“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2025-14123 davidanderson - Redux ...

Nippon Columbia Malware Incident Exposes 8.6 Million Karaoke Fan Records 🎤 Daiichi Kosho, a major Japanese entertainment system maker, has disclosed a significant malware infection at its contract...

CVE-2026-108978 - Samsung rlottie Heap-based Buffer Overflow A heap-based buffer overflow vulnerability in Samsung Open-source rlottie allows for a buffer overflow via environment variables. This ...

CVE-2026-108769 - zhayujie CowAgent Markdown Rendering Denial of Service A security flaw has been discovered in zhayujie CowAgent up to version 2.2.0. This vulnerability affects an unknown part of...

Nvidia Monitoring Bug Could Have Knocked AI Offline 🚨 A recent Nvidia monitoring bug could have potentially knocked AI systems offline. This vulnerability allowed attackers to crash monitoring ser...

Matchboil New Tricks Same Old Evil Intentions ESET researchers have documented the evolution of the MATCHBOIL malware, a custom C# downloader wielded by the Russia-aligned UAC-0099 APT group. This...

Internet Scanning In Vt Published on: October 9, 2026 Source: VirusTotal Blog Until now, an IP report in VirusTotal provided valuable information about reputation, hosting details, passive DNS re...

FBI Arrests Another Shinyhunters 🚨 The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel announced on October 9 in a post on X. ShinyHunters is the extorti...

Darksword Variant Threat Research In August 2026, we investigated a DarkSword infection that turned out to be a previously unseen variant, which we call P7 DarkSword. The name P7 comes from the th...

Critical Telegram Desktop Bug: Hackers Can Steal Accounts with a Single Click 🚨 A severe vulnerability has been discovered in Telegram Desktop versions prior to 7.2.9, released on September 17, 20...

AI-Generated War Propaganda on Music Platforms It’s surprisingly easy to distribute AI-generated war propaganda on music platforms like SoundCloud and YouTube. 🎶 It’s cheap and easy to generate wa...

We are fighting phishing at the wrong layer Source: CSO Online Date Published: October 8, 2026 Attackers can replace phishing domains almost for free, so security teams should hunt for the server...

Unknown Threat Actor Uses Artex To Target South Korean Finance CrowdStrike Intelligence has identified infrastructure associated with a targeted campaign against South Korean financial organizatio...

Reconstructing AI Agent Activity: Two New Scripts for Forensic Review A major update to FOR577 has added new material on investigating AI usage in incident response, discussing 8 of the most popul...

Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones Bitdefender researchers have uncovered the Midnight Mimosa malware preinstalled on low-cost MediaTek Android phones, enabling ...

Four US States Allege TP-Link Defrauded Customers, Seek Damages Four US states have filed lawsuits against TP-Link Systems, alleging that the company misled consumers about the security of its pro...