NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-52744 gocd - gocd GoCD...

NeedyMantis: Unpacking a Post-Compromise Malware Family Microsoft Threat Intelligence has identified NeedyMantis, a modular post-compromise malware family observed in a limited number of targeted ...

Why I Find Linux Keyrings Actually Very Useful: 5 Reasons If you’ve used Linux, your desktop may have reminded you to set up your keyring. Keyring apps, such as KDE Wallet or Seahorse (GNOME), aut...

Times Car Confirms Data Breach Affecting 6.6 Million User Accounts 🚨 Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberat...

Over 16,000 Supabase Databases Expose PII, Passwords, Auth Tokens 🚨 Researchers have discovered that over 16,000 misconfigured Supabase databases are exposing readable tables containing personally...

Former US Soldier Sentenced for Hacking and Extortion Scheme Cameron John Wagenius, 22, a former Army soldier, was sentenced today to 70 months in prison and ordered to pay $294,978 in restitution...

Russian Tech Surveillance Company Infiltrated Europe’s Law Enforcement Agencies A U.S.-based data-extraction firm accused of being secretly run from Russia has worked on EU-backed projects and sol...

Kothamine Malware Uses Tailscale’s Tailcat to Evade Network Detection 🚨 We discovered an undocumented remote-access Trojan (RAT) called Kothamine Agent. It supports more than 30 commands and gives...

Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk Security researchers at Zenity Labs have disclosed a set of zero-click vulnerabilities in Salesforce Agentforce that ...

Threat Actors Use Google Ads To Target Ledger Users 🚨 In August 2026, Zscaler ThreatLabz analyzed a phishing campaign that used fraudulent Google ads to target Ledger hardware wallet users. The ad...

Researchers Identify AliExpress Phishing Domains Before Registration Security researchers have reported flagging 10 web addresses weeks before they were registered, then watching them go live as e...

Multiple Vulnerabilities in baserCMS 🚨 The baserCMS provided by the baserCMS User Community contains multiple vulnerabilities that could pose significant risks to users. Specifically, baserCMS ver...

Imminent Zero-Day Attack 🚨 The American software company KiteWorks has warned its customers of an imminent cyberattack. In an email obtained by Heise Security, the KiteWorks CISO urges its custome...

5G-Shark Lures Phones to Rogue 5G Cells Without Network Jamming Source: Hackread Date Published: September 25, 2026 Security researchers have developed a method that can pull nearby 5G phones ont...

Botslab G980H Dashcams Vulnerabilities 🚨 The Botslab G980H Dashcams have been found to have several critical vulnerabilities that could be exploited by attackers. Successful exploitation may allow...

Poland Says Fire at Starlink Station is Sabotage as Denmark Warns of Rising Russian Threat A fire at a Starlink satellite station in central Poland was a deliberate “act of sabotage”, according to...

One URL, Three Different Tricks Yesterday, we received a phishing email with an interesting link. At first sight, it looks like garbage, but every piece of it has been carefully crafted to confuse...

Eufy Omni C20 and Omni X10 Pro Vulnerabilities 🚨 Date Published: September 24, 2026 Source: CISA Successful exploitation of these vulnerabilities could allow an attacker to run system-level comma...

CVE-2026-97368 - chillzhuang SpringBlade Vulnerability A weakness has been identified in chillzhuang SpringBlade up to version 5.0.2. This affects the function UserServiceImpl.userInfo of the file...

CVE-2026-85491 - Catalyst::Seal Vulnerability Details CVE-2026-85491 details a vulnerability in Catalyst::Seal versions before 0.03 for Perl. This flaw allows one request to disable a path or rout...