Honeywell IQ4x BMS Controller Vulnerability Advisory 🚨 A critical vulnerability has been identified in the Honeywell IQ4x Building Management System (BMS) Controller. Successful exploitation of th...
Sednit Reloaded - Back in the Trenches 🚀 Since April 2024, Sednit’s advanced development team has reemerged with a modern toolkit centered on two paired implants, BeardShell and Covenant, each usi...
How We Hacked McKinsey’s AI Platform 🚀 McKinsey & Company built an internal AI platform called Lilli for its 43,000+ employees. Lilli is a purpose-built system: chat, document analysis, RAG ov...
DNB Podcast: JWT Cracks, South American Telecom Breaches, and the Kinetic-Cyber Nexus in Iran This week, the Dragon News Bytes team dives into a critical series of high-impact vulnerabilities and ...
APT28 Conducts Long-Term Espionage on Ukrainian Forces Using Custom Malware APT28 has utilized BEARDSHELL and COVENANT malware to spy on Ukrainian military personnel, enabling long-term surveillan...
Quiz Sites and Browser Notifications 🚨 Our support team flagged several customers who suspected their devices might be infected with malware, but Malwarebytes scans came up empty. When the custome...
🚨 Ransomware Attack on ELECQ ELECQ, the manufacturer of smart electric vehicle (EV) chargers, has issued a warning to its customers regarding a recent ransomware attack that may have compromised t...
Ericsson US Discloses Data Breach 🚨 Ericsson Inc., the U.S. subsidiary of the Swedish networking and telecommunications giant Ericsson, has revealed that attackers have stolen data belonging to an...
Improper File Access Permission Settings in Digital Arts Products 🚨 Multiple products provided by Digital Arts Inc. are configured with improper file access permission settings. This vulnerability...
Fixing Request Smuggling Vulnerabilities in Pingora OSS Deployments 🚨 In December 2025, Cloudflare received reports of HTTP/1.x request smuggling vulnerabilities in the Pingora open source framewo...
How AI Assistants are Moving the Security Goalposts AI-based assistants or agents — autonomous programs that have access to the user’s computer, files, online services, and can automate virtually ...
Critical Zero-Click Command Injection in AVideo Platform Allows Stream Hijacking 🚨 A critical vulnerability in AVideo, a widely used open-source video hosting and streaming platform, tracked as CV...
New Social Security Scam Alert 🚨 A new scam is currently targeting thousands of people across the United States, using the name of the Social Security Administration to trick unsuspecting users. T...
An AI Broke Out of Its System to Mine Crypto 🚀 An AI broke out of its system and secretly started using its own training GPUs to mine crypto. This is a real incident report from Alibaba’s AI resea...
Russian APT Targets Ukraine with BadPaw and MeowMeow Malware 🚨 Researchers uncovered a Russian campaign targeting Ukrainian entities with new malware families BadPaw and MeowMeow delivered through...
Operation Leak: A Major Crackdown on Cybercrime 🚨 The Federal Bureau of Investigation (FBI) has successfully seized the LeakBase cybercrime forum in an international operation led by Europol. This...
Russian APT Targets Ukraine with BadPaw and MeowMeow Malware 🚨 Researchers uncovered a Russian campaign targeting Ukrainian entities with new malware families BadPaw and MeowMeow delivered through...
Operation Leak: A Major Crackdown on Cybercrime 🚨 The Federal Bureau of Investigation (FBI) has successfully seized the LeakBase cybercrime forum in an international operation led by Europol. This...
Manufacturing Supply Chains Face Cascading Cyber Risk 🚨 New data from Black Kite’s seventh annual Third-Party Breach Report shows that third-party cyber incidents reached unprecedented scale in 20...
Delta Electronics CNCSoft-G2 Vulnerability Advisory 🚨 Date Published: March 5, 2026 Delta Electronics CNCSoft-G2 devices prior to version V2.1.0.39 are vulnerable to an Out-of-Bounds Write while ...