware
P0
2026-07-02 14:00 UTC
Vendor Research
TIER 2

Google’s Continued Disruption of Malicious Residential Proxy Networks

Google Threat Intelligence / Mandiant · Google Threat Intelligence Group · indexed 2026-08-16 02:02 UTC

Background Today, in coordination with the FBI, Lumen, and others, Google took action against the NetNut residential proxy network, also known as Popa. This action builds on our disruption of the IPIDEA proxy network that took place in January 2026, and is a continuation of Google’s objective to dismantle malicious residential proxy networks. Actions Taken As a part of this disruption we took the following actions: Disabled Google accounts and associated Google services used by NetNut for malware command and control (C2), which directly violates Google’s Terms of Service and Acceptable Use Po…

APT / Nation-StateLaw EnforcementMalwareMicrosoftMobile SecurityNetwork SecurityThreat Intelligence
P0