“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2023-54404 colinhacks - zod ...

Denmark Population Registry Data Breach Affects 8.8 Million People Denmark’s Central Population Register (CPR) has issued a warning regarding a significant data breach that has compromised the per...

Rejetto HFS Servers Actively Scanned for Critical RCE Flaw 🚨 Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery,...

Pwn2Own Ireland 2026 - The Full Schedule Pwn2Own Ireland 2026 has arrived in Cork, and the world’s top security researchers are ready! 🚀 We’ve got more phone entries than we’ve ever had, with over...

MI5 Raises Alarm Over Chinese Funding of UK Academic Research 🚨 MI5 has issued a warning to UK universities regarding the involvement of over 100 academics who may have unknowingly participated in...

ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes A Linux proxy backdoor has been observed exploiting known, unpatched flaws in internet-facing IoT devices and abusing legitimate publ...

User Agent Strings Curiosities Sometimes I have to smile, or my interest is triggered, when I review new User Agent Strings in the honeypot logs. Notable observations include instances like an “au...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2025-12828 ultrapressorg - Ultra ...

Google Gemini Could Soon Get Full Access to Your Mac’s Files, Apps and the Web 🚀 Exciting news for Mac users! Google’s Gemini could soon have the ability to access any file on your macOS device, o...

Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days 🚨 The Dutch Institute for Vulnerability Disclosure (DIVD) has confirmed that attackers breached its infrastructure through t...

RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail Chris Thompson made a career breaking into banks, nuclear power plants, and defense contractors—and getting paid to d...

Malware Campaign Impersonates European Donors to Target Moldovan Media and Civil Society 🚨 Between September 9 and 25, 2026, an attacker targeted Moldovan media and civil society with fraudulent e...

Improper Limitation of a Pathname to a Restricted Directory Source: Fortiguard Date Published: October 2, 2026 An Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) [C...

367,000-Ship Study Finds Global GPS Spoofing, Red Sea Activity Before Grounding A study of 367,000 ships reveals alarming findings about global GPS spoofing, including significant Red Sea activity...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-100891 Trusted Domain Projec...

Vulnerabilities in Monta monta.app Exposed 🚨 Attention! Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging...