Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

Shattering the Dream: Operation Dream Job Exposed Check Point Research is tracking a long-running campaign called Operation Dream Job, targeting organizations worldwide, with a particular focus on...

Delta Air Lines Investigates Wi-Fi Incident 🚨 Delta Air Lines is currently investigating an unauthorized Wi-Fi network that appeared aboard a flight from Las Vegas to Atlanta, which was carrying p...

Enriched URL Reports - VirusTotal URL Scanning 2.0 🚀 Traditional URL analysis has been redefined! The launch of URL Scanning 2.0 significantly expands VirusTotal’s URL analysis capabilities by int...

Microsoft Edge Extension Changes 🚀 Microsoft is beginning the retirement of Manifest V2 (MV2) extensions in Edge this month, with consumer completion targeted for the end of 2026 and managed-enter...

Abyssos: Technical Analysis of a New Modular RAT In late June 2026, Zscaler ThreatLabz identified a new malware family that we track as Abyssos. Abyssos is a new modular remote administration tool...

Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup Researchers created a fake DeFi startup and hired suspected Famous Chollima operatives, providing a rare ins...

CVE-2026-11812 - UpdateHub Vulnerability 🚨 The UpdateHub management subsystem has been identified with a critical vulnerability that can lead to a denial of service (DoS) due to a race condition o...

U.S. Defense Manufacturer IEH Hit by Phishing Attack 🚨 IEH Corporation, a prominent U.S. defense and aerospace manufacturer based in Brooklyn, New York, has fallen victim to a phishing attack that...

CVE-2026-12372 - Server-Side Request Forgery (SSRF) in nltk/nltk A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.path...

Hackers Breach TrueConf to Trojanize Client Installers with Backdoors 🚨 The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to repla...

Atlassian Rovo Vulnerability 🚨 Summary: Attacker-controlled instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an ou...

Atlassian Rovo Vulnerability 🚨 Summary: Attacker-controlled instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an ou...

When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers Check Point Research has conducted an in-depth analysis of Cloudflare Code Mode, a technique that transforms how AI agents util...

Linux Shell Forensic: Let’s Dive Into Atuin! Source: SANS ISC Date Published: August 7, 2026 UNIX systems (including Linux) are well-known for recording a lot of activities in various locations. ...

CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX VMware ESX systems are a recurring target in ransomware campaigns. Threat groups including SCATTERED SPIDER, BlackBasta, Royal ...

Ransomware Moves up the Org Chart: Managers Are Prime Targets 🚀 New Zscaler ThreatLabz research examines the early stages of a real-world ransomware attack. It reveals little about the employees c...

Black Hat - NatJack Exploits Test NAT Security Assumptions 🚀 At Black Hat USA 2026, researcher Malcolm Stagg, an independent researcher and member of the Synack Red Team, disclosed the NatJack att...