CVE-2026-82411 - Objects API: Cross-object-type Authorization Bypass Open Object provides an API and admin interface to manage objects and object types. From versions 2.4.3 until 2.5.1, 3.6.2, 4.0...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-111809 Apache Software Found...
Italy’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters Italy’s Parliament cyberattack highlights hybrid warfare risks and the need for transparency, stronger defenses, and ...
This Tool Can Recover Deleted AI Chats From Your Phone - How It Works 🚀 An experimental tool has successfully recovered deleted information from chats, highlighting limitations in perceived local ...
SkyW4lker Exposed: A Growing Microsoft 365 Phishing Threat to American Enterprises SkyW4lker (SkyW4lker x365 Sentinel) is an active device-code phishing kit targeting Microsoft 365 users in the Un...
Researchers Uncover Signs of Massive Surveillance Operation on Starlink Users 🚨 A recent report reveals alarming findings about a massive surveillance operation targeting Starlink users! Discover-...
Process Trees in Livehunt: YARA Rules That Know Who Launched What 🚀 YARA-X v1.21.0 and v1.22.0 have introduced new fields: parent_name and ancestor_names in the vt.behaviour.processes_list. This e...
In a pickle: Why every pickle defense in machine learning is bypassed the same way The machine learning (ML) ecosystem recently shipped a series of defenses against malicious model files. PyTorch ...
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption 🚨 The GoAhead embedded web server has a significant flaw that allows revoked client certificates to bypass login o...
Attackers Take Control of Dahua Cameras and Video Recorders Via Easy4IP 🚨 Ukraine warns that attackers can remotely access Dahua cameras and recorders via Easy4IP, allowing them to view video feed...
John Althouse on X - Announcing 3 Critical Vulnerabilities 🚨 John Althouse has revealed 3 critical vulnerabilities affecting hundreds of millions of IoT devices, firewalls, operational technology ...
Unveiling Sirius Backdoor: A Multistage Fileless Campaign Disguised as FedEx Invoices 🚨 During a recent priority customer escalation, our Trellix Threat Response Team investigated a suspicious ale...
The Pwn Request Reckoning: What Still Works Against GitHub Actions GitHub’s 2026 Actions changes make pull_request_target attacks harder, but not impossible. For years, pull_request_target has bee...
Security Concerns Flagged Within Japan Firm Gmo Before Breach Ceo 🚨 GMO Internet Group Inc CEO Masatoshi Kumagai admitted on Sunday night that internal engineers had flagged security issues before...
Researcher Hacks Into “Steal My Bitcoin” Server in PHP Security Test A researcher breached the Steal My Bitcoin server in less than 24 hours! 🚀 James Pavur paid the $2,000 bitcoin prize after conf...
PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects 🚀 Researchers have demonstrated PhantomTac, an innovative attack that uses hidden magnetic tags to deceive robotic touch sensors, ...
Hisense Faces $5 Million Ransom Demand Over Alleged 19GB Data Theft 🚨 Breaking News: Hisense, a major Chinese electronics and home appliance manufacturer known for its TVs, is facing a significant...
CVE-2026-2270 - StatefulSet and ControllerRevision Vulnerability A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on Statefu...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2014-125133 imithemes - NativeChu...
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, acc...