“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

Your MSSP Added 10 New Clients. What Breaks First? Adding 10 new clients sounds like exactly the kind of problem an MSSP wants to have, bringing more revenue, more accounts, and more room to grow....

Vulnerabilities in Guangzhou Juan IoT Technology EseeCloud 🚨 Attention: Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The follo...

The Next MOVEit May Already Be in Your File Transfer Queue Managed file transfer (MFT) systems, vendor portals, EDI pipelines, and e-signature platforms share a common vulnerability: they concentr...

Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware Our research indicates that the online advertising ecosystem is abused to facilitate the ...

Bank of America Brings in 1,000 Contractors to Patch Bugs Identified by Mythos Bank of America recruited an additional 1,000 contractors to help patch all the vulnerabilities discovered by Anthrop...

ARMORY CASTLE Exploits BeyondTrust On October 15, BeyondTrust disclosed a vulnerability, CVE-2026-102764, impacting BeyondTrust Remote Support (formerly Bomgar) appliances. The successful exploita...

Ransomware Gets Personal: We-Know-Where-You-Are Kind of Stuff 🚨 Tim Beasley, a senior incident response consultant at Semperis, was investigating a cyberattack involving Russia’s Midnight Blizzard...

LG Smart TV Vulnerabilities Allow Root Access Over Local Network 🚨 Three vulnerabilities in LG’s webOS have been discovered that can be chained together to grant an attacker on the same local netw...

The Hidden Network: Inside the Phishing Infrastructure Ecosystem Powering Global Cybercrime 🚨 Over the past year, Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected ...

Orphaned VBA Projects Inside DWG Files In a nutshell: the VBA code is stored inside an OLE file, which is embedded inside the DWG file. You can perform a brute-force search for the embedded OLE fi...

Justice Department Takes Action Against North Korean IT Workers Today, the Department of Justice announced coordinated actions against the Democratic People’s Republic of North Korea (DPRK) govern...

CikaBika Bot - Inside a Discord RAT 🚀 Darktrace malware researchers have discovered an ongoing malware campaign utilizing a document-themed lure that includes a malicious LNK file and a PDF with a...

CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP A new vulnerability, CVE-2026-102298, has been reported. In Omada Controller MSP mode, the user-co...

CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP A new vulnerability, CVE-2026-102298, has been reported. In Omada Controller MSP mode, the user-co...

AI Testing Contracts Need a Retrospective Right If you purchased an AI red-team or cyber-capability evaluation this year, there’s a crucial question that likely wasn’t included in the security que...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-104075 TVU Networks - TVU Re...