RansomHouse Picks a Fight with Namibia’s Defense Establishment 🚨 Namibia’s computer security incident response team has confirmed unauthorized activity in the defense ministry’s network, linking i...
Neural Override - AI-Orchestrated RAT With SCADA Tasking 🚀 We identified and analyzed Neural Override, a five-build Python RAT family controlled via Telegram and featuring an autonomous, LLM-drive...
From Fake Interviews to Malicious Repositories: Disrupting Contagious Interview 🚨 Attention Software Developers and IT Professionals! 🚨 A new threat is emerging in the recruitment landscape, targ...
Cybercrime Feud Erupts on Dark Web 🚨 One of the world’s best-known cybercrime groups has announced a significant development in its ongoing rivalry. On Sunday, ShinyHunters, a notorious digital ex...
CVE-2026-61852 - Chartbrew: SQL Injection Vulnerability Chartbrew is an open-source web application that connects directly to databases and APIs to create charts. A critical vulnerability, CVE-202...
BigCommerce Alerts Merchants of Data Breach Linked to Ribon Apps Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-pa...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-83242 Oracle Corporation - O...
CVE-2026-94090 - JusticeRage Manalyze PE Parser Vulnerability A security flaw, identified as CVE-2026-94090, has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function...
Beacon Cyber Security Incident Final Report In July 2026, we experienced a cyber-security incident in which an unauthorized third party gained access to our systems. Our investigation has conclude...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2024-58383 froxlor - froxlor ...
North Korean Cyber Actor Group Targeting IT Professionals The North Korean “WaterPlum” cyber actor group, commonly referred to as “Contagious Interview,” conducts cyberattacks by infiltrating unsu...
Beware the SparroWock: The Backdoor That Bites, The Commands That Catch ESET Research’s ongoing monitoring of FamousSparrow has borne fruit once again. Our previous public report on FamousSparrow ...
New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing A new ransomware variant named Settra has been deployed in incidents targeting the retail and manufacturing sectors, a...
HEIF Heist: Uncovering Remote Code Execution Vulnerabilities A recent investigation has revealed a serious vulnerability known as HEIF Heist, which could allow attackers to exploit OpenAI private ...
Gyazo Data Breach Exposes 23 Million User Records 🚨 A recent breach involving Gyazo has exposed 23 million user records after attackers exploited a vulnerability in Helpfeel’s image upload server....
Fake Calendar Invites Can Infect Your System: How to Protect Yourself 🚨 Have you ever received a calendar invite via email that turned out to be fake and even malicious? Many email programs automa...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-50285 pomerium - pomerium ...
Brevo Supply-Chain Attack 🚨 Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer s...
OpenAI Admits Its Models Lie to Cover Their Own Mistakes 🚀 OpenAI has launched a formal framework to disclose model misalignment, publishing six reports on models that lied, faked data, or bypasse...
Mitsubishi Electric GX Works3 and Motion Control Settings Vulnerability 🚨 Attention: A critical vulnerability has been identified in Mitsubishi Electric GX Works3 and Motion Control Settings. This...