ChatGPT Under Scrutiny as Florida Investigates Campus Shooting On April 9, Florida Attorney General James Uthmeier announced that his office is investigating OpenAI over the role ChatGPT might hav...
Why Your Deprecated Endpoints Are an Attacker’s Best Friend: The Rise of Ghost APIs Ghost APIs are deprecated endpoints that remain live and accessible; policy says dead, reality says otherwise. U...
Scans for EncystPHP Webshell 🚨 Today, I noticed some scans for what appears to be the “EncystPHP” web shell. Some attackers are paying attention and are deploying webshells with more difficult-to-...
🚨 OpenSSF Warns About New Malware Campaign on Slack The Open Source Security Foundation (OpenSSF) has issued a warning about a new phishing scam targeting software developers via the Slack chat ap...
Mirax Android Trojan Turns Devices Into Residential Proxy Nodes 🚨 A newly identified Android banking trojan, known as Mirax, is spreading across Europe and combines remote access features with res...
Mirax Android Trojan Turns Devices Into Residential Proxy Nodes A newly identified Android banking trojan, known as Mirax, is spreading across Europe and combines remote access features with resid...
FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts The U.S. Federal Bureau of Investigation (FBI), in partnership with the Indonesian National Police, has dismant...
Urgent Meeting on AI Security 🚨 Bloomberg reports that US Treasury Secretary Scott Bessent and Federal Reserve Chair Jerome Powell called Wall Street leaders and banking executives to an urgent me...
Slithering Through the Noise - Deep Dive into the VIPERTUNNEL Python Backdoor During a recent DragonForce ransomware engagement, we identified several artifacts indicative of anomalous behavior in...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-34621 Adobe - Acrobat Reader...
ShinyHunters Claims Rockstar Games Snowflake Breach 🚨 Rockstar Games is back in the news because the ShinyHunters hacking group claims it accessed the company’s Snowflake environment and may be ho...
Google Launches Gmail End-to-End Encryption for Android and iOS 🚀 Google has officially rolled out End-to-End Encryption (E2EE) for the Gmail application on Android and iOS devices. This major upd...
The Mythos Inflection Point Having spent years at Qualys working on vulnerability risk and remediation management, I have watched the disclosure and remediation cycles from every angle. I am obser...
The Mythos Inflection Point 🚀 Having spent years at Qualys working on vulnerability risk and remediation management, I have observed the disclosure and remediation cycles from every angle. The gap...
Overview A fleet of 21 IP addresses is now generating nearly half of all the RDP scanning traffic on the public internet. On April 7, 2026, those IPs produced 1,856,167 of the 2,753,274 RDP Crawle...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2024-1490 WAGO - CC100 (0751-9x01...
The Threat Hunter’s Gambit Cisco Talos has observed threat actors weaponizing legitimate SaaS notification pipelines, such as those in GitHub and Jira, to deliver phishing and spam emails. By leve...
New Extortion Crew Targets Corporations 🚨 A new extortion crew has targeted several dozen high-value corporations through phishing and helpdesk social-engineering, according to Google. The Google ...
React Server 19.2.0 - Remote Code Execution 🚨 A Remote Code Execution (RCE) vulnerability, tracked as CVE-2025-55182, affects React Server versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0. This exploit...
Google Chrome Adds Infostealer Protection Against Session Cookie Theft 🚀 Google has rolled out Device Bound Session Credentials (DBSC) protection in Chrome 146 for Windows, designed to block info-...