Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...
ictsec.pl
Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...
🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
Be Careful What You Put in 'Anyone with the Link' Google Docs
Be Careful What You Put in ‘Anyone with the Link’ Google Docs The next time you type something sensitive into a Google Doc—or any other online tool with a sharing feature—be careful about the perm...
Your Controls Block Known Attacks. What About the Behavior?
Overview Now in its fourth year, the Blue Report 2026 from Picus Labs measures how enterprise prevention and detection actually perform in production, across more than 338 million attack simulatio...
2026-08-18 Daily Vulns
Why Facebook's War on Ad Blockers Could Help Scammers
Why Facebook’s War on Ad Blockers Could Help Scammers Reports that uBlock Origin is stepping back from the effort to filter Facebook ads are a reminder that ad blocking is no longer just about inc...
Call for Applications Information Controls Research Program 2026
Call for Applications - Information Controls Research Program 2026 The Information Controls Research Program (ICRP) from the Open Technology Fund (OTF) supports applied research into how authorita...
UNISOC Modem Flaw Enables Remote Code Execution via Video Calls
UNISOC Modem Flaw Enables Remote Code Execution via Video Calls A vulnerability in UNISOC modem firmware can allow arbitrary code execution with kernel privileges from the modem context, potential...
McDonald's Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen
McDonald’s Employee Data Leak 🚨 A seller claims that 1.7 million McDonald’s employee records were stolen from Azure. An 8,000-row sample appears genuine, but its age and full size remain unconfirm...
Invisible AI Prompts Trigger Court Sanctions
Invisible AI Prompts Trigger Court Sanctions 🚨 A litigant hid AI prompt injections in a court filing to influence a ruling. The judge caught it and banned him from electronic filing. A man suing t...
General Electric, Philips, and Shell Investigate Alleged Breaches
General Electric, Philips, and Shell Investigate Alleged Breaches 🚨 General Electric, Philips, and Shell are each investigating claims of data theft by the Clop ransomware gang. Clop claims to hav...
CVE-2026-75531 - Stored Cross-Site Scripting Vulnerability in Pandora
CVE-2026-75531 - Stored Cross-Site Scripting Vulnerability in Pandora CVE-2026-75531, a stored cross-site scripting (XSS) vulnerability, has been identified in Pandora. This vulnerability impacts ...
C2Looper A New Backdoor Likely Tied To Ransomware With GitHub C2
C2Looper - A New Backdoor Likely Tied To Ransomware With GitHub C2 In July 2026, Zscaler ThreatLabz identified a new Rust-based malware family that we track as C2Looper, which is likely leveraged ...
Large-scale DDoS Attacks Disrupted Threema Secure Messaging Service
Large-scale DDoS Attacks Disrupted Threema Secure Messaging Service Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing s...
2026-08-16 Daily Vulns
GeoServer Zero-Day Is Already Being Probed. That's the Problem
GeoServer Zero-Day Vulnerability 🚨 GeoServer is currently facing an unpatched zero-day vulnerability that enables SQL injection and potentially remote code execution (RCE). Attackers are already p...
Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware
Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware 🚨 Attackers are exploiting expired domains! They are purchasing these domains to take advantage of their reputation, traffi...
WhatsApp is Testing a New Warning for Scam Messages
WhatsApp’s New Scam Alert Feature 🚨 Meta has announced that it’s rolling out a new feature for WhatsApp users aimed at combating scammers. The Scam Alert is an optional beta feature that utilizes ...
Who's Tracking You? Use This New Service to Find Out
Who’s Tracking You? Use This New Service to Find Out A powerful and free new service called DecryptAds scrapes and correlates adtech data, making it simple to quickly learn a great deal about the ...