3 free resources on this topic. Everything here is free and hand-picked. You can also search within this topic.
Anthropic's Threat Intelligence team shares case studies of operations it disrupted in which threat actors tried to use Claude for malicious activity — cyber operations, surveillance, influence operations, scams and more — and how malicious use has evolved since earlier reports.
Google Threat Intelligence and Mandiant document a May–June 2026 ShinyHunters campaign exploiting CVE-2026-35273 in Oracle PeopleSoft Environment Management. The report says Google notified more than 100 potentially exposed organizations, 68% in higher education, and provides investigation, remediation, and hardening guidance.
Free Substack newsletter by a principal cybersecurity engineer sharing career tips and cybersecurity news, including a recurring 14-day U.S. cyber threat forecast (e.g. the September 22, 2026 VECTR-CAST report on actively exploited Cisco, ScreenConnect and VMware vulnerabilities).
Why I recommend it: Good for people moving into cybersecurity who want a practitioner's read on current threats. The threat levels and forecasts are the author's own analysis, not an official CISA rating — cross-check CVEs against the CISA KEV catalog.
