<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
  xmlns:dc="http://purl.org/dc/elements/1.1/"
  xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
  xmlns:admin="http://webns.net/mvcb/"
  xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
  xmlns:content="http://purl.org/rss/1.0/modules/content/">

Third segment: threat-intelligence
  
  <channel>

  <title><![CDATA[CircleID]]></title>
  <link>https://circleid.com/topics/threat-intelligence</link>
  <description>CircleID - Threat Intelligence</description>
  <dc:language>en</dc:language>
  <dc:rights>Copyright 2026, unless where otherwise noted.</dc:rights>
  <dc:date>2026-07-29T16:28:00+00:00</dc:date>

  
    <item>
      <title><![CDATA[Microsoft Launches AI Cybersecurity Model to Boost MDASH Performance and Cut Costs]]></title>
      <link>https://circleid.com/posts/microsoft&#45;launches&#45;ai&#45;cybersecurity&#45;model&#45;to&#45;boost&#45;mdash&#45;performance&#45;and&#45;cut&#45;costs</link>
      <guid isPermaLink="true">https://circleid.com/posts/microsoft&#45;launches&#45;ai&#45;cybersecurity&#45;model&#45;to&#45;boost&#45;mdash&#45;performance&#45;and&#45;cut&#45;costs</guid>

      <description><![CDATA[Microsoft has unveiled a specialist cybersecurity AI model powering MDASH, claiming higher benchmark performance and lower costs while launching Project Perception, an agentic security platform designed to help defenders counter increasingly automated cyber threats.]]></description>
      <dc:date>2026-07-28T09:21:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[Inside a TDS-Powered ClickFix Malware Ecosystem: A DNS Deep Dive]]></title>
      <link>https://circleid.com/posts/inside&#45;a&#45;tds&#45;powered&#45;clickfix&#45;malware&#45;ecosystem&#45;a&#45;dns&#45;deep&#45;dive</link>
      <guid isPermaLink="true">https://circleid.com/posts/inside&#45;a&#45;tds&#45;powered&#45;clickfix&#45;malware&#45;ecosystem&#45;a&#45;dns&#45;deep&#45;dive</guid>

      <description><![CDATA[DNS analysis of a malware distribution ecosystem uncovered thousands of linked artifacts, exposing typosquatting, malicious infrastructure and victim connections that broaden detection opportunities beyond Check Point Research's original indicators through expanded DNS intelligence correlation efforts.]]></description>
      <dc:date>2026-07-27T12:51:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[Who Registers the Domain That Steals Your Data? The Registrar Accountability Gap in India&#8217;s DNS Abuse Crisis]]></title>
      <link>https://circleid.com/posts/who&#45;registers&#45;the&#45;domain&#45;that&#45;steals&#45;your&#45;data&#45;the&#45;registrar&#45;accountability&#45;gap&#45;in&#45;indias&#45;dns&#45;abuse&#45;crisis</link>
      <guid isPermaLink="true">https://circleid.com/posts/who&#45;registers&#45;the&#45;domain&#45;that&#45;steals&#45;your&#45;data&#45;the&#45;registrar&#45;accountability&#45;gap&#45;in&#45;indias&#45;dns&#45;abuse&#45;crisis</guid>

      <description><![CDATA[India's DNS abuse crisis exposes a registrar accountability gap: malicious domains remain online while vulnerable users bear the cost. Concentrated abuse patterns suggest stronger oversight and faster mitigation could significantly reduce predictable harms nationwide today.]]></description>
      <dc:date>2026-07-24T07:53:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[DNS Investigation: Threat Actor TA4922 Goes Global]]></title>
      <link>https://circleid.com/posts/dns&#45;investigation&#45;threat&#45;actor&#45;ta4922&#45;goes&#45;global</link>
      <guid isPermaLink="true">https://circleid.com/posts/dns&#45;investigation&#45;threat&#45;actor&#45;ta4922&#45;goes&#45;global</guid>

      <description><![CDATA[TA4922 is expanding beyond nearby targets, deploying a fast-changing malware arsenal across Europe and Africa. A DNS investigation uncovered thousands of connected domains, dozens of malicious assets and signs of compromised victim infrastructure worldwide today.]]></description>
      <dc:date>2026-07-17T08:56:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[FBI Warns of Russian Cyber Campaign Targeting Vulnerable Routers]]></title>
      <link>https://circleid.com/posts/fbi&#45;warns&#45;of&#45;russian&#45;cyber&#45;campaign&#45;targeting&#45;vulnerable&#45;routers</link>
      <guid isPermaLink="true">https://circleid.com/posts/fbi&#45;warns&#45;of&#45;russian&#45;cyber&#45;campaign&#45;targeting&#45;vulnerable&#45;routers</guid>

      <description><![CDATA[The FBI and international partners warn that Russia's FSB Center 16 is exploiting vulnerable routers worldwide, highlighting persistent weaknesses in network security and urging organizations to adopt stronger protections to safeguard critical infrastructure against intrusion.]]></description>
      <dc:date>2026-07-14T12:12:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[Under the DNS Hood of an Ongoing Legacy MSHTA Tool Attack]]></title>
      <link>https://circleid.com/posts/under&#45;the&#45;dns&#45;hood&#45;of&#45;an&#45;ongoing&#45;legacy&#45;mshta&#45;tool&#45;attack</link>
      <guid isPermaLink="true">https://circleid.com/posts/under&#45;the&#45;dns&#45;hood&#45;of&#45;an&#45;ongoing&#45;legacy&#45;mshta&#45;tool&#45;attack</guid>

      <description><![CDATA[A DNS analysis of infrastructure behind ongoing MSHTA abuse uncovered malicious registrations, typosquatting clusters, victim activity, and hundreds of linked indicators, revealing how legacy Windows tooling continues enabling modern malware campaigns through interconnected DNS intelligence.]]></description>
      <dc:date>2026-07-10T09:16:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[UK Unveils AI Cyber Shield to Counter Machine-Speed Digital Threats]]></title>
      <link>https://circleid.com/posts/uk&#45;unveils&#45;ai&#45;cyber&#45;shield&#45;to&#45;counter&#45;machine&#45;speed&#45;digital&#45;threats</link>
      <guid isPermaLink="true">https://circleid.com/posts/uk&#45;unveils&#45;ai&#45;cyber&#45;shield&#45;to&#45;counter&#45;machine&#45;speed&#45;digital&#45;threats</guid>

      <description><![CDATA[Britain is developing Cyber Shield, an AI-powered national cyber defense program designed to detect threats, automate responses and protect critical infrastructure as increasingly sophisticated attacks challenge conventional security and strain existing defensive capabilities.]]></description>
      <dc:date>2026-07-08T08:27:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[macOS ClickFix Campaign Delivers AMOS and Other Infostealers: A DNS Deep Dive]]></title>
      <link>https://circleid.com/posts/macos&#45;clickfix&#45;campaign&#45;delivers&#45;amos&#45;and&#45;other&#45;infostealers&#45;a&#45;dns&#45;deep&#45;dive</link>
      <guid isPermaLink="true">https://circleid.com/posts/macos&#45;clickfix&#45;campaign&#45;delivers&#45;amos&#45;and&#45;other&#45;infostealers&#45;a&#45;dns&#45;deep&#45;dive</guid>

      <description><![CDATA[A DNS deep dive into Microsoft's macOS ClickFix campaign uncovered victim infrastructure, typosquatting clusters, malicious registrations, and hundreds of linked indicators, exposing a broader infostealer ecosystem beyond the original 140 network IoCs identified by Microsoft.]]></description>
      <dc:date>2026-07-06T08:58:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[What the Interisle Report Reveals, and What It Doesn&#8217;t, About DNS Abuse]]></title>
      <link>https://circleid.com/posts/what&#45;the&#45;interisle&#45;report&#45;reveals&#45;and&#45;what&#45;it&#45;does&#45;not&#45;about&#45;dns&#45;abuse</link>
      <guid isPermaLink="true">https://circleid.com/posts/what&#45;the&#45;interisle&#45;report&#45;reveals&#45;and&#45;what&#45;it&#45;does&#45;not&#45;about&#45;dns&#45;abuse</guid>

      <description><![CDATA[Interisle's report illuminates malicious registration trends, but its broad blocklist methodology measures different questions than DNS Abuse, complicating conclusions about registry and registrar accountability by conflating reputation signals with actionable domain enforcement decisions for policymakers.]]></description>
      <dc:date>2026-06-30T08:34:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[DNS Deep Dive: TA416 European Government Espionage Campaigns]]></title>
      <link>https://circleid.com/posts/dns&#45;deep&#45;dive&#45;ta416&#45;european&#45;government&#45;espionage&#45;campaigns</link>
      <guid isPermaLink="true">https://circleid.com/posts/dns&#45;deep&#45;dive&#45;ta416&#45;european&#45;government&#45;espionage&#45;campaigns</guid>

      <description><![CDATA[An extensive DNS analysis of TA416's renewed European espionage campaign uncovered malicious infrastructure, typosquatting clusters, historical network activity, and thousands of connected artifacts that expand defenders' visibility beyond Proofpoint's original indicators for proactive threat hunting.]]></description>
      <dc:date>2026-06-29T13:10:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[DNS Deep Dive: GHOST STADIUM Takes Advantage of FIFA 2026]]></title>
      <link>https://circleid.com/posts/dns&#45;deep&#45;dive&#45;ghost&#45;stadium&#45;takes&#45;advantage&#45;of&#45;fifa&#45;2026</link>
      <guid isPermaLink="true">https://circleid.com/posts/dns&#45;deep&#45;dive&#45;ghost&#45;stadium&#45;takes&#45;advantage&#45;of&#45;fifa&#45;2026</guid>

      <description><![CDATA[A DNS investigation of the GHOST STADIUM phishing operation uncovered typosquatting clusters, malicious infrastructure, victim-linked IP activity, and thousands of connected domains, revealing the scale of a FIFA 2026 ticket fraud ecosystem.]]></description>
      <dc:date>2026-06-24T09:09:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[When AI Writes the Scam: How Artificial Intelligence Is Making DNS Abuse Harder to Detect]]></title>
      <link>https://circleid.com/posts/when&#45;ai&#45;writes&#45;the&#45;scam&#45;how&#45;artificial&#45;intelligence&#45;is&#45;making&#45;dns&#45;abuse&#45;harder&#45;to&#45;detect</link>
      <guid isPermaLink="true">https://circleid.com/posts/when&#45;ai&#45;writes&#45;the&#45;scam&#45;how&#45;artificial&#45;intelligence&#45;is&#45;making&#45;dns&#45;abuse&#45;harder&#45;to&#45;detect</guid>

      <description><![CDATA[Artificial intelligence is transforming phishing and DNS abuse, erasing the linguistic clues that once exposed scams. As attacks become personalised, automated and multilingual, governance frameworks are struggling to keep pace with a rapidly expanding threat surface.]]></description>
      <dc:date>2026-06-22T08:51:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[A DNS Investigation of Shadow-Earth-053]]></title>
      <link>https://circleid.com/posts/a&#45;dns&#45;investigation&#45;of&#45;shadow&#45;earth&#45;053</link>
      <guid isPermaLink="true">https://circleid.com/posts/a&#45;dns&#45;investigation&#45;of&#45;shadow&#45;earth&#45;053</guid>

      <description><![CDATA[A DNS investigation of Shadow-Earth-053 uncovered hundreds of victim-linked connections and a sprawling infrastructure tied to China-aligned cyber-espionage. Analysis of known indicators exposed additional domains, IP addresses, and registration patterns that broaden the campaign's suspected footprint.]]></description>
      <dc:date>2026-06-19T12:17:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[What Third-Party Domain Registrations Reveal About World Cup 2026 Risks]]></title>
      <link>https://circleid.com/posts/what&#45;third&#45;party&#45;domain&#45;registrations&#45;reveal&#45;about&#45;world&#45;cup&#45;2026&#45;risks</link>
      <guid isPermaLink="true">https://circleid.com/posts/what&#45;third&#45;party&#45;domain&#45;registrations&#45;reveal&#45;about&#45;world&#45;cup&#45;2026&#45;risks</guid>

      <description><![CDATA[Third-party domain registrations tied to FIFA are surging ahead of the 2026 World Cup, revealing how major events fuel brand abuse, customer confusion, and fraud, from fake ticket sites to sophisticated scams timed to exploit peak fan interest.]]></description>
      <dc:date>2026-06-15T12:28:00-07:00</dc:date>
    </item>
  
    <item>
      <title><![CDATA[DNS Deep Diving into FakeWallet Crypto Stealer]]></title>
      <link>https://circleid.com/posts/dns&#45;deep&#45;diving&#45;into&#45;fakewallet&#45;crypto&#45;stealer</link>
      <guid isPermaLink="true">https://circleid.com/posts/dns&#45;deep&#45;diving&#45;into&#45;fakewallet&#45;crypto&#45;stealer</guid>

      <description><![CDATA[A DNS-focused investigation of the FakeWallet crypto-stealer campaign uncovered links to malicious infrastructure, potential victims, and thousands of connected domains, revealing signs of pre-staged operations and suggesting the wallet-phishing scheme was broader and longer-running than first reported.]]></description>
      <dc:date>2026-06-15T11:22:00-07:00</dc:date>
    </item>
  

  </channel>
  

</rss>