PraisonAI Vulnerability Scanned Within Hours 🚨 A newly disclosed authentication bypass flaw (CVE-2026-44338) in PraisonAI drew near-instant probing, exposing risks from default-insecure AI APIs. J...
Kazuar: Anatomy of a Nation-State Botnet Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues t...
Quest KACE SMA Flaw CVE-2025-32975: A Critical Vulnerability 🚨 CVE-2025-32975 is a critical flaw in Quest KACE SMA, a tool used for endpoint management. If exploited, this vulnerability could impa...
Glances 4.5.2 - Command Injection Vulnerability 🚨 A high-severity command injection vulnerability has been identified in Glances versions prior to 4.5.3. These versions support dynamic configurati...
Coreruleset 4.21.0 - Firewall Bypass 🚨 An exploit titled ‘coreruleset 4.21.0 - Firewall Bypass’ has been published, detailing a critical vulnerability tracked as CVE-2026-21876 (EDB-ID: 52558). Th...
Major Security Vulnerabilities Found in MCP Servers 🚨 Security vulnerabilities in MCP servers for three popular database projects could allow attackers to execute unintended SQL statements on Apac...
AWS to Quick Admins: Access Control Issues and Customer Impact On May 12, Fog Security disclosed an authorization bypass in Amazon Quick, a BI service. AWS responded, stating that “no customer dat...
ClickFix Finds a Backup Plan in PySoxy Proxy Chains 🚀 ReliaQuest has observed attackers pairing ClickFix with the PySoxy proxy tool to establish redundant encrypted access paths and persistence on...
State-sponsored Actors: The Friends You Don’t Want Most organizations operate under the assumption that anything residing within their trust boundary is trustworthy. In practice, these assumptions...
CISOs Step into the AI Spotlight 🚀 The spotlight on CISOs has never shone more brightly, with new responsibilities that include data protection and privacy, third-party and supply chain risk, and ...
The GRU’s Hogwarts Inside Bauman University’s Department 4, an elite spy school for Russian military intelligence Vladislav Borovkov, a member of Russia’s most notorious black ops unit, stands ac...
The Evolution of the Geotag: How AI is Bridging the Gap in Location-Based OSINT For years, location-based open-source intelligence (OSINT) has relied heavily on a steady stream of user-generated g...
New Exim BDAT Vulnerability 🚨 Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code executio...
New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots 🚨 Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network ...
Critical Vulnerability in ABB AC500 V3 PLCs 🚨 ABB has identified a critical vulnerability, tracked as CVE-2025-15467, affecting versions of its AC500 V3 programmable logic controllers (PLCs). An u...
ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities 🚨 ABB has identified multiple vulnerabilities in the WebPro SNMP card PowerValue for certain product versions. These vulnerabilities could ...
Yarbo Responds to Robot Flaws That Could Mow Down Their Owners 🚜 A researcher found that Yarbo yard robots came with a host of vulnerabilities which, among others, allowed an attacker to harvest W...
New GhostLock Tool Abuses Windows API to Block File Access 🚀 A security researcher has released a proof-of-concept tool named GhostLock that demonstrates how a legitimate Windows file API can be a...
Darcula aka. Magic Cat - Blog The Darcula phishing framework continues to evolve, transitioning from early API-driven roots to a sophisticated “Phishing-as-a-Service” model using encrypted WebSock...
Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware 🚨 In April, we observed an intrusion linked to an Atos-reported campaign where an EtherRAT was installed via a malicious MSI mas...