Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...
ictsec.pl
Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...
🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
ToxicPanda Android Malware Uses VPN Permissions to Block Google Play
ToxicPanda Android Malware Overview 🚨 The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote com...
Iran-linked Hackers Behind Cyber Attack That Shut Down Power Plant
Iran-linked Hackers Behind Cyber Attack That Shut Down Power Plant 🚨 A small power plant in the UK was shut down during a cyber attack. The Telegraph reported that the attack, which took place las...
Zero-Click Grok Chat History Theft Adversa AI Demonstrates Cryptographic Context Injection
Zero-Click Grok Chat History Theft 🚨 Adversa AI researcher Rony Utevsky has devised a groundbreaking attack technique known as Cryptographic Context Injection. This method bypasses AI safety filte...
2026-08-23 Daily Vulns
The Invisible Passenger in Your Car
The Invisible Passenger in Your Car 🚗 While monitoring Android threats in June 2026, we discovered a new piece of Android malware. What struck us as unusual was that it installed like an ordinary ...
SickKids Children's Hospital Bandages Up Careers Website After Intruder Breaks In
SickKids Children’s Hospital Bandages Up Careers Website After Intruder Breaks In 🚨 Toronto’s Hospital for Sick Children, commonly referred to as SickKids, has reported that the data of current an...
New Agent Tesla Malware Variant Boosts Evasion Capabilities
New Agent Tesla Malware Variant Boosts Evasion Capabilities 🚀 A new version of the notorious Agent Tesla malware contains features designed to evade detection and steal credentials, as identified ...
Even MOAR Powershell Analyzing Entra Logins
Even MOAR Powershell: Analyzing Entra Logins One thing that folks never seem to do after “going to the CLOOOOUUUUD” is to look at their logs, logs that they would have checked daily when things we...
A Low-Tech Solution from the Past May Be Your Best Defense Against AI Deepfakes
A Low-Tech Solution from the Past May Be Your Best Defense Against AI Deepfakes In January 2024, an employee at professional services firm Arup joined a video call with someone they believed inclu...
2026-08-21 Daily Vulns
Trapping a Mustang Panda
Trapping a Mustang Panda Source: IBM X-Force Date Published: August 20, 2026 As of mid-2026, IBM X-Force continues to monitor cyber campaigns conducted by ITG27, a China-aligned state-sponsored e...
Rust Supply Chain Attack on arrayref Significant Overlap with DPRK Campaigns
Rust Supply Chain Attack on arrayref 🚨 On August 20, 2026, malicious versions of the arrayref Rust crate and others executed a backdoor at compile time. This campaign’s infrastructure overlaps wit...
Researcher Tricks Apple's Find My into Sharing Location Data with Linux
Researcher Tricks Apple’s Find My into Sharing Location Data with Linux 🚀 A young security researcher, known as Zerotistic, has ingeniously figured out how to enroll a Linux device into Apple’s Fi...
Manic The Android Malware That Exfiltrates Data Even When the Phone Is Offline
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline Source: Securityaffairs Published on: August 20, 2026 🚨 Overview: Manic Android malware combines banking fraud and ...
Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses
Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses Microsoft Graph is a newer API that is meant to replace several others. It allows you to Get and Set info...
Distinct Clusters Target Individuals of Interest to Russia
Distinct Clusters Target Individuals of Interest to Russia The Google Threat Intelligence Group (GTIG) is tracking three distinct suspected Russian cyber espionage threat clusters that are abusing...
BTR Reforged Weaponizing Defender's Remediation Driver as a Kernel Operation Primitive
BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive What if a signed Microsoft remediation driver could be instructed to execute arbitrary file and registry ope...