“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-100151 kstover - Ninja Forms – Conta...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2022-51026 bytebase - bytebase ...

Polymarket Users Lose $2.7 Million in Third-Party Script Hack 🚨 Prediction market platform Polymarket briefly halted trading on its international exchange on Thursday, October 29, after users repo...

Northflank Security Breach 🚨 Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthor...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2013-10077 n/a - OctoPrint ...

Hackers Steal and Publish Data on 41,000 Homeland Security Workers 🚨 A group of hackers calling themselves the Department of Peace has reportedly stolen and published the personal details of over ...

Threat Researcher’s Notebook: How Attackers Redirect Crypto Payments Attackers have developed specialized malware to redirect normal transactions to wallets they control, a tactic known as “Clipba...

Official Claude Code Extension Compromise - Security Advisory 🚨 Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace. This backdoor dr...

Defense Contractor Pleads Guilty to Aiding North Korean Remote Worker Scheme A defense contractor with top secret security clearance has pleaded guilty to aiding North Korea’s remote worker scheme...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2020-37284 midgetspy - Sickbeard ...

Silent Train Volt Typhoon Operational Framework Published on: October 29, 2026 Source: Lumen Volt Typhoon’s Silent Train is a covert network designed to gain and maintain access to the technologi...

Tracking AI Adoption in North Korean Threat Actor Tradecraft As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed, efficiency, and complexi...

Online Scam Volumes Double to Overtake Phishing 🚀 Detections of online scams have doubled between July 2025 and June 2026, as cybercriminals focus on more direct ways to generate revenue from vict...

Hackers Launch 8,200 DDoS Attacks Every Hour, Cloudflare’s Latest Report Reveals 🚀 Cloudflare blocked an average of more than 8,200 network-layer DDoS attacks every hour during the third quarter o...

CVE-2026-119285 - Fiber CORS Vulnerability The vulnerability is identified as CVE-2026-119285. Fiber is an Express-inspired web framework written in Go. The following products are affected by the ...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2021-48016 DedeCMS - DedeCMS ...