“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...
ictsec.pl
Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...
Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...
🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
2026-11-09 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-101367 Oracle Corporation - ...
Scans for Sshole Vulnerability (CVE-2026-123158)
Scans for Sshole Vulnerability (CVE-2026-123158) 🚨 Our honeypots use Cowrie to collect SSH data. With the emergence of the sshole vulnerability (CVE-2026-123158) last week, we are now seeing an inc...
2026-11-08 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2019-16447 Adobe - Adobe Illustra...
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands Fraudulent reward portals and fake gift card giveaways are surging globally, tricking users into deceptive verification loops and paid...
2026-11-07 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2014-125137 C97net - qEngine CMSC...
Chainalysis Breach Exposes All Users' Credentials
Chainalysis Breach Exposes All Users’ Credentials 🚨 Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into a cyber attack targeting its systems has exposed names, us...
Alpine Linux and OpenSSH Patch Flaw Exposed
Alpine Linux and OpenSSH Patch Flaw Exposed 🚨 The perfect nightmare scenario for a Linux server is when all an attacker needs to do is reach the server’s Secure Shell (SSH) port, waltz right in, a...
Railway Engineer Admits Running AI Agents Against Rival Cloud Platform
Railway Engineer Admits Running AI Agents Against Rival Cloud Platform 🚀 An engineer at the cloud platform Railway has acknowledged running AI agents against the competing cloud platform Primcloud...
A Kubernetes CVE just dropped. Here's how to find and fix what matters.
A Kubernetes CVE just dropped. Here’s how to find and fix what matters. Critical Kubernetes CVEs arrive constantly. Some hit an operator or controller, some the Linux kernel underneath your nodes,...
10.3K Exposed Fridges Shared Suppliers and Residential Proxies
10.3K Exposed Fridges: Shared Suppliers and Residential Proxies Infrawatch has identified a significant exposure, with 10.3K active refrigeration hosts found across 127 countries and territories. ...
SlippyNunchucks Hijacks Sogou Input Method to Distribute Malware
SlippyNunchucks Hijacks Sogou Input Method to Distribute Malware At ESET, we have been tracking the DarkVigil toolset (also known as FDMTP) and its operator, the SlippyNunchucks threat actor, sinc...
TraderTraitor vs Contagious Interview
TraderTraitor vs Contagious Interview 🚀 On October 29th, 2026, Binance was hacked for approximately $6.4 billion. The attack was quickly attributed to the DPRK’s TraderTraitor threat actor group b...
Security Researcher Uncovers Exposed Trade Secrets at Tobacco Company
Security Researcher Uncovers Exposed Trade Secrets at Tobacco Company A professional penetration tester discovered significant security vulnerabilities within a tobacco company, exposing sensitive...
New Lindnor Backdoor and Glut of Security Killers Used in Ransomware Attack on U.S. Org
New Lindnor Backdoor and Glut of Security Killers Used in Ransomware Attack on U.S. Org 🚨 Attackers using the Anubis ransomware targeted a U.S. organization in October 2026 with a new custom backd...
How Governments Detect VPN Traffic, and Why Encryption Alone Doesn't Hide It
How Governments Detect VPN Traffic, and Why Encryption Alone Doesn’t Hide It A VPN that works perfectly at home can stop working the moment its user lands in a country with a national firewall. Th...
Herd Immunity for Identity Introducing Adversary Infrastructure
Herd Immunity for Identity: Introducing Adversary Infrastructure Source: Huntress Date Published: November 5, 2026 In March, our SOC observed a phishing-as-a-service operation transform Railway, ...