“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...
Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...
Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...
🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
HMS Networks PEAK-System PCAN Windows Drivers Vulnerabilities
HMS Networks PEAK-System PCAN Windows Drivers Vulnerabilities 🚨 On October 20, 2026, CISA published a critical advisory regarding vulnerabilities in the HMS Networks PEAK-System PCAN Windows drive...
Someone Allegedly Offered €100,000 to Bury German AfD Party Email Leak
Major Cyber Breach Exposed! A hacker claims to have infiltrated Germany’s far-right Alternative für Deutschland (AfD) party, extracting hundreds of thousands of emails. Now, the alleged attacker s...
Moxa AIG-302 ThingsPro Edge Vulnerabilities
Moxa AIG-302 ThingsPro Edge Vulnerabilities 🚨 Published on: October 20, 2026 Source: CISA Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive...
Compromised eMudhra Intermediate Certificates
Compromised eMudhra Intermediate Certificates On Saturday, October 17, at 20:06 UTC, Mozilla received a report from a community member that private keys associated with eight eMudhra intermediate ...
Mobile Communications A Blind Spot Security Leaders Can't Ignore
Mobile Communications: A Blind Spot Security Leaders Can’t Ignore Mobile is now a core operational pillar for governments, critical infrastructure providers, and large enterprises. However, it is ...
The Army Wants to Sic AI Agents on Its Enemies. What Could Go Wrong?
The Army Wants to Sic AI Agents on Its Enemies. What Could Go Wrong? 🚀 As global governments and tech giants grapple with the revelations of autonomous AI agents unexpectedly breaching computer sy...
Pegasus Spyware Targeting Serbian Pro Democracy Movement
Pegasus Spyware Targeting Serbian Pro Democracy Movement Serbia’s student-led pro-democracy movement, born from the November 2024 anti-corruption protests, has faced widespread targeting with spyw...
PSA Patch Your Plex Media Server Before Someone Hacks It
PSA: Patch Your Plex Media Server Before Someone Hacks It 🚨 Recently fixed vulnerabilities in the Plex Media Server are under active exploitation in attacks that, when successful, install malware,...
Millions of California Students' Sensitive Data Stolen in Breach
Millions of California Students’ Sensitive Data Stolen in Breach 🚨 Breaking News: Personal information belonging to millions of current and former California public school students has been stolen...
Inside Cairn Open Windows into Massive AI-Driven Cyber Operations
Inside Cairn: Open Windows into Massive AI-Driven Cyber Operations An investigation by NorForge into publicly exposed AI-driven penetration-testing control panels has uncovered how they are extens...
ConnectWise Shuts Off Cloud Services After Unauthorized Access to Microsoft 365 Tenants
ConnectWise Shuts Off Cloud Services After Unauthorized Access to Microsoft 365 Tenants 🚨 IT management software provider ConnectWise has suspended access to several of its cloud services after di...
Conduent Agrees to Pay $80m to Settle Data Breach Class Action
Conduent Agrees to Pay $80m to Settle Data Breach Class Action Digital platform provider Conduent has agreed to pay $80 million to settle a class action lawsuit following a 2024 cyber incident tha...
Bullhorn Takes Staffing Platform Offline to Contain Cyberattack
Bullhorn Takes Staffing Platform Offline to Contain Cyberattack 🚨 Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. ...
Beyond the Mailbox Graph Reconnaissance and ServiceNow User Enumeration in a Modern Identity Intrusion
Beyond the Mailbox: Graph Reconnaissance and ServiceNow User Enumeration in a Modern Identity Intrusion Sophos X-Ops uncovered a new technique used by attackers to enumerate user accounts in Servi...
AOMEI Backupper Update Servers Hijacked to Push Malware Check Your PC
AOMEI Backupper Update Servers Hijacked to Push Malware: Check Your PC 🚨 The Google Threat Intelligence Group (GTIG) reports that attackers compromised AOMEI Technology’s update and notification i...
2026-10-19 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-101940 Juniper Networks - Ju...