UNISOC Modem Flaw Enables Remote Code Execution via Video Calls A vulnerability in UNISOC modem firmware can allow arbitrary code execution with kernel privileges from the modem context, potential...
McDonald’s Employee Data Leak 🚨 A seller claims that 1.7 million McDonald’s employee records were stolen from Azure. An 8,000-row sample appears genuine, but its age and full size remain unconfirm...
Invisible AI Prompts Trigger Court Sanctions 🚨 A litigant hid AI prompt injections in a court filing to influence a ruling. The judge caught it and banned him from electronic filing. A man suing t...
General Electric, Philips, and Shell Investigate Alleged Breaches 🚨 General Electric, Philips, and Shell are each investigating claims of data theft by the Clop ransomware gang. Clop claims to hav...
CVE-2026-75531 - Stored Cross-Site Scripting Vulnerability in Pandora CVE-2026-75531, a stored cross-site scripting (XSS) vulnerability, has been identified in Pandora. This vulnerability impacts ...
CVE-2026-69148 - MLflow Vulnerability 🚨 MLflow is an open-source AI engineering platform for agents, large language models, and machine learning models. Prior to version 3.15.0, the CreateModelVer...
C2Looper - A New Backdoor Likely Tied To Ransomware With GitHub C2 In July 2026, Zscaler ThreatLabz identified a new Rust-based malware family that we track as C2Looper, which is likely leveraged ...
Large-scale DDoS Attacks Disrupted Threema Secure Messaging Service Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing s...
GeoServer Zero-Day Vulnerability 🚨 GeoServer is currently facing an unpatched zero-day vulnerability that enables SQL injection and potentially remote code execution (RCE). Attackers are already p...
Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware 🚨 Attackers are exploiting expired domains! They are purchasing these domains to take advantage of their reputation, traffi...
WhatsApp’s New Scam Alert Feature 🚨 Meta has announced that it’s rolling out a new feature for WhatsApp users aimed at combating scammers. The Scam Alert is an optional beta feature that utilizes ...
Apple Sends Out Threat Notifications 🚨 Apple has taken a significant step by sending out threat notifications to users across 110 countries, alerting them that their devices may have been targeted...
Who’s Tracking You? Use This New Service to Find Out A powerful and free new service called DecryptAds scrapes and correlates adtech data, making it simple to quickly learn a great deal about the ...
Crypto, Sanctions and Secrecy: The IRGC’s Financial Footprint in Britain On July 13, Hoptrail was invited to Parliament to present our intelligence on the crypto operations of Iran’s Islamic Revol...
Overview of DCRat Campaign in 2026 In early 2026, the Trellix Advanced Research Center (ARC) identified and analyzed an active DarkCrystal RAT (DCRat) campaign following a critical customer escala...
Siemens Parasolid Vulnerability Advisory 🚨 Published Date: August 13, 2026 Source: CISA Parasolid is affected by an out-of-bounds read vulnerability that could be triggered when the application r...
Siemens Desigo DXR and PXC Controllers Vulnerability Alert 🚨 A vulnerability has been identified in Desigo DXR and PXC controllers that could allow an attacker to cause denial of service condition...
Hackers Breach Government Webmail While Running Parallel Crypto Fraud 🚨 The Jewelbug hacker group has been conducting espionage operations targeting governments and militaries while simultaneously...
Multi-Functional Linux Botnet “Evooo1Bot” 🚀 FortiGuard Labs has been tracking a previously undocumented Linux botnet family, which we have named Evooo1Bot. The name derives from the hardcoded stri...
New Resource Alert! 🚨 A new resource, titled “A tool matrix for Russian APTs based on the Ransomware Tool Matrix,” has been made available. This repository contains a list of which tools each Russ...