FURUNO FA-50 Class B AIS Transponder Vulnerabilities 🚨 Critical Alert! Successful exploitation of these vulnerabilities could allow an attacker to alter device settings. The following versions of ...

Ebyte NE2-D11 Vulnerabilities Exposed Published on: August 25, 2026 Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized administrative access, disclose s...

Critical Vulnerability in PayRange API Disclosed 🚨 A significant vulnerability has been identified in the PayRange API, which could allow both authenticated and unauthenticated attackers to exploi...

TikTok Settles U.S. Child Privacy Case for $400 Million 🎉 TikTok will pay $400 million to settle U.S. claims that it violated child privacy laws by collecting data from users under 13. The U.S. De...

iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset The iAuthFlow v2 phishing toolkit utilizes a phished Google session to enroll an attacker-controlled passkey that survi...

Beware of Fake Security Scans! 🚨 A wave of deceptive websites is posing as Microsoft security scans, misleading victims into uninstalling their antivirus software. These sites, branded as SysScan,...

Doubloon Dredger Abuses Notion to Harvest Authentication Tokens 🚨 A financially motivated threat actor, known as Doubloon Dredger, has been observed exploiting free Notion accounts, malicious PDFs...

AliExpress Caught Using Silent Audio to Fingerprint Visitors’ Browsers AliExpress, the online marketplace owned by Alibaba Group, has come under scrutiny after researchers and browser maker Brave ...

ToxicPanda Android Malware Overview 🚨 The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote com...

Iran-linked Hackers Behind Cyber Attack That Shut Down Power Plant 🚨 A small power plant in the UK was shut down during a cyber attack. The Telegraph reported that the attack, which took place las...

Zero-Click Grok Chat History Theft 🚨 Adversa AI researcher Rony Utevsky has devised a groundbreaking attack technique known as Cryptographic Context Injection. This method bypasses AI safety filte...

A Social Engineering Attempt Against ReliaQuest: What We Found On August 22, 2026, ReliaQuest was the target of a social engineering attack. While unsuccessful beyond temporarily exposing one iden...

The Invisible Passenger in Your Car 🚗 While monitoring Android threats in June 2026, we discovered a new piece of Android malware. What struck us as unusual was that it installed like an ordinary ...

SickKids Children’s Hospital Bandages Up Careers Website After Intruder Breaks In 🚨 Toronto’s Hospital for Sick Children, commonly referred to as SickKids, has reported that the data of current an...

New Agent Tesla Malware Variant Boosts Evasion Capabilities 🚀 A new version of the notorious Agent Tesla malware contains features designed to evade detection and steal credentials, as identified ...

Even MOAR Powershell: Analyzing Entra Logins One thing that folks never seem to do after “going to the CLOOOOUUUUD” is to look at their logs, logs that they would have checked daily when things we...

A Low-Tech Solution from the Past May Be Your Best Defense Against AI Deepfakes In January 2024, an employee at professional services firm Arup joined a video call with someone they believed inclu...

Trapping a Mustang Panda Source: IBM X-Force Date Published: August 20, 2026 As of mid-2026, IBM X-Force continues to monitor cyber campaigns conducted by ITG27, a China-aligned state-sponsored e...

Rust Supply Chain Attack on arrayref 🚨 On August 20, 2026, malicious versions of the arrayref Rust crate and others executed a backdoor at compile time. This campaign’s infrastructure overlaps wit...

Researcher Tricks Apple’s Find My into Sharing Location Data with Linux 🚀 A young security researcher, known as Zerotistic, has ingeniously figured out how to enroll a Linux device into Apple’s Fi...