Gamaredon’s Infection Chain: Spoofed Emails, GammaDrop and GammaLoad 🚀 Investigating Gamaredon’s abuse of CVE-2025-8088, we identified a dozen waves of spearphishing emails targeting Ukrainian sta...
Zero-day Exploit Bypasses Windows 11 BitLocker Protection 🚨 A zero-day exploit circulating online allows individuals with physical access to a Windows 11 system to bypass default BitLocker protect...
The Time of Much Patching is Coming 🚀 The reality is that software engineering is hard. Identifying and fixing bugs before they make it into production code is challenging. Source code peer review...
Tether Tron Trm Financial Crime Unit Freezes 450 Million in Crypto Funds 🚀 A financial crimes unit formed by three major cryptocurrency firms announced Thursday that it has frozen more than $450 m...
Welcome to Day One of Pwn2Own Berlin 2026! 🎉 Today, 22 entries took the Pwn2Own stage to target AI Databases, Coding Agents, Local Inferences, and a separate category for NVIDIA products. The worl...
PraisonAI Vulnerability Scanned Within Hours 🚨 A newly disclosed authentication bypass flaw (CVE-2026-44338) in PraisonAI drew near-instant probing, exposing risks from default-insecure AI APIs. J...
Kazuar: Anatomy of a Nation-State Botnet Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues t...
Quest KACE SMA Flaw CVE-2025-32975: A Critical Vulnerability 🚨 CVE-2025-32975 is a critical flaw in Quest KACE SMA, a tool used for endpoint management. If exploited, this vulnerability could impa...
Glances 4.5.2 - Command Injection Vulnerability 🚨 A high-severity command injection vulnerability has been identified in Glances versions prior to 4.5.3. These versions support dynamic configurati...
Coreruleset 4.21.0 - Firewall Bypass 🚨 An exploit titled ‘coreruleset 4.21.0 - Firewall Bypass’ has been published, detailing a critical vulnerability tracked as CVE-2026-21876 (EDB-ID: 52558). Th...
Major Security Vulnerabilities Found in MCP Servers 🚨 Security vulnerabilities in MCP servers for three popular database projects could allow attackers to execute unintended SQL statements on Apac...
AWS to Quick Admins: Access Control Issues and Customer Impact On May 12, Fog Security disclosed an authorization bypass in Amazon Quick, a BI service. AWS responded, stating that “no customer dat...
ClickFix Finds a Backup Plan in PySoxy Proxy Chains 🚀 ReliaQuest has observed attackers pairing ClickFix with the PySoxy proxy tool to establish redundant encrypted access paths and persistence on...
State-sponsored Actors: The Friends You Don’t Want Most organizations operate under the assumption that anything residing within their trust boundary is trustworthy. In practice, these assumptions...
CISOs Step into the AI Spotlight 🚀 The spotlight on CISOs has never shone more brightly, with new responsibilities that include data protection and privacy, third-party and supply chain risk, and ...
The GRU’s Hogwarts Inside Bauman University’s Department 4, an elite spy school for Russian military intelligence Vladislav Borovkov, a member of Russia’s most notorious black ops unit, stands ac...
The Evolution of the Geotag: How AI is Bridging the Gap in Location-Based OSINT For years, location-based open-source intelligence (OSINT) has relied heavily on a steady stream of user-generated g...
New Exim BDAT Vulnerability 🚨 Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code executio...
New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots 🚨 Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network ...
Critical Vulnerability in ABB AC500 V3 PLCs 🚨 ABB has identified a critical vulnerability, tracked as CVE-2025-15467, affecting versions of its AC500 V3 programmable logic controllers (PLCs). An u...