GitHub Ends Automatic Install Script Execution for npm 🚀 GitHub is set to end the ability for attackers to leverage automatic install script execution in npm when expected changes arrive in July. ...
Expanded JDY IoT and SOHO Botnet Enables Rapid Vulnerability Exploitation 🚀 Black Lotus Labs recently identified a significant resurgence of the JDY botnet, a covert reconnaissance network tied to...
Siemens KACO Blueplanet Inverters Vulnerabilities Attention! 🚨 KACO Blueplanet Inverters have been found to contain multiple vulnerabilities that could allow attackers to derive credentials from t...
ServiceNow Discloses Security Incident Exposing Customer Data 🚨 ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API en...
Schneider Electric Modicon Network Managed Switches Vulnerability Schneider Electric is aware of a RADIUS protocol vulnerability, identified as CVE-2024-3596, affecting its Modicon Network Managed...
Phishing Attacks Leverage TikTok, Instagram Reels Short-form videos on social media apps are currently being leveraged by threat actors as a phishing vector, utilizing tutorial-style content with ...
Fighting Spyware: An Update From WhatsApp Last year, WhatsApp made history by securing a landmark verdict and permanent injunction barring NSO Group – a spyware firm blacklisted for actions contra...
CVE-2026-9746 - Server Crashes Due to Exchange Option DNB reports on CVE-2026-9746, a server vulnerability identified where, when using $changestreams and $_requestReshardingResumeToken with the e...
BLUERABBIT - A Golang-Based Backdoor with Ransomware and Destructive Capabilities 🚨 A full-featured backdoor with file encryption, drive wiping, and a C2 channel that resembles normal message brok...
75% of Firms Deploy Vulnerable Code Amid Pressure on CISOs, Report Finds 🚨 A new report reveals that nearly all Chief Information Security Officers (CISOs) have faced pressure to suppress or delay...
Microsoft’s Open Source Tools Hacked 🚨 Microsoft has cut off access to dozens of its open source projects hosted on GitHub as it investigates how hackers apparently breached the projects and injec...
CISA Flags Fresh SolarWinds Serv-U Flaw as Actively Exploited 🚨 CISA has added CVE-2026-28318 in SolarWinds Serv-U to its KEV catalog on June 5, 2026, confirming active exploitation of a DoS vulne...
New EDRChoker Tool 🚀 A newly released open-source red team tool called EDRChoker introduces a novel technique for silencing cloud-connected Endpoint Detection and Response (EDR) agents. Instead of...
CVE-2026-11459 - SecureAge CatchPulse IOCTL Vulnerability Disclosed 🚨 A new security vulnerability, tracked as CVE-2026-11459, has been detected in SecureAge CatchPulse up to version 10.9.1. This ...
Oxford University Student Data Breach 🚨 Oxford University students seeking work will be dismayed to learn that crooks have breached a second external platform provider for the university in as man...
Former Cyber Executive Turns Whistleblower Against IBM for Data Breach Cover-Up A former IBM cybersecurity executive has made serious allegations against the company, claiming it covered up multip...
Claude Opus Uncovers Critical Flaw in Zcash’s Privacy Layer 🚨 Claude Opus 4.8 has revealed a four-year-old critical flaw in Zcash that could have allowed the undetectable creation of counterfeit c...
The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy What you might not be aware of are the distributed efforts to train AI that could be using the devices inside your home. Bright ...
Dark Web Nemesis Market Vendor Sentenced to 26 Years for Drug Trafficking A California man has been sentenced to more than 26 years in federal prison for trafficking fentanyl and methamphetamine t...
C-Suite Impersonation in the Gulf: How Threat Actors Are Targeting UAE & Saudi Executives in 2026 When a senior executive at a Dubai-based energy conglomerate receives a WhatsApp message that ...