CVE-2026-68563 - Information Disclosure in Ansible Collection Redhat Leapp CVE-2026-68563 describes an information disclosure vulnerability in ansible-collection-redhat-leapp related to insecure b...
Securing Agents Across Perplexity’s Client Endpoints with Numbat Numbat is Perplexity’s open-source agent security suite for client endpoints. It detects, prevents, and investigates risky AI agent...
The Average Cost of a Data Breach Rises to $5 Million The average cost of a data breach has risen to almost $5 million! 🚀 This alarming figure was revealed in the 2026 edition of the annual IBM Co...
Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit On 22 July 2026, one day prior to Proofpoint’s recent joint release with the NSA on the Russia-aligned threat actor TA...
CVE-2026-14643: undici Vulnerable to Cross-User Information Disclosure 🚨 Overview: CVE-2026-14643 highlights a vulnerability in undici that allows for cross-user information disclosure due to impr...
Turns Out the Ghost Was the PLA Our research uncovered a tidy little overlap that points straight at APT15 and the PLA Cyberspace Force’s 8th Technical Reconnaissance Base (8th TRB). This tool, kn...
Siemens Mendix Runtime Vulnerability Advisory Source: CISA Date Published: July 28, 2026 Mendix documentation for access rules does not adequately describe the special behavior of the System.User...
Multiple Vulnerabilities in ELECOM Wireless LAN Routers and Access Points 🚨 Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain several vulnerabilities. Specificall...
Mirage Kitten’s New Malware Set 🚀 Mirage Kitten, also known as UNC1549, Smoke Sandstorm, and Nimbus Manticore, is an advanced persistent threat (APT) group focused on cyber-espionage operations ag...
igloohome Smart Lock Mobile Application Vulnerability Alert 🚨 The igloohome Smart Lock Mobile Application has a critical vulnerability that could allow unauthorized access to its functions and bac...
New Crypter-as-a-Service Cruciferra Fuels Stealthy Malware Attacks Worldwide 🚀 Proofpoint has uncovered Cruciferra, a crypter-as-a-service that assists hackers in evading antivirus systems and del...
MikroTik RouterOS and Cloud Hosted Router Vulnerability Advisory 🚨 CISA has published an advisory regarding a critical vulnerability in MikroTik RouterOS and Cloud Hosted Router. This vulnerabilit...
CubePilot Drone Software Developer Hit by DNS Hijacking 🚨 CubePilot, an Australian firm that designs flight controllers for drones (UAVs), announced a severe operational disruption caused by a DNS...
AutoIT Payload Injector: A New Wave of Malware For a long time, AutoIT has been a common tool in the malware ecosystem. Threat actors continue to use it due to its ease of use and powerful capabil...
Java Spring Boot Heapdump Scans 🚀 Spring Boot exposes the endpoint “/actuator/heapdump” to collect debug information. By default, the endpoint will return a file heapdump.hprof, which includes a b...
GitHub Introduces 3-Day Dependabot Cooldown to Combat Malware 🚀 GitHub has introduced a default three-day cooldown period for Dependabot version updates to reduce the risk of projects automaticall...
Ernst & Young Data Breach 🚨 The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, stating that they obtained credentials for some o...
‘Confused Deputy’ Flaws Persist in Google Cloud and Microsoft Azure 🚨 “Confused Deputy” flaws persist in Google Cloud and Microsoft Azure, a category of vulnerabilities that allows an attacker to ...
What’s Your Data Worth on the Dark Web? (Lock and Code S07E15) Source: Malwarebytes Date Published: July 27, 2026 Twenty years ago, a British mathematician named Clive Humby popularized a phrase ...
OpenAI Not Part of the New Open Secure AI Alliance OpenAI is noticeably absent from the list of initial supporters of a new industry initiative aimed at promoting the creation of strong, safe, def...