“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2013-10077 n/a - OctoPrint ...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2020-37284 midgetspy - Sickbeard ...

Silent Train Volt Typhoon Operational Framework Published on: October 29, 2026 Source: Lumen Volt Typhoon’s Silent Train is a covert network designed to gain and maintain access to the technologi...

Tracking AI Adoption in North Korean Threat Actor Tradecraft As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed, efficiency, and complexi...

Online Scam Volumes Double to Overtake Phishing 🚀 Detections of online scams have doubled between July 2025 and June 2026, as cybercriminals focus on more direct ways to generate revenue from vict...

Hackers Launch 8,200 DDoS Attacks Every Hour, Cloudflare’s Latest Report Reveals 🚀 Cloudflare blocked an average of more than 8,200 network-layer DDoS attacks every hour during the third quarter o...

CVE-2026-119285 - Fiber CORS Vulnerability The vulnerability is identified as CVE-2026-119285. Fiber is an Express-inspired web framework written in Go. The following products are affected by the ...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2021-48016 DedeCMS - DedeCMS ...

Volt Typhoon Hides Zero-Day Attacks Using ‘Silent Train’ Framework 🚀 Chinese state-sponsored hacking group Volt Typhoon has been utilizing a sophisticated framework known as Silent Train to conduc...

Yamaha YMS-VPN8 and YMS-VPN8-CP Vulnerability Alert 🚨 Date Published: October 28, 2026 Source: JVN JVN#30675482 indicates that Yamaha YMS-VPN8 and YMS-VPN8-CP register Windows services with unquo...

Summit Public Schools Data Breach 🚨 A hacker has leaked 115 GB of data from Summit Public Schools, exposing billions of lines of personal records of students and staff, including approximately 21,...

Never Bring a Knife to a Gun Fight! Organizations need to understand that their adversaries are no longer the lone wolf, script kiddie, or curious hacker: they are professional, well-resourced, an...

From Rules to AI and Back Fraud-prevention systems have to balance several competing demands: catching fraudulent activity without blocking legitimate customers, adapting quickly to new attack pat...

Energy Giant Engie Notifies Customers of Supply Chain Breach One of the world’s largest natural gas suppliers, Engie, has notified an undisclosed number of customers that their personal data may h...

China-Linked Hackers Exploit PHP2Shell to Root Firewalls 🚨 A China-linked threat actor has been exploiting the PHP2Shell vulnerabilities to gain root access to firewalls and deploy webshells for p...

CVE-2026-82411 - Objects API: Cross-object-type Authorization Bypass Open Object provides an API and admin interface to manage objects and object types. From versions 2.4.3 until 2.5.1, 3.6.2, 4.0...