Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-81267 Mozilla - Firefox for ...

Windows Bug Alert 🚨 Microsoft has reported a glitch that causes Windows to incorrectly inform users that Microsoft Defender Antivirus is turned off, despite it being fully functional. This bug pos...

Traefik Vulnerability Discovered in Version Through 3.7.11 🚨 Bishop Fox has identified a significant vulnerability in Traefik, an open-source reverse proxy and ingress controller widely used in co...

Microsoft Exchange Online Outage Causes Email Failures and Auth Issues 🚨 Microsoft is investigating a widespread service issue causing authentication issues, connection problems, email delays, and...

Security Incident – BGP Hijacking 🚨 The Virtualizor platform, for those unfamiliar, is a VPS management platform used by many hosting providers to deploy and manage virtual servers on KVM, Xen, LX...

Cronos Blockchain Restarts After $74 Million Tectonic Exploit 🚀 The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lending ...

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode JSCeal is a stealer delivered as compiled V8 bytecode (.jsc) and executed by a bundled Node.js runtime, targeting cryptocur...

AI Killed the Typo: Time to Rewrite Phishing Training Source: SC Magazine Date Published: August 31, 2026 “Look for spelling mistakes and bad grammar.” For years, that was one of the defining pie...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-10522 Unknown - MemberHero ...

Hackers Target PaperCut Servers: 47% Unpatched 🚨 Attention all PaperCut users! PaperCut servers are currently under active attack, with 47% of tracked installations still running unpatched versio...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-16061 Unknown - Rest Routes ...

Protect Your WhatsApp Account with New Passkey and 2FA Upgrades 🚀 WhatsApp announced on August 25 that more than one billion people now use passkeys to log back into the app. The announcement inclu...

Multiple Vulnerabilities in SOY Series 🚨 Multiple vulnerabilities have been identified in the SOY series provided by Tsuyoshi Saito. These vulnerabilities affect: SOY Calendar ver 2.4.0 and ea...

CVE-2026-82343 - Gimp Vulnerability Details A flaw, tracked as CVE-2026-82343, was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not pro...

CVE-2026-82306 - StarRocks Query Detail Endpoint Vulnerability CVE-2026-82306: The StarRocks Query Detail Endpoint is vulnerable and returns every user’s query history. This is a MEDIUM severity v...

CVE-2026-82291 - HeyForm Reflects Any Origin in CORS Responses While Allowing Credentials HeyForm, prior to version 3.0.0-rc.8, reflects the request Origin header in CORS responses while allowing ...

JavaScript Obfuscation: From Party Trick to Phishing Kit We open a JavaScript artifact hoping for code, and instead get string arrays, strangely named functions, encoded URLs, runtime decoders, an...