“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2022-27892 Palantir - Gotham ...

Vanderbilt University Cyberattack Affects Campus Devices 🚨 Vanderbilt University is currently investigating an active cyberattack that may impact university devices, systems, and cloud services. T...

Turla Cereal Tricks On November 28th, 2025, we detected a previously undocumented set of malicious tools being actively used against a governmental organization in Kazakhstan. None of the initiall...

Trump Mobile Hackers Target Health Records of 2 Million Texans 🚨 A ransomware gang behind the Trump Mobile breach claims to have stolen sensitive records belonging to around two million Texans in ...

Microsoft Uncovers Long-Standing Rust Bug 🚀 Microsoft researchers have uncovered a memory-safety bug in Rust’s standard library that had gone undetected for nearly 11 years. This discovery include...

Google’s New AI Tool Proves Signal Encryption Works Researchers at Google DeepMind have made a groundbreaking advancement by using AI to formally verify portions of Signal’s underlying code. This ...

Enforcing Intent-Based Access Control at the Endpoint OpenAI demonstrated the problem while hardening its training environment. In Securing our frontier model training environment, published Octob...

Default Admin Password Let Researchers Unlock and Start Cars 🚗🔐 Researchers have successfully taken over customer accounts at two car brands, demonstrating how they could remotely unlock and start...

Amadeus Breach Compromises 116,000 Finnair Bookings At least 116,000 Finnair reservations have been compromised in a huge data breach connected to Amadeus, a third-party software vendor that suppl...

Trusted by Default: Qubole Cross-Account Access Abused in the Wild A threat actor exploited IAM credentials from Qubole’s AWS account to assume integration roles in customer AWS environments. Work...

OIC Cert Vol 7 Issue 1 Published on: November 9, 2026 Security Operations Centres (SOCs) process thousands of heterogeneous alerts daily. Retrieval-augmented generation (RAG) can support alert co...

N-able Disables Cloud Services Following Disclosure of “Able2Shell” Exploit Chains 🚨 N-able has disabled its cloud services following the public disclosure of critical vulnerabilities in its N-cen...

KUSANAGI Vulnerable to HTTP Header Injection 🚨 KUSANAGI, provided by GMO Prime Strategy Co., Ltd., has been found to contain an HTTP header injection vulnerability affecting multiple versions. The...

How SASE Vendors Design Their Solution - Part 1: The Pillars of SASE Architecture The promise of the Secure Access Service Edge (SASE) is to deliver a converged, high-performance security and netw...

Classified Memo Warned of NVIDIA CEO’s Affair with Alleged Chinese Spy The New York Times reports that US intelligence believes that Alice Huang, a Chinese business executive who had an affair wit...

CVE-2026-124035 - Unsafe Reflection in Amazon Braket CVE-2026-124035, titled “Unsafe reflection in Amazon Braket Schemas error mitigation validation,” has been rated HIGH with a CVSS 4.0 score of ...