Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...
Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...
🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
Your Car is Following You - How to Reclaim Your Data Privacy on the Open Road
Your Car is Following You - How to Reclaim Your Data Privacy on the Open Road 🚗🔍 Today’s vehicles know where you live, when you travel, and your driving habits. It’s becoming increasingly difficul...
Mini Shai-Hulud Campaign Compromises Red Hat Cloud Services
Mini Shai-Hulud Campaign Compromises Red Hat Cloud Services 🚨 A mini Shai-Hulud campaign has compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installatio...
Microsoft Backs Off Legal Threats Against Windows Security Researchers After BitLocker Backlash
Microsoft Changes Course on Legal Threats 🚀 Microsoft has announced that it will no longer pursue legal action against security researchers who conduct or publish their findings. This decision com...
HP Poly VoIP Vulnerability Sets the Stage for Executive Voice Deepfakes
HP Poly VoIP Vulnerability Alert 🚨 HP has released patches for a critical buffer overflow vulnerability in multiple IP-enabled conference phones from its Poly Voice line. This remote code executio...
Google Patches Over 100 Android Security Vulnerabilities
Google Patches Over 100 Android Security Vulnerabilities 🚀 Google has released new security updates for Android, patching more than 100 vulnerabilities. Android users, it’s time to update your dev...
Dashlane Reports Cyberattack Hackers Steal Customer Password Vaults
Dashlane Reports Cyberattack 🚨 Password manager maker Dashlane has reported that hackers have obtained at least a dozen encrypted vaults used for storing customer passwords during a weekend cybera...
Anthropic Lets Claude Mythos Spread Its Glasswings
Anthropic Expands Access to Claude Mythos Preview 🚀 Anthropic has expanded access to Claude Mythos Preview, its groundbreaking model that could potentially redefine cybersecurity as we know it! 🌐 ...
Pointing a Cursor at Evading Detection
Pointing a Cursor at Evading Detection Source: Sophos Date Published: June 2, 2026 Sophos X-Ops analysts have observed a threat actor utilizing artificial intelligence (AI) technologies to test e...
CVE-2026-44825 | Apache Solr AuthTool Hardcoded Credentials Vulnerability
CVE-2026-44825 | Apache Solr AuthTool Hardcoded Credentials Vulnerability CVE-2026-44825 is a hardcoded credentials vulnerability in Apache Solr’s Basic Authentication setup tool, bin/solr auth en...
Windows Server Vulnerability Can Grant System Privileges
Windows Server Vulnerability Can Grant System Privileges 🚨 Today, Microsoft is in the unfortunate limelight due to a 9.8-rated remote execution vulnerability affecting Windows Server domain contro...
Spain Arrests Doxer Leaking Sensitive Data of Government Employees
Spain Arrests Doxer Leaking Sensitive Data of Government Employees 🚨 The Spanish National Police has arrested an individual for leaking sensitive information related to members of various key stat...
Inside Gamaredon Cyber Operations FSB's Matryoshka
Inside Gamaredon Cyber Operations: FSB’s Matryoshka #1/3 Sekoia.io’s Threat Detection & Research (TDR) team closely monitors the activities of Russian Advanced Persistent Threats (APT). In lat...
Hackers Hijacked Instagram Accounts by Tricking Meta AI Support Chatbot
Major Security Breach on Instagram 🚨 Instagram has resolved a significant security issue that allowed several users’ accounts to be hacked. The attack relied on tricking Meta’s AI-powered support ...
Election Interlopers Register 5K+ Domains, Hope to Catch Some Voting Phish
Election Interlopers Register 5K+ Domains 🚨 The biggest threat to America’s midterm elections in November likely isn’t foreign attackers hacking US voting machines. Phishing and election-official ...
Critical WP Maps Pro Plugin Flaw Leads to 3,600 Attacks in One Day
Critical Vulnerability in WP Maps Pro Plugin 🚨 Thousands of attacks were observed in a single day targeting a critical flaw in the WP Maps Pro plugin. Researchers disclosed this flaw, which allows...
CISA Adds Critical Palo Alto Networks Firewall Flaw to KEV
CISA Adds Critical Palo Alto Networks Firewall Flaw to KEV 🚨 Hackers are exploiting a software vulnerability in Palo Alto Networks’ firewalls to evade login requirements and remotely access protec...
Unidentified RAT Pushes NetSupport RAT
Unidentified RAT Pushes NetSupport RAT 🚨 This diary provides indicators from an unidentified RAT infection on Wednesday, May 27, 2026, that was followed by a malicious NetSupport Manager RAT packa...