Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2025-15693 Unknown - JCH Optimize...

Critical Vulnerabilities in MikroTik RouterOS Being Actively Exploited The CERT Polska team has identified and coordinated the disclosure of six vulnerabilities in MikroTik RouterOS. Combining two...

ASUS Control Center Vulnerability Alert 🚨 ASUS has issued an urgent security update for ASUS Control Center Enterprise (ACC) after researchers uncovered a maximum-severity vulnerability that allow...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2021-44320 n/a - n/a Parrot...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2022-35499 n/a - n/a In Tri...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2023-54356 kyverno - kyverno ...

Rogue ScreenConnect Installations Suggest Worm-Like Activity 🚨 Recently, Huntress observed a strange pattern across unrelated endpoints within several different organizations that we protect. In l...

Signature Optional - Analysis of CVE-2026-28323 The SamlConsumer.getAuthenticatedUserFromSamlResponse() method was where the authentication decision happened. This method processed SAMLResponse va...

Pegasus Zero-Click Exploit Infects Serbian Student Activist’s iPhone A member of Serbia’s student protest movement has been infected with NSO Group’s Pegasus spyware through an iMessage zero-click...

Node.js: Old Technique Makes a Comeback 🚀 Abuse of Node.js has undergone a revival. The Symantec Threat Hunter Team has observed this technique being used by multiple actors since February 2026, w...

Cybercrooks Target Fishbrain to Steal Password Hashes Armed with password hashes and salts, attackers could already be kraken those credentials! 🦑 Cybercriminals have reeled in password hashes an...

BraZetsu Malware Overview Cybersecurity researchers have disclosed details of a sophisticated Python-based Windows malware framework called BraZetsu that fuels an underground marketplace commercia...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-19593 OpenAI - Codex Desktop...

Daejon Love Case Highlights Online Romance Scams The internet has revolutionized dating, and there has been a surge in U.S. adults using apps to find ideal matches post-pandemic. While these apps ...

Russian Hacker Faces Up to 20 Years in Prison Following Extradition and Indictment A federal grand jury in California has indicted Russian citizen Searzhudin Tamirlanovich Aktulaev for allegedly c...

Google Drops Key Memory Protection From Pixel 11 🚨 GrapheneOS has spent years turning hardened memory safety into a non-negotiable baseline for mobile security. Now the project faces its sharpest ...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-10195 fs-code - FS Poster - ...