Malware Campaign Impersonates European Donors to Target Moldovan Media and Civil Society 🚨 Between September 9 and 25, 2026, an attacker targeted Moldovan media and civil society with fraudulent e...

Improper Limitation of a Pathname to a Restricted Directory Source: Fortiguard Date Published: October 2, 2026 An Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) [C...

367,000-Ship Study Finds Global GPS Spoofing, Red Sea Activity Before Grounding A study of 367,000 ships reveals alarming findings about global GPS spoofing, including significant Red Sea activity...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-100891 Trusted Domain Projec...

Vulnerabilities in Monta monta.app Exposed 🚨 Attention! Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging...

Teltonika RutOS Command Injection Vulnerability 🚨 A post-authentication command injection vulnerability has been identified in Teltonika RutOS, specifically affecting version 00.07.06.21. This vul...

🚨 Warning: Fake ChatGPT Ads on Google! Malvertising campaigns are shifting towards chatbots! 🚀 Google ads for fake ChatGPT pages are leading Windows users into malware traps. Researchers at Island...

Police Arrest 16-Year-Old Suspected of Running KillSec 🚨 Police in Spain have arrested a 16-year-old suspected of running the KillSec ransomware group. This arrest was part of a larger operation o...

Pentagon Data Breach Impacts Millions of US Military Personnel The US government is notifying nearly three million current and former military staff that their personal information was stolen duri...

MikroTik RouterOS Flaw Alert 🚨 MikroTik’s RouterOS has a near maximum severity bug: CISA urges updating ASAP! A critical RouterOS flaw can let attackers run code as root without a password. The cr...

Meari IoT Cloud Platform OpenAPI Service Vulnerabilities 🚨 Critical Alert: Successful exploitation of vulnerabilities in the Meari IoT Cloud Platform OpenAPI Service could allow attackers to manip...

Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles In July 2026, a China-aligned threat actor known as TA419 conducted multiple credential phishing campa...

CVE-2026-86344 - 389-ds-base Vulnerability Report A new high-severity vulnerability, identified as CVE-2026-86344, has been reported in 389-ds-base. This flaw, described as “unauthenticated worker...

Armatura LLC Armatura One Vulnerabilities Published Date: October 1, 2026 Source: CISA The recent vulnerabilities discovered in Armatura LLC’s Armatura One could lead to serious security risks. 🚨...

openSUSE Leap Adds a New Security Layer: Immutable Mode Starting with version 16.1, openSUSE Leap is adding another layer to its security that should further elevate it as one of the more secure d...

MALFEX npm Attack: A Growing Threat 🚨 CloudSEK has uncovered the MALFEX campaign, which utilizes malicious npm packages to deploy the Overlord RAT. This attack not only steals Discord and browser ...

Global Group Ransomware Abuses WinMerge to Deploy Encryptor A Ransomware-as-a-Service (RaaS) operation known as Global Group is targeting large enterprises with phishing emails that deliver a file...

China-nexus UAT-11587 Targets Government and Policy Organizations Across Asia with Antino Backdoor 🚀 Cisco Talos has uncovered a cluster of activity tracked as UAT-11587, targeting government and ...

Star Blizzard Refines Phishing And Malware Delivery With The Redflick Technique 🚀 Source: Microsoft Date Published: September 29, 2026 STAR BLIZZARD (also known as APT29 or Nobelium) has signific...

SMTP is the Key: BPFDoor and AVERAT Hitting the Network Edge 🚀 Rapid7 has tracked a set of Linux samples that seamlessly blend into the software and device conventions of the telecom environments ...