Security.io Intelligence DeskFriday, 7 August 2026
Independent analysis
for security executives
The Security.io DailyThe Weekday Intelligence Edition
Free to readers
Supported by underwriters
Intelligence desk

Threat Intelligence

A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.

2026-08-07LightSpy’s new footprint puts routers inside the spyware incident boundaryThreat Intelligence
2026-08-07Vishing-extortion crews shift towards finance deal rooms and enterprise cloudIdentity
2026-08-05GitHub event streams belong in active detection, not audit storageSupply Chain
2026-08-04Reported AI-managed proxyjacking campaign needs verification, not dismissalAI Security
2026-07-31Amazon links four npm compromises to one DPRK groupSupply Chain
2026-07-30OWAReaper persistence survives credential rotation and endpoint rebuildingThreat Intelligence
2026-07-27Compromised hotel Wi-Fi gateways create an MFA-satisfied path into Microsoft 365Identity and Access
2026-07-27Recovered intrusion logs show an AI agent executing unattended post-exploitation tasksAI and Emerging Threats
2026-07-24Iran-linked actors are overriding PLC shutdown and alarm logicOperational Technology and Resilience
2026-07-24Laundry Bear’s Zimbra campaign turns a viewed email into mailbox persistenceThreat Intelligence and Identity
2026-07-17The Friday edition should define the weekend watchlistCISO desk
2026-07-17The Gentlemen’s growth shows the value of packaged criminal operationsRansomware desk
2026-07-16ClickLock shows social engineering adapting to the Mac enterpriseEndpoint desk
2026-07-16Fraud disruption reveals the infrastructure behind the scamLaw enforcement
2026-07-13Monday needs a control-room brief, not a weekend inboxCISO desk
2026-07-13The state of the router is now a critical-infrastructure questionGeopolitics & infrastructure