Enriched URL Reports - VirusTotal URL Scanning 2.0 🚀 Traditional URL analysis has been redefined! The launch of URL Scanning 2.0 significantly expands VirusTotal’s URL analysis capabilities by int...
CVE-2026-73249 - calibre Content Server Vulnerability A critical vulnerability, identified as CVE-2026-73249, has been discovered in the calibre Content Server. This issue affects versions prior t...
Microsoft Edge Extension Changes 🚀 Microsoft is beginning the retirement of Manifest V2 (MV2) extensions in Edge this month, with consumer completion targeted for the end of 2026 and managed-enter...
Abyssos: Technical Analysis of a New Modular RAT In late June 2026, Zscaler ThreatLabz identified a new malware family that we track as Abyssos. Abyssos is a new modular remote administration tool...
Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup Researchers created a fake DeFi startup and hired suspected Famous Chollima operatives, providing a rare ins...
CVE-2026-11812 - UpdateHub Vulnerability 🚨 The UpdateHub management subsystem has been identified with a critical vulnerability that can lead to a denial of service (DoS) due to a race condition o...
U.S. Defense Manufacturer IEH Hit by Phishing Attack 🚨 IEH Corporation, a prominent U.S. defense and aerospace manufacturer based in Brooklyn, New York, has fallen victim to a phishing attack that...
CVE-2026-12372 - Server-Side Request Forgery (SSRF) in nltk/nltk A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.path...
Hackers Breach TrueConf to Trojanize Client Installers with Backdoors 🚨 The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to repla...
Atlassian Rovo Vulnerability 🚨 Summary: Attacker-controlled instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an ou...
Atlassian Rovo Vulnerability 🚨 Summary: Attacker-controlled instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an ou...
When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers Check Point Research has conducted an in-depth analysis of Cloudflare Code Mode, a technique that transforms how AI agents util...
Linux Shell Forensic: Let’s Dive Into Atuin! Source: SANS ISC Date Published: August 7, 2026 UNIX systems (including Linux) are well-known for recording a lot of activities in various locations. ...
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX VMware ESX systems are a recurring target in ransomware campaigns. Threat groups including SCATTERED SPIDER, BlackBasta, Royal ...
Ransomware Moves up the Org Chart: Managers Are Prime Targets 🚀 New Zscaler ThreatLabz research examines the early stages of a real-world ransomware attack. It reveals little about the employees c...
Black Hat - NatJack Exploits Test NAT Security Assumptions 🚀 At Black Hat USA 2026, researcher Malcolm Stagg, an independent researcher and member of the Synack Red Team, disclosed the NatJack att...
Apple WebKit Vulnerabilities Expose Your IP Address Despite Private Relay 🚨 Three WebKit mechanisms have been discovered to bypass Apple’s iCloud Private Relay! This means that even with Private R...
🚨 Amazon and Apple Impersonated in $149.99 Unauthorized Charge Scam If you’ve spent any time browsing lately, you may have run into a full-screen popup warning you that your Apple ID or Amazon acc...
Exposed SISVISA Database Leaks 102,000 Brazilian Health Surveillance Records 🚨 An exposed SISVISA database has leaked 102,215 Brazilian health records, revealing sensitive information such as IDs,...
CVE-2026-7406 - BMP File Parsing Untrusted Pointer Dereference in Autodesk Products A maliciously crafted BMP file, when parsed through certain Autodesk products, can force an Untrusted Pointer De...