“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...
ictsec.pl
Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...
Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...
🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
SlippyNunchucks Hijacks Sogou Input Method to Distribute Malware
SlippyNunchucks Hijacks Sogou Input Method to Distribute Malware At ESET, we have been tracking the DarkVigil toolset (also known as FDMTP) and its operator, the SlippyNunchucks threat actor, sinc...
TraderTraitor vs Contagious Interview
TraderTraitor vs Contagious Interview 🚀 On October 29th, 2026, Binance was hacked for approximately $6.4 billion. The attack was quickly attributed to the DPRK’s TraderTraitor threat actor group b...
Security Researcher Uncovers Exposed Trade Secrets at Tobacco Company
Security Researcher Uncovers Exposed Trade Secrets at Tobacco Company A professional penetration tester discovered significant security vulnerabilities within a tobacco company, exposing sensitive...
New Lindnor Backdoor and Glut of Security Killers Used in Ransomware Attack on U.S. Org
New Lindnor Backdoor and Glut of Security Killers Used in Ransomware Attack on U.S. Org 🚨 Attackers using the Anubis ransomware targeted a U.S. organization in October 2026 with a new custom backd...
How Governments Detect VPN Traffic, and Why Encryption Alone Doesn't Hide It
How Governments Detect VPN Traffic, and Why Encryption Alone Doesn’t Hide It A VPN that works perfectly at home can stop working the moment its user lands in a country with a national firewall. Th...
Herd Immunity for Identity Introducing Adversary Infrastructure
Herd Immunity for Identity: Introducing Adversary Infrastructure Source: Huntress Date Published: November 5, 2026 In March, our SOC observed a phishing-as-a-service operation transform Railway, ...
CVE-2026-87008 - Code Graph RAG Vulnerability
CVE-2026-87008 - Code Graph RAG Vulnerability Date Published: November 5, 2026 Code Graph RAG, an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-la...
CVE-2026-77622 - Sliver Unauthenticated Memory Exhaustion Denial of Service
CVE-2026-77622 - Sliver: Unauthenticated Memory Exhaustion Denial of Service Published Date: November 5, 2026 Source: Cvefeed CVE-2026-77622 describes a critical vulnerability in the Sliver comma...
Beyond Cold Storage Why Hardware Wallets Need Open Source and Clear Signing
Beyond Cold Storage: Why Hardware Wallets Need Open Source and Clear Signing For years, hardware wallets have been treated as the gold standard for protecting cryptocurrency. But recent attacks ha...
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity Customers of the mSecure password manager are being urged to act now to protect the confidential informati...
Gorbag Orcs at the Border Harvesting Intelligence from Ukraine
Gorbag: Orcs at the Border Harvesting Intelligence from Ukraine ESET researchers have been tracking a Russia-aligned threat actor that we named Gorbag. Active since at least February 2025, the gro...
Vercel Rolls Out New Protection Against Stolen Session Cookie Attacks
Vercel Rolls Out New Protection Against Stolen Session Cookie Attacks 🚀 Vercel is gradually rolling out Device Bound Session Credentials (DBSC) on its platform as a key defense against information...
Poisoned Source APT29 Watering Holes Targets Mobile Devices
Poisoned Source: APT29 Watering Holes Targets Mobile Devices In mid-October 2026, Sekoia’s Threat Detection & Research (TDR) team uncovered a large-scale watering hole campaign involving the c...
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
Critical APT Flaw in Debian and Ubuntu 🚨 A critical flaw, CVE-2026-109518, in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked ...
Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions
Synology Warns of Ransomware Attacks Synology has issued a warning regarding ransomware attacks that are exploiting a flaw in outdated NAS devices. Users are urged to update their DiskStation Mana...
Hackers Put Porn on Public Billboards and Claim It Was "Far Too Easy"
Hackers Put Porn on Public Billboards and Claim It Was “Far Too Easy” 🚨 Recent reports from Egypt, Malaysia, and Brazil have revealed a shocking incident where digital billboards displayed explici...