Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

Watchfire Controller Software Vulnerability Alert 🚨 On July 30, 2026, CISA published an alert regarding a significant vulnerability in the Watchfire Controller Software. This vulnerability, identi...

The 73,000-Server Market Reselling Western Frontier AI into China Western frontier AI is not sold in mainland China, yet it is utilized daily. This report maps the infrastructure that enables this...

Schneider Electric IGSS Vulnerability Advisory 🚨 Date Published: July 30, 2026 Schneider Electric is aware of a vulnerability in its IGSS Definition module for the IGSS (Interactive Graphical SCA...

NASA Core Flight System (cFS) Health & Safety (HS) Application Vulnerability Advisory 🚨 Attention! A critical vulnerability has been identified in the NASA Core Flight System (cFS) Health &...

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents 🚀 Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instru...

CosmosEscape: Taking Over Every Database in Azure Cosmos DB A critical vulnerability chain in Azure Cosmos DB enabled full read and write access to every Cosmos DB database. Wiz Research uncovered...

CVE-2026-68563 - Information Disclosure in Ansible Collection Redhat Leapp CVE-2026-68563 describes an information disclosure vulnerability in ansible-collection-redhat-leapp related to insecure b...

Securing Agents Across Perplexity’s Client Endpoints with Numbat Numbat is Perplexity’s open-source agent security suite for client endpoints. It detects, prevents, and investigates risky AI agent...

The Average Cost of a Data Breach Rises to $5 Million The average cost of a data breach has risen to almost $5 million! 🚀 This alarming figure was revealed in the 2026 edition of the annual IBM Co...

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit On 22 July 2026, one day prior to Proofpoint’s recent joint release with the NSA on the Russia-aligned threat actor TA...

CVE-2026-14643: undici Vulnerable to Cross-User Information Disclosure 🚨 Overview: CVE-2026-14643 highlights a vulnerability in undici that allows for cross-user information disclosure due to impr...

Turns Out the Ghost Was the PLA Our research uncovered a tidy little overlap that points straight at APT15 and the PLA Cyberspace Force’s 8th Technical Reconnaissance Base (8th TRB). This tool, kn...

Siemens Mendix Runtime Vulnerability Advisory Source: CISA Date Published: July 28, 2026 Mendix documentation for access rules does not adequately describe the special behavior of the System.User...

Multiple Vulnerabilities in ELECOM Wireless LAN Routers and Access Points 🚨 Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain several vulnerabilities. Specificall...

Mirage Kitten’s New Malware Set 🚀 Mirage Kitten, also known as UNC1549, Smoke Sandstorm, and Nimbus Manticore, is an advanced persistent threat (APT) group focused on cyber-espionage operations ag...

igloohome Smart Lock Mobile Application Vulnerability Alert 🚨 The igloohome Smart Lock Mobile Application has a critical vulnerability that could allow unauthorized access to its functions and bac...