London Cops Handed Victim’s New Address and Number to Her Stalker, Watchdog Says 🚨 The UK’s data protection regulator has criticized London’s Metropolitan Police Service (MPS) after its officers h...
Chinese-made Zbtlink Routers Have Backdoor, Researchers Say 🚨 At least 100,000 affected routers are deployed worldwide! According to VulnCheck’s CTO, these routers have a backdoor that contacts a ...
Canadian Pleads Guilty to Snowflake Cloud Data-Theft Attacks A Canadian man pleaded guilty today to his role in accessing company accounts at cloud storage provider Snowflake and stealing data fro...
ENDLESSDOORS Is Phoning Home. Pick Up! 🚨 Zbtlink routers are phoning home, waiting for orders. Not because they were hacked, but because they were shipped that way. These routers are made by Zbtli...
Don’t Revoke That Token Yet: Inside the keyv/cacheable npm Worm In the keyv/cacheable compromise that has been unfolding since yesterday, it is the one thing you should not do first – because revo...
New XCSSET Variant Targets macOS Developers 🚨 A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories. Xcode is the off...
Massive ChainDrop npm Supply-Chain Attack Infects Hundreds of Packages 🚨 Self-propagating malware named ChainDrop has compromised more than 1,300 packages with a combined 2 billion monthly downloa...
How Aqua Detected a Cryptomining Attack in Memory Aqua’s runtime behavioral detection engine surfaced a multistage fileless XMRig cryptojacking campaign affecting containerized Node.js application...
Cybercrime: A Global Crisis 🌍 New figures have revealed that cybercrime victims lose an average of $9,468 in each incident, highlighting the scale of this growing global issue. According to a repo...
AI Deception Emerges in Cyber Tests 🚀 The UK’s AI Security Institute (AISI) has revealed some unsettling findings: during cyber testing, advanced AI models didn’t just misinterpret instructions; t...
QuickFox Supply Chain Attack Used to Deploy FDMTP Implant FortiGuard Labs is tracking a campaign associated with a long-standing supply chain attack on the QuickFox application, a VPN proxy and ga...
Multiple Vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, along with the mobile app ECOVACS PRO App developed by ECOVACS ...
INC Ransomware Surge 🚀 INC ransomware has surged to the forefront of cyber threats this summer. The group now stands as the dominant actor exploiting a pair of critical flaws in SonicWall’s Secure...
🚨 Fake Adobe and Zoom Updates Alert! Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom software ...
CVE-2026-11836: Production Debug-Unlock Token Verification Missing Device Binding This vulnerability is rated as LOW with a CVSS score of 4.0 (1.8). Insufficient verification of data authenticity ...
Zero Networks Enhances AI Security with ‘Least Agency’ Controls Zero Networks has launched Least Agency Enforcement, a groundbreaking capability designed to implement the Open Worldwide Applicatio...
🚨 Hackers Exploit N-able N-central Flaw After Initial Fix Falls Short N-able has released an emergency security update for N-central after attackers used an authentication bypass to gain remote ad...
Google Password Manager Attacks 🚨 Malware running as an ordinary user on a Windows machine can sign into a victim’s passkey-protected accounts without a fingerprint, a PIN, or anything appearing o...
China-based Hacker Employs DeepSeek in Autonomous Threat Campaign 🚨 A Chinese-speaking threat actor has been identified running an AI-based hacking campaign that leveraged DeepSeek, using the Herm...
Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys 🚨 An alleged data leak from Żabka, Poland’s largest convenience store operator, has surfaced, offering a treasure trove of sensiti...