“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...
ictsec.pl
Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...
Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...
🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
2026-10-30 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2020-37284 midgetspy - Sickbeard ...
2026-10-29 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2021-48016 DedeCMS - DedeCMS ...
Volt Typhoon Hides Zero-Day Attacks Using 'Silent Train' Framework
Volt Typhoon Hides Zero-Day Attacks Using ‘Silent Train’ Framework 🚀 Chinese state-sponsored hacking group Volt Typhoon has been utilizing a sophisticated framework known as Silent Train to conduc...
Yamaha YMS-VPN8 and YMS-VPN8-CP Register Windows Services with Unquoted File Paths
Yamaha YMS-VPN8 and YMS-VPN8-CP Vulnerability Alert 🚨 Date Published: October 28, 2026 Source: JVN JVN#30675482 indicates that Yamaha YMS-VPN8 and YMS-VPN8-CP register Windows services with unquo...
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
Summit Public Schools Data Breach 🚨 A hacker has leaked 115 GB of data from Summit Public Schools, exposing billions of lines of personal records of students and staff, including approximately 21,...
Never Bring a Knife to a Gun Fight!
Never Bring a Knife to a Gun Fight! Organizations need to understand that their adversaries are no longer the lone wolf, script kiddie, or curious hacker: they are professional, well-resourced, an...
From Rules to AI and Back
From Rules to AI and Back Fraud-prevention systems have to balance several competing demands: catching fraudulent activity without blocking legitimate customers, adapting quickly to new attack pat...
Energy Giant Engie Notifies Customers of Supply Chain Breach
Energy Giant Engie Notifies Customers of Supply Chain Breach One of the world’s largest natural gas suppliers, Engie, has notified an undisclosed number of customers that their personal data may h...
CVE-2026-82411 - Objects API Cross-object-type Authorization Bypass
CVE-2026-82411 - Objects API: Cross-object-type Authorization Bypass Open Object provides an API and admin interface to manage objects and object types. From versions 2.4.3 until 2.5.1, 3.6.2, 4.0...
2026-10-28 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-111809 Apache Software Found...
Italy's Parliament Under Cyber Pressure Why the Attack on the Chamber Matters
Italy’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters Italy’s Parliament cyberattack highlights hybrid warfare risks and the need for transparency, stronger defenses, and ...
This Tool Can Recover Deleted AI Chats From Your Phone - How It Works
This Tool Can Recover Deleted AI Chats From Your Phone - How It Works 🚀 An experimental tool has successfully recovered deleted information from chats, highlighting limitations in perceived local ...
SkyW4lker Exposed A Growing Microsoft 365 Phishing Threat to American Enterprises
SkyW4lker Exposed: A Growing Microsoft 365 Phishing Threat to American Enterprises SkyW4lker (SkyW4lker x365 Sentinel) is an active device-code phishing kit targeting Microsoft 365 users in the Un...
Researchers Uncover Signs of Massive Surveillance Operation on Starlink Users
Researchers Uncover Signs of Massive Surveillance Operation on Starlink Users 🚨 A recent report reveals alarming findings about a massive surveillance operation targeting Starlink users! Discover-...
Process Trees in Livehunt YARA Rules That Know Who Launched What
Process Trees in Livehunt: YARA Rules That Know Who Launched What 🚀 YARA-X v1.21.0 and v1.22.0 have introduced new fields: parent_name and ancestor_names in the vt.behaviour.processes_list. This e...
In a pickle Why every pickle defense in machine learning is bypassed the same way
In a pickle: Why every pickle defense in machine learning is bypassed the same way The machine learning (ML) ecosystem recently shipped a series of defenses against malicious model files. PyTorch ...