“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-112949 vitest-dev - vitest@v...

Siemens RUGGEDCOM APE1808 Devices Vulnerabilities Nozomi Networks has published critical information regarding vulnerabilities in Nozomi Guardian/CMC affecting various Siemens Industrial products....

Woman Faces Years in Prison Over a Cash App Account She Says She Never Opened A Cash App account opened in her name has left Amanda Smith facing criminal charges and potentially up to six years in...

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More 🚨 Bluesky Phishing Attack: Bluesky has acknowledged that it is aware of a phishing attack that...

Prince of Persia: A Threat Group Hiding in Plain Sight For nearly two decades, the Iranian nation-state threat actor Prince of Persia has been an active cyber threat, primarily targeting Iranian d...

New BlackX UEFI Bootkit Exploiting Baton Drop In early 2026, we discovered a malware sample similar to BlackLotus that was used in an APT campaign in Central Asia. We dubbed this UEFI bootkit Blac...

CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability CVE-2026-76268 is a critical missing authentication vulnerability in Splunk Enterprise. An unauthenticated ...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2014-125131 DedeCMS - DedeCMS ...

Dissecting Operation FlashHole: A Complex Attack by Lazarus In January, we responded to the Lazarus Group’s novel attack campaign against South Korea, which followed last year’s Operation SyncHole...

Chrome Warns You About Suspicious Websites Now 🚨 Google has beefed up the security in Chrome to further protect you from becoming a victim of online scams. First up is protection against suspiciou...

🚨 Critical PHP Vulnerabilities Alert! On Wednesday, the developers behind the widely-used PHP programming language released emergency security updates to address critical flaws that could allow at...

Signal Bug Could Let Someone Keep Listening After You Hang Up 🚨 A recently disclosed flaw in Signal’s calling software could allow another participant to keep hearing you after you hang up. This c...

Node.js Security Updates 🚀 Node.js has released security updates for its 26.x, 24.x, and 22.x branches to address ten vulnerabilities, including four high-severity flaws affecting DNS lookups, TLS...

Fake Amazon Music x YouTube Deal Lures Creators into a Google Login Trap 🚨 A wave of sites is offering YouTube creators what looks like an invite-only advertising deal with Amazon Music. These sit...

HMS Networks PEAK-System PCAN Windows Drivers Vulnerabilities 🚨 On October 20, 2026, CISA published a critical advisory regarding vulnerabilities in the HMS Networks PEAK-System PCAN Windows drive...

Major Cyber Breach Exposed! A hacker claims to have infiltrated Germany’s far-right Alternative für Deutschland (AfD) party, extracting hundreds of thousands of emails. Now, the alleged attacker s...