“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

LG Smart TV Vulnerabilities Allow Root Access Over Local Network 🚨 Three vulnerabilities in LG’s webOS have been discovered that can be chained together to grant an attacker on the same local netw...

The Hidden Network: Inside the Phishing Infrastructure Ecosystem Powering Global Cybercrime 🚨 Over the past year, Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected ...

Orphaned VBA Projects Inside DWG Files In a nutshell: the VBA code is stored inside an OLE file, which is embedded inside the DWG file. You can perform a brute-force search for the embedded OLE fi...

Justice Department Takes Action Against North Korean IT Workers Today, the Department of Justice announced coordinated actions against the Democratic People’s Republic of North Korea (DPRK) govern...

CikaBika Bot - Inside a Discord RAT 🚀 Darktrace malware researchers have discovered an ongoing malware campaign utilizing a document-themed lure that includes a malicious LNK file and a PDF with a...

CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP A new vulnerability, CVE-2026-102298, has been reported. In Omada Controller MSP mode, the user-co...

CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP A new vulnerability, CVE-2026-102298, has been reported. In Omada Controller MSP mode, the user-co...

AI Testing Contracts Need a Retrospective Right If you purchased an AI red-team or cyber-capability evaluation this year, there’s a crucial question that likely wasn’t included in the security que...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-104075 TVU Networks - TVU Re...

Swann Communications SWIFI-SE2KIC Vulnerabilities Date Published: October 13, 2026 Source: CISA Successful exploitation of these vulnerabilities could allow an attacker to view video information ...

OpenAI Engineer Arrested for Allegedly Planting Spy Device in Office A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at t...

Kris McConkey on X: Insights into RedRelay and APT15 🚀 Having previously posted that this was an interesting rabbit hole, a spam account liking that post a couple of weeks ago reminded me that I n...

Developing Gemini 4 Argon Responsibly and Safely Gemini 4 Argon is a significant advancement in what models can achieve, especially in handling complex, real-world tasks across various domains suc...

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers 🚨 Breaking News: Attackers took remote control of fridges and freezers at hundreds of French supermarkets on t...

A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days 🚀 Volexity has identified active in-the-wild exploitation of a vulnerability chain allowing unauthentica...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2025-27895 IBM - DB2 Recovery Exp...