“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

Botslab G980H Dashcams Vulnerabilities 🚨 The Botslab G980H Dashcams have been found to have several critical vulnerabilities that could be exploited by attackers. Successful exploitation may allow...

Poland Says Fire at Starlink Station is Sabotage as Denmark Warns of Rising Russian Threat A fire at a Starlink satellite station in central Poland was a deliberate “act of sabotage”, according to...

One URL, Three Different Tricks Yesterday, we received a phishing email with an interesting link. At first sight, it looks like garbage, but every piece of it has been carefully crafted to confuse...

Eufy Omni C20 and Omni X10 Pro Vulnerabilities 🚨 Date Published: September 24, 2026 Source: CISA Successful exploitation of these vulnerabilities could allow an attacker to run system-level comma...

CVE-2026-97368 - chillzhuang SpringBlade Vulnerability A weakness has been identified in chillzhuang SpringBlade up to version 5.0.2. This affects the function UserServiceImpl.userInfo of the file...

CVE-2026-85491 - Catalyst::Seal Vulnerability Details CVE-2026-85491 details a vulnerability in Catalyst::Seal versions before 0.03 for Perl. This flaw allows one request to disable a path or rout...

US-Based Digital Forensics Firm Hid its Russian Ownership from U.S. Government Customers The U.S. Department of War, Secret Service, and other federal departments and agencies unwittingly purchase...

New RemControl Android Banking Malware Targets Users in Europe and Canada A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns tha...

Five USB Cables and Dongles That Can Fry Your Hardware, Steal Your Data, or Worse Don’t plug random cables or dongles into your devices! ⚠️ Cables and dongles are everywhere, and we use them for a...

F5 Fixes Actively Exploited Zero-Day Flaw in BIG-IP APM 🚀 Technology company F5 has addressed a critical remote code execution vulnerability in its BIG-IP Access Policy Manager (APM) platform. Thi...

CVE-2024-0244 - A Heap Buffer Overflow in the Canon MF753Cdw Printer This post covers the discovery and exploitation of CVE-2024-0244, which is an unauthenticated heap-based buffer overflow leadin...

Back to ZRON: Espionage-as-a-service! 🚀 We acquired more data from the ZRON leak and can deliver deeper insights into the operations and structure of the espionage-as-a-service provider from China ...

30 Million Sensitive Records Leaked: Numerous PepsiCo Locations Exposed E-documents manager EDX Solutions has leaked hundreds of gigabytes of data, exposing tens of millions of records. Our resear...

Sweden Fines Miljödata $183,000 Over Breach Affecting 2.2 Million Sweden’s data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for inadequat...

Siemens WTV676 and WTV776 Vulnerability Advisory 🚨 The products Siemens WTV676 and WTV776 contain a denial of service vulnerability, identified as CVE-2026-89207. This vulnerability could allow an...

We Hacked the FBI: Hackers Claim to Have Data on All FBI Employees A high-profile hacking group claims it has breached multiple FBI-related services and stolen data on all FBI employees and applic...