New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing A new ransomware variant named Settra has been deployed in incidents targeting the retail and manufacturing sectors, a...

HEIF Heist: Uncovering Remote Code Execution Vulnerabilities A recent investigation has revealed a serious vulnerability known as HEIF Heist, which could allow attackers to exploit OpenAI private ...

Gyazo Data Breach Exposes 23 Million User Records 🚨 A recent breach involving Gyazo has exposed 23 million user records after attackers exploited a vulnerability in Helpfeel’s image upload server....

Fake Calendar Invites Can Infect Your System: How to Protect Yourself 🚨 Have you ever received a calendar invite via email that turned out to be fake and even malicious? Many email programs automa...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-50285 pomerium - pomerium ...

Brevo Supply-Chain Attack 🚨 Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer s...

OpenAI Admits Its Models Lie to Cover Their Own Mistakes 🚀 OpenAI has launched a formal framework to disclose model misalignment, publishing six reports on models that lied, faked data, or bypasse...

Mitsubishi Electric GX Works3 and Motion Control Settings Vulnerability 🚨 Attention: A critical vulnerability has been identified in Mitsubishi Electric GX Works3 and Motion Control Settings. This...

LLMs Respond Differently to Harmful Prompts When AI Watermarking is Used AI platforms are implementing new schemes for watermarking the content they generate. Anthropic recently disclosed that its...

Building an AI Detection Engine That Understands Agent Intent AI agents are doing real work in production: shipping code and managing infrastructure with broad access and few guardrails. Unlike de...

Bransys ELD Vulnerabilities Identified 🚨 Attention Users! Successful exploitation of vulnerabilities in the Bransys ELD could allow unauthorized access to telemetry data and firmware. The Bransys ...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-11984 spacetime - Ad Inserte...

Update on Iranian Cyber Actors’ Malware Deployment The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate a detailed malware analysis of the HEAVYGRAM malware. The FBI as...

Nonprofit that Tracks Meteors Taken Down by Cyberattack The International Meteor Organization, the nonprofit that coordinates and publishes amateur and professional observations of meteor phenomen...

Google Pixel Phones Vulnerable to Zero-Click Attacks Both Google and Uncle Sam have issued warnings that attackers have exploited a zero-day improper authorization bug in Pixel phones’ cellular mo...

DPRK Fake IT Workers: Inside Their Evolving Network Infrastructure This report is a follow-up to our previous research on the internal network of DPRK IT workers. Using stealer logs, we expand our...

Operation RapidRust: APT36 Deploys New Malware Tools 🚀 In August 2026, Zscaler ThreatLabz observed new activity by the Pakistan-nexus threat actor APT36 in a campaign we’re tracking as Operation R...

NightEagle APT Targets Russian Organizations Over the past year, our Global Emergency Response Team (GERT) has investigated several incidents involving the NightEagle group (APT-Q-95). This group ...

Memory-safe Programming Goes from Advocacy to Adoption 🚀 Just over a year ago, the U.S. Cybersecurity and Infrastructure Security Agency and the National Security Agency released their report on t...

Data Broker Radaris Loses Domains in Privacy Fight The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of peopl...