“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...
ictsec.pl
Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...
Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...
🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
Kothamine Malware Uses Tailscale's Tailcat to Evade Network Detection
Kothamine Malware Uses Tailscale’s Tailcat to Evade Network Detection 🚨 We discovered an undocumented remote-access Trojan (RAT) called Kothamine Agent. It supports more than 30 commands and gives...
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk Security researchers at Zenity Labs have disclosed a set of zero-click vulnerabilities in Salesforce Agentforce that ...
Threat Actors Use Google Ads To Target Ledger Users
Threat Actors Use Google Ads To Target Ledger Users 🚨 In August 2026, Zscaler ThreatLabz analyzed a phishing campaign that used fraudulent Google ads to target Ledger hardware wallet users. The ad...
Researchers Identify AliExpress Phishing Domains Before Registration
Researchers Identify AliExpress Phishing Domains Before Registration Security researchers have reported flagging 10 web addresses weeks before they were registered, then watching them go live as e...
Multiple Vulnerabilities in baserCMS
Multiple Vulnerabilities in baserCMS 🚨 The baserCMS provided by the baserCMS User Community contains multiple vulnerabilities that could pose significant risks to users. Specifically, baserCMS ver...
Imminent Zero-Day Attack KiteWorks Urges Customers to Shut Down Servers
Imminent Zero-Day Attack 🚨 The American software company KiteWorks has warned its customers of an imminent cyberattack. In an email obtained by Heise Security, the KiteWorks CISO urges its custome...
5G-Shark Lures Phones to Rogue 5G Cells Without Network Jamming
5G-Shark Lures Phones to Rogue 5G Cells Without Network Jamming Source: Hackread Date Published: September 25, 2026 Security researchers have developed a method that can pull nearby 5G phones ont...
Botslab G980H Dashcams Vulnerabilities
Botslab G980H Dashcams Vulnerabilities 🚨 The Botslab G980H Dashcams have been found to have several critical vulnerabilities that could be exploited by attackers. Successful exploitation may allow...
Poland Says Fire at Starlink Station is Sabotage as Denmark Warns of Rising Russian Threat
Poland Says Fire at Starlink Station is Sabotage as Denmark Warns of Rising Russian Threat A fire at a Starlink satellite station in central Poland was a deliberate “act of sabotage”, according to...
One URL, Three Different Tricks
One URL, Three Different Tricks Yesterday, we received a phishing email with an interesting link. At first sight, it looks like garbage, but every piece of it has been carefully crafted to confuse...
Eufy Omni C20 and Omni X10 Pro Vulnerabilities
Eufy Omni C20 and Omni X10 Pro Vulnerabilities 🚨 Date Published: September 24, 2026 Source: CISA Successful exploitation of these vulnerabilities could allow an attacker to run system-level comma...
CVE-2026-97368 - chillzhuang SpringBlade Vulnerability
CVE-2026-97368 - chillzhuang SpringBlade Vulnerability A weakness has been identified in chillzhuang SpringBlade up to version 5.0.2. This affects the function UserServiceImpl.userInfo of the file...
CVE-2026-85491 - CatalystSeal Vulnerability Details
CVE-2026-85491 - Catalyst::Seal Vulnerability Details CVE-2026-85491 details a vulnerability in Catalyst::Seal versions before 0.03 for Perl. This flaw allows one request to disable a path or rout...
A Decision Model Breaks Like Any Other Language Model A First Look at Jev
A Decision Model Breaks Like Any Other Language Model: A First Look at Jev 🚀 A new kind of AI model returns decisions instead of text. We spent a day trying to change its mind, and it cost about 5...
US-Based Digital Forensics Firm Hid its Russian Ownership from U.S. Government Customers
US-Based Digital Forensics Firm Hid its Russian Ownership from U.S. Government Customers The U.S. Department of War, Secret Service, and other federal departments and agencies unwittingly purchase...
New RemControl Android Banking Malware Targets Users in Europe and Canada
New RemControl Android Banking Malware Targets Users in Europe and Canada A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns tha...