Flaw in UK’s Corporate Registry Exposes Directors’ Data 🚨 Companies House was forced to pull down its record-filing platform for the entire weekend to rectify a security issue that exposed the per...
China-Linked Hackers Target Asian Militaries in Espionage Operation 🚀 Southeast Asian military organizations have been targeted in a China-linked cyberespionage campaign running for years, as repo...
Payload Ransomware Claims the Hack of Royal Bahrain Hospital 🚨 The Payload Ransomware group claims to have breached the Royal Bahrain Hospital (RBH), a leading healthcare facility in Bahrain. Spec...
Introducing Betterleaks 🚀 A new open-source tool called Betterleaks has been launched to scan directories, files, and git repositories to identify valid secrets using default or customized rules. ...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2019-25473 Softwebinternational -...
🚨 AppsFlyer Web SDK Hijacked! The AppsFlyer Web SDK was temporarily hijacked this week with malicious code used to steal cryptocurrency in a supply-chain attack. The payload can intercept cryptocu...
Credential-Stealing Crew Spoofs VPN Clients 🚨 A group of cybercriminals tracked as Storm-2561 is using fake enterprise VPN clients from CheckPoint, Cisco, Fortinet, Ivanti, and other vendors to st...
Twenty Years of Cloud Security Research On March 14, 2006, AWS announced S3, marking the first AWS service that was generally available. From day one, it has been possible to do great things with ...
CrackArmor - Critical AppArmor Flaws Enable Local Privilege Escalation to Root 🚨 Qualys TRU has discovered critical vulnerabilities in AppArmor, dubbed “CrackArmor”, that allow unprivileged users ...
Canadian Retail Giant Loblaw Notifies Customers of Data Breach 🚨 Loblaw Companies Limited, the largest food and pharmacy retailer in Canada, has announced that hackers breached a portion of its IT...
🚨 Android Vulnerability Alert! A vulnerability in Android devices can allow attackers to gain access to a phone in less than a minute! This vulnerability, tracked as CVE-2026-20435, affects certai...
The Market for Spyware is Growing - It’s Used Differently Against Women In late 2024, the Citizen Lab published a report on the gendered dimensions of digital transnational repression, calling for...
Escorted Out! Major Cybersecurity Takedown 🚨 Black Lotus Labs is proud to have partnered with the Department of Justice in taking down the proxy network known as SocksEscort, which was powered by ...
Announcing Pwn2Own Berlin for 2026 🚀 Pwn2Own returns to Berlin and OffensiveCon! Last year, we added Artificial Intelligence as a category with great results. This year, we’re expanding this and s...
AI-Generated Slopoly Malware Used in Interlock Ransomware Attack 🚨 A new malware strain dubbed Slopoly, likely created using generative AI tools, has allowed a threat actor to remain on a compromi...
Hewlett Packard Enterprise Fixes Critical Authentication Bypass in Aruba AOS-CX 🚀 Hewlett Packard Enterprise (HPE) has addressed several vulnerabilities in Aruba AOS-CX, including a critical bug t...
Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown 🚨 Meta announced on Wednesday that it has disabled over 150,000 accounts associated with scam centers in South...
INC Ransomware Group Holds Healthcare Hostage in Oceania 🚨 Cybersecurity authorities in Oceania are warning that the INC ransomware operation has been wreaking havoc on healthcare organizations in...
BeatBanker Malware Targets Android Users 🚨 A new Android malware called BeatBanker spreads through fake Starlink apps distributed on websites posing as the Google Play Store. Once installed, it hi...
Alert Regarding Vulnerabilities in Adobe Acrobat and Reader 🚨 JPCERT/CC issued an alert on March 11, 2026, regarding security updates available for Adobe Acrobat Reader, identified as APSB26-26. V...