Security Concerns Flagged Within Japan Firm Gmo Before Breach Ceo 🚨 GMO Internet Group Inc CEO Masatoshi Kumagai admitted on Sunday night that internal engineers had flagged security issues before...
Researcher Hacks Into “Steal My Bitcoin” Server in PHP Security Test A researcher breached the Steal My Bitcoin server in less than 24 hours! 🚀 James Pavur paid the $2,000 bitcoin prize after conf...
PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects 🚀 Researchers have demonstrated PhantomTac, an innovative attack that uses hidden magnetic tags to deceive robotic touch sensors, ...
Hisense Faces $5 Million Ransom Demand Over Alleged 19GB Data Theft 🚨 Breaking News: Hisense, a major Chinese electronics and home appliance manufacturer known for its TVs, is facing a significant...
CVE-2026-2270 - StatefulSet and ControllerRevision Vulnerability A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on Statefu...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2014-125133 imithemes - NativeChu...
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, acc...
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software A memory-corruption flaw in Google’s Brotli decoder affects many programs that unpack Brotli-compress...
MythicRatatoskr: An Yggdrasil-enabled Backdoor Deployed in a UAC-0099-Sandworm Collaboration A recent report details activity involving UAC‑0099, which gained initial access on July 16th, 2025. Th...
Crime Stoppers Chapter Freezes Tips After Breach Breaks Anonymity Promise A breach exposed personal information in supposedly anonymous crime reports. Now, one Crime Stoppers chapter has stopped a...
Pleasanter LDAP Authentication Bypass Vulnerability 🚨 LDAP authentication of Pleasanter contains an authentication bypass vulnerability. Pleasanter, provided by Implem Inc., fails to properly veri...
Knicks Employees Targeted in Phishing Test with Fake Championship Rings The New York Knicks organization sent employees a phishing email promising free championship rings in a test of its staff’s ...
Threat Brief: Critical Vulnerabilities in PHP 🚨 Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. Both are remote code execution (RCE) vulnerabilities r...
Abandoned Popcorn Time App Exposed Millions of Devices to RCE Attacks 🚨 Researchers have remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTor...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-112949 vitest-dev - vitest@v...
Siemens RUGGEDCOM APE1808 Devices Vulnerabilities Nozomi Networks has published critical information regarding vulnerabilities in Nozomi Guardian/CMC affecting various Siemens Industrial products....
Woman Faces Years in Prison Over a Cash App Account She Says She Never Opened A Cash App account opened in her name has left Amanda Smith facing criminal charges and potentially up to six years in...
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More 🚨 Bluesky Phishing Attack: Bluesky has acknowledged that it is aware of a phishing attack that...
Prince of Persia: A Threat Group Hiding in Plain Sight For nearly two decades, the Iranian nation-state threat actor Prince of Persia has been an active cyber threat, primarily targeting Iranian d...
New BlackX UEFI Bootkit Exploiting Baton Drop In early 2026, we discovered a malware sample similar to BlackLotus that was used in an APT campaign in Central Asia. We dubbed this UEFI bootkit Blac...