“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-112949 vitest-dev - vitest@v...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2014-125131 DedeCMS - DedeCMS ...

Dissecting Operation FlashHole: A Complex Attack by Lazarus In January, we responded to the Lazarus Group’s novel attack campaign against South Korea, which followed last year’s Operation SyncHole...

Chrome Warns You About Suspicious Websites Now 🚨 Google has beefed up the security in Chrome to further protect you from becoming a victim of online scams. First up is protection against suspiciou...

🚨 Critical PHP Vulnerabilities Alert! On Wednesday, the developers behind the widely-used PHP programming language released emergency security updates to address critical flaws that could allow at...

Signal Bug Could Let Someone Keep Listening After You Hang Up 🚨 A recently disclosed flaw in Signal’s calling software could allow another participant to keep hearing you after you hang up. This c...

Node.js Security Updates 🚀 Node.js has released security updates for its 26.x, 24.x, and 22.x branches to address ten vulnerabilities, including four high-severity flaws affecting DNS lookups, TLS...

Fake Amazon Music x YouTube Deal Lures Creators into a Google Login Trap 🚨 A wave of sites is offering YouTube creators what looks like an invite-only advertising deal with Amazon Music. These sit...

HMS Networks PEAK-System PCAN Windows Drivers Vulnerabilities 🚨 On October 20, 2026, CISA published a critical advisory regarding vulnerabilities in the HMS Networks PEAK-System PCAN Windows drive...

Major Cyber Breach Exposed! A hacker claims to have infiltrated Germany’s far-right Alternative für Deutschland (AfD) party, extracting hundreds of thousands of emails. Now, the alleged attacker s...

Moxa AIG-302 ThingsPro Edge Vulnerabilities 🚨 Published on: October 20, 2026 Source: CISA Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive...

How I Got Over 300 Tor Exit Nodes Removed On Friday, Oct 2, at 09:35 AM, 333 infected exit nodes started a coordinated campaign to intercept SSH connections and gather as much unencrypted data as ...

Compromised eMudhra Intermediate Certificates On Saturday, October 17, at 20:06 UTC, Mozilla received a report from a community member that private keys associated with eight eMudhra intermediate ...

Mobile Communications: A Blind Spot Security Leaders Can’t Ignore Mobile is now a core operational pillar for governments, critical infrastructure providers, and large enterprises. However, it is ...

The Army Wants to Sic AI Agents on Its Enemies. What Could Go Wrong? 🚀 As global governments and tech giants grapple with the revelations of autonomous AI agents unexpectedly breaching computer sy...

Pegasus Spyware Targeting Serbian Pro Democracy Movement Serbia’s student-led pro-democracy movement, born from the November 2024 anti-corruption protests, has faced widespread targeting with spyw...