What You Say During a Cyber Breach Can – and Will – Be Used Against You Cyber breach communications can become costly evidence 💰, making disciplined documentation and privilege practices essential...
Operation CameraSwarm: Over 14,000 Dahua Cameras Compromised Across Ukraine and Russia 🚨 Between 17 June and 22 July 2026, a single operator compromised over 14,000 Dahua IP cameras. The scanning ...
🚨 Critical Vulnerability in NASA’s Ground Control Software A significant vulnerability has been discovered in NASA’s open-source AMMOS Instrument Toolkit (AIT)-GUI ground software. This flaw could...
Microsoft Tests Faster Windows File Explorer 🚀 Microsoft has started testing a faster File Explorer and a less cluttered and more customizable context menu in Windows 11 preview builds rolling out...
🚨 Data Breach Alert: Heights Finance Hack 🚨 A significant breach at Heights Finance has exposed personal and financial data of over 1.2 million individuals after hackers compromised a third-party ...
Be Careful What You Put in ‘Anyone with the Link’ Google Docs The next time you type something sensitive into a Google Doc—or any other online tool with a sharing feature—be careful about the perm...
Overview Now in its fourth year, the Blue Report 2026 from Picus Labs measures how enterprise prevention and detection actually perform in production, across more than 338 million attack simulatio...
CVE-2026-52854 - mediawiki/maps: Stored XSS Vulnerability CVE-2026-52854, with a HIGH CVSS 3.1 score of 8.6, addresses a stored Cross-Site Scripting (XSS) vulnerability within the mediawiki/maps e...
Why Facebook’s War on Ad Blockers Could Help Scammers Reports that uBlock Origin is stepping back from the effort to filter Facebook ads are a reminder that ad blocking is no longer just about inc...
Revealed: Cyber Spies Used Malware from GitHub to Hack EncroChat Cryptophone Network Computer Weekly reveals for the first time how French cyber spies hacked EncroChat phones, used by organized cr...
Call for Applications - Information Controls Research Program 2026 The Information Controls Research Program (ICRP) from the Open Technology Fund (OTF) supports applied research into how authorita...
UNISOC Modem Flaw Enables Remote Code Execution via Video Calls A vulnerability in UNISOC modem firmware can allow arbitrary code execution with kernel privileges from the modem context, potential...
McDonald’s Employee Data Leak 🚨 A seller claims that 1.7 million McDonald’s employee records were stolen from Azure. An 8,000-row sample appears genuine, but its age and full size remain unconfirm...
Invisible AI Prompts Trigger Court Sanctions 🚨 A litigant hid AI prompt injections in a court filing to influence a ruling. The judge caught it and banned him from electronic filing. A man suing t...
General Electric, Philips, and Shell Investigate Alleged Breaches 🚨 General Electric, Philips, and Shell are each investigating claims of data theft by the Clop ransomware gang. Clop claims to hav...
CVE-2026-75531 - Stored Cross-Site Scripting Vulnerability in Pandora CVE-2026-75531, a stored cross-site scripting (XSS) vulnerability, has been identified in Pandora. This vulnerability impacts ...
CVE-2026-69148 - MLflow Vulnerability 🚨 MLflow is an open-source AI engineering platform for agents, large language models, and machine learning models. Prior to version 3.15.0, the CreateModelVer...
C2Looper - A New Backdoor Likely Tied To Ransomware With GitHub C2 In July 2026, Zscaler ThreatLabz identified a new Rust-based malware family that we track as C2Looper, which is likely leveraged ...
Large-scale DDoS Attacks Disrupted Threema Secure Messaging Service Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing s...
GeoServer Zero-Day Vulnerability 🚨 GeoServer is currently facing an unpatched zero-day vulnerability that enables SQL injection and potentially remote code execution (RCE). Attackers are already p...