ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities 🚨 ABB has identified multiple vulnerabilities in the WebPro SNMP card PowerValue for certain product versions. These vulnerabilities could ...
Yarbo Responds to Robot Flaws That Could Mow Down Their Owners 🚜 A researcher found that Yarbo yard robots came with a host of vulnerabilities which, among others, allowed an attacker to harvest W...
New GhostLock Tool Abuses Windows API to Block File Access 🚀 A security researcher has released a proof-of-concept tool named GhostLock that demonstrates how a legitimate Windows file API can be a...
Darcula aka. Magic Cat - Blog The Darcula phishing framework continues to evolve, transitioning from early API-driven roots to a sophisticated “Phishing-as-a-Service” model using encrypted WebSock...
Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware 🚨 In April, we observed an intrusion linked to an Atos-reported campaign where an EtherRAT was installed via a malicious MSI mas...
Critical Security Vulnerability in Ollama 🚨 Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthentica...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-41496 MervinPraison - Praiso...
Let’s Encrypt Halts Certificate Issuance 🚫 Let’s Encrypt temporarily suspended all certificate issuance on May 8, 2026, after engineers identified a critical issue involving a cross-signed certifi...
NVIDIA Confirms Data Breach 🚨 NVIDIA has confirmed in a statement for BleepingComputer that GeForce NOW user information has been exposed in a data breach. The gaming and hardware giant clarified ...
🚨 Fake Call History Apps Exposed! 🚨 Cybersecurity researchers have uncovered fraudulent apps on the official Google Play Store that falsely claimed to provide access to call histories for any phon...
Active Attack: Dirty Frag Linux Vulnerability Expands Post-Compromise Risk 🚨 A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unpri...
Unpacking Russian-Iranian Private-Sector Cyber Connections Source: Margin Research Published on: May 7, 2026 🚨 Key Highlights: Ukraine claims that Russia is providing Iran with cyber support. ...
Trellix Discloses Data Breach 🚨 Cybersecurity firm Trellix has disclosed a data breach after attackers gained access to a portion of its source code repository. Trellix, formed from the merger of ...
OceanLotus Distributing ZiChatBot Malware via PyPI Packages 🚨 Through our daily threat hunting, we noticed that, beginning in July 2025, a series of malicious wheel packages were uploaded to PyPI ...
LuaJIT 2.1.1774638290 - Arbitrary Code Execution 🚨 An exploit titled “LuaJIT 2.1.1774638290 - Arbitrary Code Execution” was released on March 29, 2026 by author TaurusOmar. This vulnerability targ...
Critical Vulnerability in MAXHUB Pivot Client Application 🚨 A critical vulnerability, CVE-2026-6411, has been identified in the MAXHUB Pivot client application versions prior to v1.36.2. This vuln...
Bludit CMS 3.18.4 - RCE Vulnerability 🚨 A Remote Code Execution (RCE) vulnerability has been identified as CVE-2026-25099 in Bludit CMS versions prior to 3.18.4. This exploit, dated 2026-03-28, wa...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2017-2404 n/a - n/a An issu...
Major Security Vulnerability in Google’s Gemini CLI 🚨 A significant security vulnerability recently threatened Google’s official Gemini-cli repository and its associated GitHub Actions, risking a ...
Dnssec Failure Causes German Internet Blackout 🚨 Millions of German websites went dark, and apps stopped working on Tuesday night as Germany’s top-level domain (TLD) .de became unreachable. For us...