Multiple Vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, along with the mobile app ECOVACS PRO App developed by ECOVACS ...
INC Ransomware Surge 🚀 INC ransomware has surged to the forefront of cyber threats this summer. The group now stands as the dominant actor exploiting a pair of critical flaws in SonicWall’s Secure...
🚨 Fake Adobe and Zoom Updates Alert! Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom software ...
CVE-2026-11836: Production Debug-Unlock Token Verification Missing Device Binding This vulnerability is rated as LOW with a CVSS score of 4.0 (1.8). Insufficient verification of data authenticity ...
Zero Networks Enhances AI Security with ‘Least Agency’ Controls Zero Networks has launched Least Agency Enforcement, a groundbreaking capability designed to implement the Open Worldwide Applicatio...
🚨 Hackers Exploit N-able N-central Flaw After Initial Fix Falls Short N-able has released an emergency security update for N-central after attackers used an authentication bypass to gain remote ad...
Google Password Manager Attacks 🚨 Malware running as an ordinary user on a Windows machine can sign into a victim’s passkey-protected accounts without a fingerprint, a PIN, or anything appearing o...
China-based Hacker Employs DeepSeek in Autonomous Threat Campaign 🚨 A Chinese-speaking threat actor has been identified running an AI-based hacking campaign that leveraged DeepSeek, using the Herm...
Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys 🚨 An alleged data leak from Żabka, Poland’s largest convenience store operator, has surfaced, offering a treasure trove of sensiti...
Google Chrome May Soon Block New Tab Hijacker Extensions by Default 🚀 Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page...
SplitVPN Data Breach Exposes 865k Users’ Personal Records 🚨 A significant data breach has hit SplitVPN, a Russian VPN provider formerly known as NotVPN, exposing the personal records of roughly 86...
CVE-2026-10848 - Out-of-bounds Read in Zephyr OCPP 1.6 RPC Message Parser Published Date: August 2, 2026 Source: CVE Feed CVE-2026-10848 describes an out-of-bounds read vulnerability in the Zephy...
Threat Review Journal: Investigation into APT 5 and PLA Troop 61786 I began tracking a subset of what was assessed to be low-level criminal activity, which actually turned out to be a group of six...
Watchfire Controller Software Vulnerability Alert 🚨 On July 30, 2026, CISA published an alert regarding a significant vulnerability in the Watchfire Controller Software. This vulnerability, identi...
The 73,000-Server Market Reselling Western Frontier AI into China Western frontier AI is not sold in mainland China, yet it is utilized daily. This report maps the infrastructure that enables this...
Schneider Electric IGSS Vulnerability Advisory 🚨 Date Published: July 30, 2026 Schneider Electric is aware of a vulnerability in its IGSS Definition module for the IGSS (Interactive Graphical SCA...
NASA Core Flight System (cFS) Health & Safety (HS) Application Vulnerability Advisory 🚨 Attention! A critical vulnerability has been identified in the NASA Core Flight System (cFS) Health &...
Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents 🚀 Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instru...
CosmosEscape: Taking Over Every Database in Azure Cosmos DB A critical vulnerability chain in Azure Cosmos DB enabled full read and write access to every Cosmos DB database. Wiz Research uncovered...
Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks 🚨 Overview: Unit 42 has uncovered a sophisticated AI-enabled autonomous hacking campaign orchestrated by a Chinese-spe...