We are fighting phishing at the wrong layer Source: CSO Online Date Published: October 8, 2026 Attackers can replace phishing domains almost for free, so security teams should hunt for the server...

Unknown Threat Actor Uses Artex To Target South Korean Finance CrowdStrike Intelligence has identified infrastructure associated with a targeted campaign against South Korean financial organizatio...

Reconstructing AI Agent Activity: Two New Scripts for Forensic Review A major update to FOR577 has added new material on investigating AI usage in incident response, discussing 8 of the most popul...

Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones Bitdefender researchers have uncovered the Midnight Mimosa malware preinstalled on low-cost MediaTek Android phones, enabling ...

Four US States Allege TP-Link Defrauded Customers, Seek Damages Four US states have filed lawsuits against TP-Link Systems, alleging that the company misled consumers about the security of its pro...

Earth Sirrush: A Russia-Aligned Intrusion Set With 4 Years of Evolving Espionage Tooling Source: TrendAI Security Date Published: October 8, 2026 Since at least 2022, the Russia-aligned intrusion...

AWS Takes Aim at Runaway AI Agent Behavior with Strands Box 🚀 Amazon Web Services (AWS) has introduced an open-source sandbox for AI agents that allows developers to restrict their actions based o...

The ZRON Leak, Part 1: What has Endured and What is Evolving in China’s Commercial Hacking Ecosystem Since the 2024 i-SOON Leak? On September 16, 2026, a Wall Street Journal headline proclaimed, “...

FBI Warns of Ongoing FortiBleed Attacks Locking Out VPN Admins 🚨 The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways, ...

Poetry as a Cybersecurity Threat 🚨 A suspected Italian attacker armed with a malware-controlling poem has infected more than 3,000 servers since April, breaking into enterprise AI infrastructure t...

CVE-2026-107284 - AsyncHttpClient Vulnerability 🚨 A new vulnerability, CVE-2026-107284, has been identified in the AsyncHttpClient (AHC) library, which allows Java applications to easily execute H...

CVE-2026-105816 - Vault Vulnerable to Arbitrary Code Execution Published Date: October 7, 2026 Source: Cvefeed Vault and Vault Enterprise did not consistently verify that stored plugin catalog en...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-105089 WWBN - AVideo W...

Hitachi Energy SOI Vulnerability Alert Hitachi Energy is aware of a Remote Code Execution (RCE) vulnerability in the Apache ActiveMQ component of the SOI product. This vulnerability affects the fo...

Facebook Marketplace Scam Alert 🚨 Facebook users are reporting receiving messages with fake Facebook Marketplace listings that feature their name as the seller. Here’s how it works: you receive a ...

Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers Modern frontier AI models deploy safety classifiers. These are second AI models that sit between the user and the frontie...

Hackers Obtain Counterfeit TLS Certificates for Google and Other Large Services 🚨 Breaking News: Attackers have hijacked three top-level domains and used their control to mint counterfeit TLS cert...

Domino’s Customers Targeted in Credential Stuffing Attacks 🚨 Domino’s Pizza customers have reported receiving alarming emails indicating that their accounts have been accessed by unauthorized thir...

Blinder Tunnel Targets Critical Infrastructure An Iranian state-aligned threat actor has been masquerading as the Dubai Airports IT department to deliver trojanized coding challenges to high-value...

A Personnel File is a Map: Why the FBI Breach Matters A personnel file maps a public servant’s life, family, career, network, and, in some cases, mission. At scale, those files can illuminate an o...