Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable A malvertising operation dubbed SourTrade is making victims’ browsers build the final Windows executable themselve...
CVE-2026-10681 - SMP Race in Thread Index Allocation CVE-2026-10681 details an SMP race in thread_idx_alloc() that allows concurrent k_object_alloc(K_OBJ_THREAD) callers to share a kernel-object p...
Major Data Breach Alert! 🚨 Click To Pray, a prayer app endorsed by the Pope, has committed a cardinal sin by leaking the personal information of over 700,000 users! 😱 This alarming revelation come...
Google Introduces Selfie Video Verification for Account Recovery 🚀 Google has started rolling out a new way to recover access to your account if you’ve lost your phone or forgotten your password: ...
Warning: Phishing Alert! 🚨 Call of Duty Mobile players should be vigilant against a phishing campaign disguised as a free Call of Duty Points giveaway. Victims are prompted to log in with their em...
Bing Images Vulnerabilities 🚨 A crafted SVG submitted to Bing’s image search ran commands as NT AUTHORITY\SYSTEM on Microsoft’s production image-processing workers, and as root on the Linux machin...
Thailand’s Ministry of Finance Targeted with Hermes AI 🚨 Hunt.io has uncovered a cyber-espionage attack on Thailand’s Finance Ministry using the Hermes AI agent and Hades malware for reconnaissanc...
Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials A widespread DNS poisoning campaign is targeting hotels, conference venues, and the hospitality sector with credential harvesti...
WhatsApp Web Chats Exposed by Adobe’s Acrobat Extension Flaw 🚨 A recently disclosed vulnerability, known as HermeticReader, has put WhatsApp Web chats at risk due to a flaw in the Adobe Acrobat PD...
New Dolphin X Malware Uses AI to Rank High-Value Targets 🚀 A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercrimina...
Data Breach Exposes Client Information at Origin Energy 🚨 Australian energy provider Origin Energy has confirmed a data breach by an unknown threat actor that exposed customers’ personally identif...
Overview 🚨 Proofpoint has uncovered that the Russia-aligned threat actor TA488 (also known as Void Blizzard or Laundry Bear) has been exploiting a previously unknown vulnerability in Zimbra mailse...
TA458 Roundpress Exploits: A New Threat in Webmail Security 🚨 The Russia-aligned threat actor TA458, known for its involvement in Operation RoundPress, continues to target webmail services using i...
New Dolphin X Malware Uses AI to Rank High-Value Targets 🚀 A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercrimina...
Major Security Flaw in KARR Security System 🚗🔒 A recent investigation has revealed a significant security flaw in the KARR Security System, a Bluetooth-enabled aftermarket alarm installed in milli...
MZ Automation libIEC61850 Vulnerabilities Exposed 🚨 Critical Alert! Successful exploitation of these vulnerabilities could allow an unauthenticated network-adjacent attacker to crash critical IEC ...
Upbound Hack Results in $13 Million Fraudulent Acima Leases 🚨 The Upbound Group, a fintech company, has revealed that a recent cyberattack led to the creation of $13 million in fraudulent Acima le...
Swiss Rail Giant Stadler Rejects $12.3M Ransom Demand After Cyberattack 🚆💰 Swiss rail vehicle manufacturer Stadler Rail has made headlines after the Everest ransomware gang demanded approximately ...