Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

Scans for Hikvision Intelligent Security API Hikvision cameras have a long history of vulnerabilities and are often targeted by internet-wide scans detected by our honeypot network. This weekend, ...

CVE-2026-64186 - Fixing Latent Out-of-Bounds Access in IOMMU Debugfs In the Linux kernel, a significant vulnerability has been resolved: CVE-2026-64186. This issue pertains to a latent out-of-boun...

Exciting Release: OctoC2 🚀 A new GitHub-native command-and-control framework called OctoC2 has been released for authorized security research, featuring encrypted multi-channel transport and resil...

EU Politicians Investigated Pegasus Spyware 🚨 In the summer of 2022, Greek politician Stelios Kouloglou was investigating how intrusive spyware had been used to hack business leaders, law enforcem...

CVE-2026-16195 - Sipeed PicoClaw Group Message Authorization Flaw A critical security flaw has been discovered in Sipeed PicoClaw up to version 0.2.9. This issue affects the function dispatchIncom...

CVE-2026-10130 - QueryWeaver Authentication Bypass Vulnerability Date Published: July 18, 2026 QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to...

Shark Vacuum Flaw Exposes Cameras, Home Maps and Wi-Fi Passwords 🚨 Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS (Amazon Web Services) IoT (Internet of Things) po...

HollowByte DDoS Flaw Bloats OpenSSL Server Memory 🚨 A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a mali...

Ernst & Young (EY) Investigates Data Breach 🚨 Ernst & Young (EY) has disclosed a significant data breach after attackers compromised a third-party IT support system containing sensitive cl...

Cyberattack Disrupts Operations at Nichirei, Japan’s Food Giant 🚨 A significant cyberattack has hit Nichirei, one of Japan’s largest food companies, causing major disruptions in logistics and ship...

Abbott Laboratories Investigates Cybersecurity Incidents Amid Extortion Claims 🚨 Abbott Laboratories is currently investigating two separate cybersecurity incidents following unauthorized access t...

HollowByte DDoS Vulnerability 🚨 A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of jus...

SALTO ProAccess Space Vulnerability Alert 🚨 Date Published: July 16, 2026 A recent vulnerability has been identified in the SALTO ProAccess Space system. Successful exploitation of this vulnerabi...

🚀 Begun, the Patch Wars Have This July’s Patch Tuesday is an absolute whopper! There are 622 vulnerabilities being patched, with 62 classified as critical severity. To put this into context, this ...

Overview Cisco Talos is disclosing UAT-11795, a sophisticated, Russian-speaking, financially motivated adversary that has been conducting a malicious campaign targeting users in the U.S. and Europ...