Apple Patches High-Severity Eavesdropping Vulnerability in Beats Studio Buds Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited...
Popa Botnet Linked to Publicly-Traded Israeli Firm 🚨 For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked...
Operation Endgame Disrupts SocGholish Malware Infrastructure 🚨 Date Published: June 18, 2026 Source: Hackread Operation Endgame has expanded its reach by dismantling the network infrastructure of...
I Could’ve Rickrolled the Entire FIFA World Cup! 🎉 When you register on agents.fifa.org, FIFA adds your account to their Microsoft Entra tenant (formerly Azure AD). This tenant powers all of FIFA’...
AzeoTech DAQFactory Vulnerability Advisory 🚨 CISA has published an advisory regarding a critical vulnerability in AzeoTech DAQFactory. Successful exploitation of this vulnerability could allow an ...
Roblox Developers Face Malware Attacks 🚨 Developers behind some of Roblox’s millions of games are facing alarming malware attacks that result in the loss of their entire games. According to a repo...
Overview A French-speaking attacker infiltrated a small automotive business in France, deploying a keylogger and stealing sensitive banking and email credentials. Before his command-and-control (C...
FortiBleed Leak Exposes Fortinet VPN Credentials for 73,000 Devices 🚨 A newly discovered data leak dubbed “FortiBleed” has exposed what appears to be a collection of Fortinet and FortiGate VPN cre...
The Red Agent POV: How it Reasoned its Way to SSRF The Red Agent found a critical multi-step attack chain that allowed SSRF-to-Local-File-Read on GCP Cloud Run. The target was a GCP Cloud Run serv...
Synthetic APTs: The Collapse of TTP Cyber Threat Intelligence (CTI) attribution relies on identifying the Tactics, Techniques, and Procedures (TTPs) that distinguish one threat actor from another....
CVE-2026-48764 - TypeBot SSRF Vulnerability Exploited via DNS Rebinding CVE-2026-48764 impacts TypeBot, a chatbot builder tool. In versions prior to 3.17.2, a significant SSRF vulnerability exists...
Rockwell Automation RSLinx Vulnerability Advisory 🚨 Attention all users of RSLinx Classic! 🚨 A critical vulnerability has been identified in Rockwell Automation’s RSLinx Classic software that cou...
Overview The Google Threat Intelligence Group (GTIG) has identified a sophisticated campaign attributed to UNC6508, a People’s Republic of China (PRC)-nexus threat actor, targeting institutions in...
How Orca Traced an nginx Flaw to 1.45 Million Tengine Servers While the rest of the industry was busy patching nginx, Orca’s Threat Research Team was asking a different question, and the answer le...
Hidden in Teams: DragonForce Attackers Weaponize Microsoft Teams Relays 🚨 Backdoor.Turn, a Go-based RAT, is the first known malware to abuse Microsoft Teams’ TURN relay servers to mask command-and...
FishMonger’s Arsenal Upgraded: SprySOCKS for Windows 🚀 ESET researchers have discovered SprySOCKS for Windows, a backdoor weaponizing a kernel driver for advanced stealthiness. This malware is lin...
Dissecting Sapphire Sleet’s macOS Intrusion from Lure to Compromise Microsoft has identified an additional Sapphire Sleet macOS intrusion that follows the same core attack chain previously documen...
Ababil of Minab Exposed 🚨 Ababil of Minab is a pro-Iranian threat actor that surfaced in late March 2026, claiming destructive intrusions against targets in the United States, Israel, Saudi Arabia...
CVE-2026-44587 - CarrierWave Bypass Vulnerability CarrierWave is a framework for uploading files from Ruby applications. In versions prior to 2.2.7 and 3.1.3, the content_type_denylist check fails...
Users Cry Foul After AMD Stripped Memory Crypto from Its Consumer CPUs A decade ago, AMD introduced a protection mechanism to its high-end CPUs to safeguard against cold boot attacks and other phy...