Border Cyber Group

Critical Infrastructure Threat Intelligence Briefing

CISA-confirmed exploitation of a CVSS 10 Oracle middleware flaw leads today’s briefing, alongside active Zimbra attacks, attempted miniOrange and GitLab exploitation, and new identity, cloud, broadband and updater-chain risks.

25 Aug 2026 zimbra Oracle Fusion Middleware Keycloak GitLab WordPress SAML Spring AWS Credentials software supply chain

Threat Intelligence Briefing

Today's briefing prioritizes exploited Zimbra, Oracle, and GitLab flaws; critical identity bypasses; exposed router control; targeted Spring fixes; automotive updater abuse; long-lived AWS keys; and npm-mirror phishing infrastructure.

24 Aug 2026 Joseph Cox Dark Wire ANOM Operation Trojan Shield FBI surveillance, encrypted phones digital privacy law enforcement backdoors

Dark Wire: When the FBI Became the Phone Company

The FBI did not crack ANOM. It became ANOM. Joseph Cox’s Dark Wire tells the extraordinary story of a global criminal communications network secretly operated by law enforcement—and the surveillance model it may have left behind.

24 Aug 2026 Critical Infrastructure Cybersecurity UK power plant cyberattack Zimbra vulnerability GitLab Security TrueConf PhantomCore Cisco Crosswork NetScaler authentication bypass software supply chain security Zimbra CVE-2026-73570 GitLab CVE-2026-19478, TrueConf Head Mare Cisco security updates NetScaler CVE-2026-19490 AI-assisted cybercrime DJI CVE-2026-77812

Critical Infrastructure Threat Intelligence Briefing

A reported four-day shutdown at a small UK generator sharpens concern over exposed operational systems as Zimbra, GitLab and TrueConf face exploitation activity, while critical Cisco, NetScaler, npm and DJI risks demand immediate review.

24 Aug 2026 UK power plant UAT-10147 GitLab exploitation TrueConf Server Cisco Crosswork npm supply chain automotive malware passkey phishing

Threat Intelligence Briefing

A reported shutdown at a British power plant leads today’s briefing, alongside AI-assisted server attacks, exploited GitLab and TrueConf flaws, poisoned npm packages, automotive malware, and identity persistence that survives password resets.