Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...
ictsec.pl
Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...
🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
2026-07-24 Daily Vulns
WhatsApp Web Chats Exposed by Adobe's Acrobat Extension Flaw
WhatsApp Web Chats Exposed by Adobe’s Acrobat Extension Flaw 🚨 A recently disclosed vulnerability, known as HermeticReader, has put WhatsApp Web chats at risk due to a flaw in the Adobe Acrobat PD...
New Dolphin X Malware Uses AI to Rank High-Value Targets
New Dolphin X Malware Uses AI to Rank High-Value Targets 🚀 A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercrimina...
Data Breach Exposes Client Information at Origin Energy
Data Breach Exposes Client Information at Origin Energy 🚨 Australian energy provider Origin Energy has confirmed a data breach by an unknown threat actor that exposed customers’ personally identif...
Ta488 Targets Zimbra Mailservers with Half Click Exploits
Overview 🚨 Proofpoint has uncovered that the Russia-aligned threat actor TA488 (also known as Void Blizzard or Laundry Bear) has been exploiting a previously unknown vulnerability in Zimbra mailse...
TA458 Roundpress Exploits A New Threat in Webmail Security
TA458 Roundpress Exploits: A New Threat in Webmail Security 🚨 The Russia-aligned threat actor TA458, known for its involvement in Operation RoundPress, continues to target webmail services using i...
New Dolphin X Malware Uses AI to Rank High-Value Targets
New Dolphin X Malware Uses AI to Rank High-Value Targets 🚀 A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercrimina...
Millions of Cars Could Be Tracked and Unlocked by a Hidden Security Flaw
Major Security Flaw in KARR Security System 🚗🔒 A recent investigation has revealed a significant security flaw in the KARR Security System, a Bluetooth-enabled aftermarket alarm installed in milli...
MZ Automation libIEC61850 Vulnerabilities Exposed
MZ Automation libIEC61850 Vulnerabilities Exposed 🚨 Critical Alert! Successful exploitation of these vulnerabilities could allow an unauthenticated network-adjacent attacker to crash critical IEC ...
2026-07-23 Daily Vulns
Upbound Hack Results in $13 Million Fraudulent Acima Leases
Upbound Hack Results in $13 Million Fraudulent Acima Leases 🚨 The Upbound Group, a fintech company, has revealed that a recent cyberattack led to the creation of $13 million in fraudulent Acima le...
Oracle Hospitality Simphony Multiple Vulnerabilities Discovered
Oracle Hospitality Simphony Multiple Vulnerabilities Discovered 🚨 Oracle’s July 2026 Critical Patch Update addresses four remotely exploitable vulnerabilities affecting Oracle Hospitality Simphony...
Chick-fil-A Loyalty Accounts Hijacked Using Stolen Passwords
Chick-fil-A Loyalty Accounts Hijacked Using Stolen Passwords 🚨 Fast-food chain Chick-fil-A is warning customers after attackers hijacked loyalty accounts using stolen passwords in a credential stu...
Opening the Black Box Agentless Threat Detection for Virtual Appliances
Opening the Black Box: Agentless Threat Detection for Virtual Appliances Virtual appliances are common in the cloud, with 51.9% of cloud environments having at least one virtual appliance. 🚀 46.4%...
Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)
Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569) 🚨 The Unified Threat Advisory is a coordinated Cyber Intelligence effort led by Ransom-ISAC, in collaboration with eCrime.ch and D...
2026-07-22 Daily Vulns
Vulnerabilities in Tycon Systems TPDIN-Monitor-WEB2
Vulnerabilities in Tycon Systems TPDIN-Monitor-WEB2 🚨 Attention! Recent vulnerabilities have been disclosed in Tycon Systems TPDIN-Monitor-WEB2 that could lead to serious security risks. Successfu...