“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...
ictsec.pl
Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...
Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...
🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
2026-10-26 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2014-125133 imithemes - NativeChu...
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, acc...
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software A memory-corruption flaw in Google’s Brotli decoder affects many programs that unpack Brotli-compress...
MythicRatatoskr An Yggdrasil-enabled Backdoor Deployed in a UAC-0099-Sandworm Collaboration
MythicRatatoskr: An Yggdrasil-enabled Backdoor Deployed in a UAC-0099-Sandworm Collaboration A recent report details activity involving UAC‑0099, which gained initial access on July 16th, 2025. Th...
Crime Stoppers Chapter Freezes Tips After Breach Breaks Anonymity Promise
Crime Stoppers Chapter Freezes Tips After Breach Breaks Anonymity Promise A breach exposed personal information in supposedly anonymous crime reports. Now, one Crime Stoppers chapter has stopped a...
Pleasanter LDAP Authentication Bypass Vulnerability
Pleasanter LDAP Authentication Bypass Vulnerability 🚨 LDAP authentication of Pleasanter contains an authentication bypass vulnerability. Pleasanter, provided by Implem Inc., fails to properly veri...
Knicks Employees Targeted in Phishing Test with Fake Championship Rings
Knicks Employees Targeted in Phishing Test with Fake Championship Rings The New York Knicks organization sent employees a phishing email promising free championship rings in a test of its staff’s ...
Critical Vulnerabilities in PHP CVE-2026-109618 and CVE-2026-109619
Threat Brief: Critical Vulnerabilities in PHP 🚨 Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. Both are remote code execution (RCE) vulnerabilities r...
Abandoned Popcorn Time App Exposed Millions of Devices to RCE Attacks
Abandoned Popcorn Time App Exposed Millions of Devices to RCE Attacks 🚨 Researchers have remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTor...
2026-10-23 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-112949 vitest-dev - vitest@v...
Siemens RUGGEDCOM APE1808 Devices Vulnerabilities
Siemens RUGGEDCOM APE1808 Devices Vulnerabilities Nozomi Networks has published critical information regarding vulnerabilities in Nozomi Guardian/CMC affecting various Siemens Industrial products....
Woman Faces Years in Prison Over a Cash App Account She Says She Never Opened
Woman Faces Years in Prison Over a Cash App Account She Says She Never Opened A Cash App account opened in her name has left Amanda Smith facing criminal charges and potentially up to six years in...
ThreatsDay AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More 🚨 Bluesky Phishing Attack: Bluesky has acknowledged that it is aware of a phishing attack that...
Prince of Persia A Threat Group Hiding in Plain Sight
Prince of Persia: A Threat Group Hiding in Plain Sight For nearly two decades, the Iranian nation-state threat actor Prince of Persia has been an active cyber threat, primarily targeting Iranian d...
New BlackX UEFI Bootkit Exploiting Baton Drop
New BlackX UEFI Bootkit Exploiting Baton Drop In early 2026, we discovered a malware sample similar to BlackLotus that was used in an APT campaign in Central Asia. We dubbed this UEFI bootkit Blac...
CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability
CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability CVE-2026-76268 is a critical missing authentication vulnerability in Splunk Enterprise. An unauthenticated ...