Cloud Atlas APT Group Modifies termsrv.dll to Enable Multiple RDP Sessions A well-known advanced persistent threat group called Cloud Atlas has been caught using a dangerous technique to hijack Wi...
🚨 Zero-Click WhatsApp Account Takeover 🚨 A zero-click attack targeting iPhones on iOS 16 has been reported, hijacking WhatsApp accounts without any linked devices, warnings, or user interaction. T...
The Alert Firehose Finally Meets Its Match 🚀 Ask a cybersecurity pro about Network Detection and Response (NDR) and you might still hear terms like “Noisy” or “Too much data.” However, teams utili...
🚨 Major Data Breach Alert! 🚨 A threat actor is advertising a massive database containing information linked to hundreds of millions of OnlyFans users, including both creators and subscribers. The ...
Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability In late 2025, Mandiant responded to a security incident involving a compromised web server running KnowledgeDeliver. Kn...
🚨 British Drivers Exposed After Mercedes Data Surfaces on Hacker Market Mercedes-Benz, the globally renowned German luxury automotive brand, may be the latest victim in a string of attacks against...
PyrsistenceSniper: Advanced Tool for Detecting Malware Techniques 🚀 PyrsistenceSniper is an advanced tool designed to detect offline persistence, enabling cybersecurity analysts to identify 117 se...
npm Enhances Security with 2FA-Gated Publishing 🚀 GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitly appr...
Italy Disrupts CINEMAGOAL Piracy App 🚨 Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platforms, including Netf...
An Example of Stack String in High Level Language This week, I’m attending the SEC670 training (Red Teaming Tools - Developing Windows Implants, Shellcode, Command and Control). From my perspectiv...
Megalodon Chums the Waters in 5.5K+ GitHub Repo Poisonings 🚨 A malware-spreading scumbag swimming through GitHub pushed malicious commits to more than 5,500 repositories on Monday as part of an au...
Overview A growing trend in modern intrusions is the compromise of internet-facing edge appliances such as firewalls and VPN gateways. Because these devices are externally exposed, lightly monitor...
Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass CVE-2026-0265 is a pre-authentication JSON Web Token (JWT) signature bypass in PAN-OS and Panorama, reachable only when Cloud Aut...
Cloud Atlas Attacks the Public Sector and Diplomatic Structures In 2025, we observed pervasive SSH tunnel activity, which has remained active into 2026, affecting many government organizations and...
Hitachi Energy GMS600 Vulnerability Advisory Hitachi Energy is aware of the vulnerability, CVE-2022-4304, in the OSS component OpenSSL, affecting the GMS600 versions 1.3.0 and 1.3.1. This vulnerab...
Canadian Man Arrested for Administering KimWolf DDoS Botnet 🚨 According to court documents, on April 10, 2026, U.S. authorities criminally charged Jacob Butler, aka “Dort,” 23, of Ottawa, Canada, ...
Warning to Myspace93 Users 🚨 Users of the Myspace93 parody web art site should be cautious! A dataset leaked after a reported breach in 2021 has revealed the plaintext usernames and passwords of o...
Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor 🚨 Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a c...
One Man, One AI, One Fake Persona - Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign A solo Russian-speaking threat actor (tracked as “bandcampro”) ran a 5-year MAGA-themed Telegram c...
Hackers Hate AI Slop Even More Than You Do “I’m disappointed that you are working to incorporate AI garbage into the site,” one annoyed person, posting anonymously, said in an online message. This...