A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console 🚨 Critical Vulnerabilities Identified! 🚨 CVE-2026-58073 (CVSS 9.5) and CVE-2026-58072 (CVSS 9.0) are critical vul...
Norway’s Digital Government Infrastructure Hit by a New DDoS Attack 🚨 Norway’s shared digital government infrastructure has been hit by another distributed denial-of-service (DDoS) attack that dis...
LACMA Data Breach Exposed Sensitive Information The Los Angeles County Museum of Art (LACMA) has announced that a data breach last year exposed customer and employee information. 🚨 The museum repo...
Fake Minecraft Sites Are Still Spreading WeedHack After C2 Takedown 🚨 McAfee Labs has released a follow-up report on the WeedHack Malware-as-a-Service campaign, revealing that ten active malicious...
FURUNO FA-50 Class B AIS Transponder Vulnerabilities 🚨 Critical Alert! Successful exploitation of these vulnerabilities could allow an attacker to alter device settings. The following versions of ...
Ebyte NE2-D11 Vulnerabilities Exposed Published on: August 25, 2026 Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized administrative access, disclose s...
Critical Vulnerability in PayRange API Disclosed 🚨 A significant vulnerability has been identified in the PayRange API, which could allow both authenticated and unauthenticated attackers to exploi...
TikTok Settles U.S. Child Privacy Case for $400 Million 🎉 TikTok will pay $400 million to settle U.S. claims that it violated child privacy laws by collecting data from users under 13. The U.S. De...
iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset The iAuthFlow v2 phishing toolkit utilizes a phished Google session to enroll an attacker-controlled passkey that survi...
Beware of Fake Security Scans! 🚨 A wave of deceptive websites is posing as Microsoft security scans, misleading victims into uninstalling their antivirus software. These sites, branded as SysScan,...
Doubloon Dredger Abuses Notion to Harvest Authentication Tokens 🚨 A financially motivated threat actor, known as Doubloon Dredger, has been observed exploiting free Notion accounts, malicious PDFs...
AliExpress Caught Using Silent Audio to Fingerprint Visitors’ Browsers AliExpress, the online marketplace owned by Alibaba Group, has come under scrutiny after researchers and browser maker Brave ...
ToxicPanda Android Malware Overview 🚨 The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote com...
Iran-linked Hackers Behind Cyber Attack That Shut Down Power Plant 🚨 A small power plant in the UK was shut down during a cyber attack. The Telegraph reported that the attack, which took place las...
Zero-Click Grok Chat History Theft 🚨 Adversa AI researcher Rony Utevsky has devised a groundbreaking attack technique known as Cryptographic Context Injection. This method bypasses AI safety filte...
A Social Engineering Attempt Against ReliaQuest: What We Found On August 22, 2026, ReliaQuest was the target of a social engineering attack. While unsuccessful beyond temporarily exposing one iden...
The Invisible Passenger in Your Car 🚗 While monitoring Android threats in June 2026, we discovered a new piece of Android malware. What struck us as unusual was that it installed like an ordinary ...
SickKids Children’s Hospital Bandages Up Careers Website After Intruder Breaks In 🚨 Toronto’s Hospital for Sick Children, commonly referred to as SickKids, has reported that the data of current an...
New Agent Tesla Malware Variant Boosts Evasion Capabilities 🚀 A new version of the notorious Agent Tesla malware contains features designed to evade detection and steal credentials, as identified ...
Even MOAR Powershell: Analyzing Entra Logins One thing that folks never seem to do after “going to the CLOOOOUUUUD” is to look at their logs, logs that they would have checked daily when things we...