“Eye” Spy: Cyclops Blink Returns with Extended Capabilities 🚀 In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was disc...

Overview Earlier this month, security sleuth and researcher “Chaotic Eclipse” (also known as Nightmare-Eclipse) published a zero-day exploit known as YellowKey, which allowed them to access BitLoc...

Overview of the First VPN Service 🚀 The Federal Bureau of Investigation (FBI) has released a FLASH report to share indicators of compromise (IOCs) and tactics related to the First VPN Service. Thi...

🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...

User Agent Strings Curiosities Sometimes I have to smile, or my interest is triggered, when I review new User Agent Strings in the honeypot logs. Notable observations include instances like an “au...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2025-12828 ultrapressorg - Ultra ...

Google Gemini Could Soon Get Full Access to Your Mac’s Files, Apps and the Web 🚀 Exciting news for Mac users! Google’s Gemini could soon have the ability to access any file on your macOS device, o...

Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days 🚨 The Dutch Institute for Vulnerability Disclosure (DIVD) has confirmed that attackers breached its infrastructure through t...

RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail Chris Thompson made a career breaking into banks, nuclear power plants, and defense contractors—and getting paid to d...

Malware Campaign Impersonates European Donors to Target Moldovan Media and Civil Society 🚨 Between September 9 and 25, 2026, an attacker targeted Moldovan media and civil society with fraudulent e...

Improper Limitation of a Pathname to a Restricted Directory Source: Fortiguard Date Published: October 2, 2026 An Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) [C...

367,000-Ship Study Finds Global GPS Spoofing, Red Sea Activity Before Grounding A study of 367,000 ships reveals alarming findings about global GPS spoofing, including significant Red Sea activity...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-100891 Trusted Domain Projec...

Vulnerabilities in Monta monta.app Exposed 🚨 Attention! Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging...

Teltonika RutOS Command Injection Vulnerability 🚨 A post-authentication command injection vulnerability has been identified in Teltonika RutOS, specifically affecting version 00.07.06.21. This vul...

🚨 Warning: Fake ChatGPT Ads on Google! Malvertising campaigns are shifting towards chatbots! 🚀 Google ads for fake ChatGPT pages are leading Windows users into malware traps. Researchers at Island...

Police Arrest 16-Year-Old Suspected of Running KillSec 🚨 Police in Spain have arrested a 16-year-old suspected of running the KillSec ransomware group. This arrest was part of a larger operation o...

Pentagon Data Breach Impacts Millions of US Military Personnel The US government is notifying nearly three million current and former military staff that their personal information was stolen duri...

MikroTik RouterOS Flaw Alert 🚨 MikroTik’s RouterOS has a near maximum severity bug: CISA urges updating ASAP! A critical RouterOS flaw can let attackers run code as root without a password. The cr...

Meari IoT Cloud Platform OpenAPI Service Vulnerabilities 🚨 Critical Alert: Successful exploitation of vulnerabilities in the Meari IoT Cloud Platform OpenAPI Service could allow attackers to manip...