“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2020-9709 Adobe - Adobe Photoshop...

T-SQL Being Abused to Deliver Malware on Compromised MS SQL Servers In early October 2026, FortiGuard Labs uncovered an active campaign specifically targeting Internet-facing Microsoft SQL Server ...

Siemens RUGGEDCOM APE1808 Vulnerability Advisory Date Published: November 12, 2026 Source: CISA Palo Alto Networks has published information on a vulnerability in PAN-OS related to the Node2Shell...

LEGO’s BrickLink Taken Offline: What Users Should Know 🚨 LEGO has taken BrickLink offline after detecting what it calls “unusual activity.” The company is currently investigating the situation bef...

GhostMap Android Flaw Can Leave Phones Stuck in Crash Loop 🚨 An Android security flaw could turn a seemingly ordinary app installation into a serious recovery problem, with some affected phones po...

FBI Agent Stole $2.47m in Crypto from Criminal Wallets 🚨 Patrick Steven Yaroch pleaded guilty on November 5 to wire fraud and money laundering after stealing approximately $2.47 million from crypt...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2020-9709 Adobe - Adobe Photoshop...

The Enemy Within: Tracking LIMINAL PANDA and SilentAir through Mobile Networks In this blog, we outline the publicly reported, China-nexus LIMINAL PANDA threat actor’s evolution in its attacks on ...

Notion Discloses Fireworks Breach Exposing Customer AI Chat Transcripts Notion, the digital workspace platform, has revealed that a security breach at its AI infrastructure provider, Fireworks AI,...

Your Training Data is Boring: Anomaly Detection with LLMs 🚀 Following on from research presented at Black Hat USA 2025, Sophos data scientists Ben Gelman, Tamas Nyiri, and Tibor Kristóf Lányi rece...

Who Runs the Ransomware Group Qilin? The cybercrime group Qilin has emerged as the world’s most active ransomware affiliate program, claiming at least 365 victim organizations in the past three mo...

WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data Maersk confirms a data breach involving a legacy system, while WhiteArmor claims 100GB of stolen data and demands a $5 mill...

The EchoLeak Flaw and Prompt Injection Vulnerabilities It’s been more than two years since Microsoft patched the zero-click EchoLeak vulnerability, but the root problem remains: EchoLeak was a fla...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2022-27892 Palantir - Gotham ...

Vanderbilt University Cyberattack Affects Campus Devices 🚨 Vanderbilt University is currently investigating an active cyberattack that may impact university devices, systems, and cloud services. T...

Turla Cereal Tricks On November 28th, 2025, we detected a previously undocumented set of malicious tools being actively used against a governmental organization in Kazakhstan. None of the initiall...