ASOS Confirms Data Breach After “HACKED” In-App Notifications 🚨 UK fashion retailer ASOS has confirmed a data breach after hackers sent unauthorized push notifications through its mobile app, clai...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2023-54404 colinhacks - zod ...
Denmark Population Registry Data Breach Affects 8.8 Million People Denmark’s Central Population Register (CPR) has issued a warning regarding a significant data breach that has compromised the per...
Rejetto HFS Servers Actively Scanned for Critical RCE Flaw 🚨 Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery,...
Pwn2Own Ireland 2026 - The Full Schedule Pwn2Own Ireland 2026 has arrived in Cork, and the world’s top security researchers are ready! 🚀 We’ve got more phone entries than we’ve ever had, with over...
MI5 Raises Alarm Over Chinese Funding of UK Academic Research 🚨 MI5 has issued a warning to UK universities regarding the involvement of over 100 academics who may have unknowingly participated in...
ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes A Linux proxy backdoor has been observed exploiting known, unpatched flaws in internet-facing IoT devices and abusing legitimate publ...
User Agent Strings Curiosities Sometimes I have to smile, or my interest is triggered, when I review new User Agent Strings in the honeypot logs. Notable observations include instances like an “au...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2025-12828 ultrapressorg - Ultra ...
Google Gemini Could Soon Get Full Access to Your Mac’s Files, Apps and the Web 🚀 Exciting news for Mac users! Google’s Gemini could soon have the ability to access any file on your macOS device, o...
Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days 🚨 The Dutch Institute for Vulnerability Disclosure (DIVD) has confirmed that attackers breached its infrastructure through t...
RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail Chris Thompson made a career breaking into banks, nuclear power plants, and defense contractors—and getting paid to d...
Malware Campaign Impersonates European Donors to Target Moldovan Media and Civil Society 🚨 Between September 9 and 25, 2026, an attacker targeted Moldovan media and civil society with fraudulent e...
Improper Limitation of a Pathname to a Restricted Directory Source: Fortiguard Date Published: October 2, 2026 An Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) [C...
367,000-Ship Study Finds Global GPS Spoofing, Red Sea Activity Before Grounding A study of 367,000 ships reveals alarming findings about global GPS spoofing, including significant Red Sea activity...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-100891 Trusted Domain Projec...
Vulnerabilities in Monta monta.app Exposed 🚨 Attention! Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging...
Teltonika RutOS Command Injection Vulnerability 🚨 A post-authentication command injection vulnerability has been identified in Teltonika RutOS, specifically affecting version 00.07.06.21. This vul...
🚨 Warning: Fake ChatGPT Ads on Google! Malvertising campaigns are shifting towards chatbots! 🚀 Google ads for fake ChatGPT pages are leading Windows users into malware traps. Researchers at Island...
Police Arrest 16-Year-Old Suspected of Running KillSec 🚨 Police in Spain have arrested a 16-year-old suspected of running the KillSec ransomware group. This arrest was part of a larger operation o...