NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-19593 OpenAI - Codex Desktop...

Daejon Love Case Highlights Online Romance Scams The internet has revolutionized dating, and there has been a surge in U.S. adults using apps to find ideal matches post-pandemic. While these apps ...

Russian Hacker Faces Up to 20 Years in Prison Following Extradition and Indictment A federal grand jury in California has indicted Russian citizen Searzhudin Tamirlanovich Aktulaev for allegedly c...

Google Drops Key Memory Protection From Pixel 11 🚨 GrapheneOS has spent years turning hardened memory safety into a non-negotiable baseline for mobile security. Now the project faces its sharpest ...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-10195 fs-code - FS Poster - ...

Off the Hook: Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586 🚨 Overview In total, we reported 12 distinct vulnerabilities in the Switchvox product which have now ...

Mirage Kitten Switches to Node.js and JavaScript Malware 🚀 While monitoring Mirage Kitten activity, we uncovered a previously undocumented malware family that we dubbed NodeRabbit. The first sampl...

Financially Motivated Threat Actor BREEZE COMET Targets Brazil 🚨 Overview Beginning in 2024, Mandiant investigated a series of compromises affecting Brazilian financial services, retail, and eComm...

Financial Stability Board Sounds the Alarm Over Frontier AI Risks The global financial system is at risk as frontier AI models transform the cyber-threat environment, the Financial Stability Board...

FBI Probes Service Selling 153M+ Drivers Licenses A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in ...

CVE-2026-84482 - WWBN AVideo Cross-Site Request Forgery CVE-2026-84482, rated with a high CVSS 3.1 score of 8.8, affects WWBN AVideo and is identified as a Cross-Site Request Forgery via get_domai...

Attackers Steal METR API Key and Burn $600,000 in AI Credits 🚨 Attackers have stolen an API key from the AI safety research organization METR and used it for three weeks to consume model credits w...

23-Year-Old Noboru Botnet Dismantled in Global Law Enforcement Operation A massive botnet that had lurked in the shadows for more than two decades finally met its end through coordinated action by...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-81267 Mozilla - Firefox for ...

Windows Bug Alert 🚨 Microsoft has reported a glitch that causes Windows to incorrectly inform users that Microsoft Defender Antivirus is turned off, despite it being fully functional. This bug pos...

Traefik Vulnerability Discovered in Version Through 3.7.11 🚨 Bishop Fox has identified a significant vulnerability in Traefik, an open-source reverse proxy and ingress controller widely used in co...

Microsoft Exchange Online Outage Causes Email Failures and Auth Issues 🚨 Microsoft is investigating a widespread service issue causing authentication issues, connection problems, email delays, and...

Security Incident – BGP Hijacking 🚨 The Virtualizor platform, for those unfamiliar, is a VPS management platform used by many hosting providers to deploy and manage virtual servers on KVM, Xen, LX...

Cronos Blockchain Restarts After $74 Million Tectonic Exploit 🚀 The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lending ...

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode JSCeal is a stealer delivered as compiled V8 bytecode (.jsc) and executed by a bundled Node.js runtime, targeting cryptocur...