“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2020-9709 Adobe - Adobe Photoshop...

Notion Discloses Fireworks Breach Exposing Customer AI Chat Transcripts Notion, the digital workspace platform, has revealed that a security breach at its AI infrastructure provider, Fireworks AI,...

Your Training Data is Boring: Anomaly Detection with LLMs 🚀 Following on from research presented at Black Hat USA 2025, Sophos data scientists Ben Gelman, Tamas Nyiri, and Tibor Kristóf Lányi rece...

WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data Maersk confirms a data breach involving a legacy system, while WhiteArmor claims 100GB of stolen data and demands a $5 mill...

The EchoLeak Flaw and Prompt Injection Vulnerabilities It’s been more than two years since Microsoft patched the zero-click EchoLeak vulnerability, but the root problem remains: EchoLeak was a fla...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2022-27892 Palantir - Gotham ...

Vanderbilt University Cyberattack Affects Campus Devices 🚨 Vanderbilt University is currently investigating an active cyberattack that may impact university devices, systems, and cloud services. T...

Turla Cereal Tricks On November 28th, 2025, we detected a previously undocumented set of malicious tools being actively used against a governmental organization in Kazakhstan. None of the initiall...

Trump Mobile Hackers Target Health Records of 2 Million Texans 🚨 A ransomware gang behind the Trump Mobile breach claims to have stolen sensitive records belonging to around two million Texans in ...

Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe During a year-long investigation, Check Point Research identified three distinct operational clusters span...

Microsoft Uncovers Long-Standing Rust Bug 🚀 Microsoft researchers have uncovered a memory-safety bug in Rust’s standard library that had gone undetected for nearly 11 years. This discovery include...

Microsoft Fixes Nearly 1,100 Security Vulnerabilities Microsoft released updates today to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software. This mo...

Google’s New AI Tool Proves Signal Encryption Works Researchers at Google DeepMind have made a groundbreaking advancement by using AI to formally verify portions of Signal’s underlying code. This ...

Enforcing Intent-Based Access Control at the Endpoint OpenAI demonstrated the problem while hardening its training environment. In Securing our frontier model training environment, published Octob...

Default Admin Password Let Researchers Unlock and Start Cars 🚗🔐 Researchers have successfully taken over customer accounts at two car brands, demonstrating how they could remotely unlock and start...

Amadeus Breach Compromises 116,000 Finnair Bookings At least 116,000 Finnair reservations have been compromised in a huge data breach connected to Amadeus, a third-party software vendor that suppl...