3BB Attacker Used MeshCentral Backdoor for Root Access An attacker was operating inside the network of 3BB, one of Thailand’s largest broadband providers, and maintained remote control of internal...
Red Heron Exploits Gitea N-Day Flaw in Multinational Campaign 🚀 Acronis Threat Research Unit (TRU) uncovered a multinational campaign in which a Chinese-speaking threat actor, tracked as Red Heron...
Critical Dell ObjectScale Vulnerabilities 🚨 Dell Technologies has released a security advisory regarding multiple vulnerabilities affecting Dell ObjectScale and Elastic Cloud Storage (ECS) deploym...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-70341 Microsoft - Microsoft ...
From Hacks to Bioweapons, Claude Misuse Is Now Everywhere 🚨 Anthropic has been perhaps more vocal than any other AI company about the ways in which its tools are prone to misuse. It published some...
India’s STPI Serves TerminalFix-Style Attack via Fake Cloudflare Check 🚨 A website linked to India’s Software Technology Parks of India (STPI) is serving a spoofed Cloudflare verification page tha...
Crypto Customers Targeted by Scammers 🚨 An attacker breached an email marketing platform and launched targeted attacks against the newsletter subscribers of some of its customers, especially those...
Countering Misuse of AI - September 2026 Source: Anthropic Date Published: September 11, 2026 Over the past eight months, our Threat Intelligence team identified and disrupted operations in which...
Surfshark VPN Breach: Hackers Access Internal Testing Servers 🚨 Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet. T...
MantaxOtax Android Malware Combines Ransomware With Spyware 🚨 MantaxOtax Android malware has combined file encryption with extensive surveillance, allowing attackers to steal messages, credentials...
Will AI Kill Us All Within The Next Decade? The Wall Street Journal reports that concerns are rising inside AI labs that competition is pushing tech companies to race toward self-improving models ...
New Android Malware Strain: Mantax Otax 🚨 A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass v...
Multiple Vulnerabilities in SolarView Compact 🚨 SolarView Compact, provided by Contec Co., Ltd., contains multiple vulnerabilities that affect various product versions. The affected products inclu...
Widening the Circle of Chinese Hacker Group QTFY: ELEX’s Intelligence Client List and Lexbell’s PLA Contracts On August 26, 2026, the FBI, NSA, and U.S. Cyber Command’s Cyber National Mission Forc...
U.S. Disrupts Xinbi Guarantee Scam Marketplace 🚨 The U.S. Department of Justice (DOJ) announced coordinated actions against an illicit online marketplace known as Xinbi Guarantee. This marketplace...
Once Bluemoon Multiple State Aligned Threat Actors Rapidly Adopt Novel Exploit 🚨 Proofpoint has identified four espionage-motivated threat actors employing a new exploit kit that chains multiple C...
New N0va Phishkit Targets North America and EU: A Growing Identity Risk for SOCs Recently, ANY.RUN researchers uncovered N0va, a new phishkit targeting organizations across North America and the E...
CVE-2026-88002 - Open WebUI Vulnerability 🚨 CVE-2026-88002: Open WebUI allows any authenticated user to hang the server via a cyclic chat message history. Open WebUI is an extensible, feature-rich...
CVE-2026-15460 - Missing Channel-State Validation in Zephyr Bluetooth Classic L2CAP Receive Path CVE-2026-15460 details a missing channel-state validation in the Zephyr Bluetooth Classic L2CAP rec...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2021-44319 n/a - n/a Parrot...