Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

Why Facebook’s War on Ad Blockers Could Help Scammers Reports that uBlock Origin is stepping back from the effort to filter Facebook ads are a reminder that ad blocking is no longer just about inc...

UNISOC Modem Flaw Enables Remote Code Execution via Video Calls A vulnerability in UNISOC modem firmware can allow arbitrary code execution with kernel privileges from the modem context, potential...

General Electric, Philips, and Shell Investigate Alleged Breaches 🚨 General Electric, Philips, and Shell are each investigating claims of data theft by the Clop ransomware gang. Clop claims to hav...

Large-scale DDoS Attacks Disrupted Threema Secure Messaging Service Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing s...

GeoServer Zero-Day Vulnerability 🚨 GeoServer is currently facing an unpatched zero-day vulnerability that enables SQL injection and potentially remote code execution (RCE). Attackers are already p...

Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware 🚨 Attackers are exploiting expired domains! They are purchasing these domains to take advantage of their reputation, traffi...

WhatsApp’s New Scam Alert Feature 🚨 Meta has announced that it’s rolling out a new feature for WhatsApp users aimed at combating scammers. The Scam Alert is an optional beta feature that utilizes ...

Who’s Tracking You? Use This New Service to Find Out A powerful and free new service called DecryptAds scrapes and correlates adtech data, making it simple to quickly learn a great deal about the ...

Crypto, Sanctions and Secrecy: The IRGC’s Financial Footprint in Britain On July 13, Hoptrail was invited to Parliament to present our intelligence on the crypto operations of Iran’s Islamic Revol...

Overview of DCRat Campaign in 2026 In early 2026, the Trellix Advanced Research Center (ARC) identified and analyzed an active DarkCrystal RAT (DCRat) campaign following a critical customer escala...

Siemens Parasolid Vulnerability Advisory 🚨 Published Date: August 13, 2026 Source: CISA Parasolid is affected by an out-of-bounds read vulnerability that could be triggered when the application r...

Hackers Breach Government Webmail While Running Parallel Crypto Fraud 🚨 The Jewelbug hacker group has been conducting espionage operations targeting governments and militaries while simultaneously...

Multi-Functional Linux Botnet “Evooo1Bot” 🚀 FortiGuard Labs has been tracking a previously undocumented Linux botnet family, which we have named Evooo1Bot. The name derives from the hardcoded stri...

New Resource Alert! 🚨 A new resource, titled “A tool matrix for Russian APTs based on the Ransomware Tool Matrix,” has been made available. This repository contains a list of which tools each Russ...