npm Malware, Fake Devs, and Deepfake Videos: These Are A Few of My Favorite DPRK Things What started as a quick look into a suspicious GitHub organization turned into a much deeper rabbit hole wit...
npm Malware, Fake Devs, and Deepfake Videos - A Few of My Favorite DPRK Things What started as what I thought was going to be a quick look into a suspicious GitHub organization turned into a much ...
New Lua-based Malware ‘LucidRook’ Observed in Targeted Attacks 🚨 Cisco Talos has uncovered a cluster of activity tracked as UAT-10362, conducting spear-phishing campaigns against Taiwanese non-gov...
Major Data Breach at Chinese Supercomputer 🚨 A hacker has allegedly stolen a massive trove of sensitive data, including highly classified defense documents and missile schematics, from a state-run...
FortiWeb 8.0.2 - Remote Code Execution Exploit Disclosed 🚨 A critical Remote Code Execution (RCE) vulnerability has been disclosed in FortiWeb appliances, identified as CVE-2025-64446. This vulner...
CVE-2026-23226: A Critical Vulnerability in ksmbd The Orca Security Research Pod has uncovered a significant vulnerability in the Linux kernel’s ksmbd SMB3 server, identified as CVE-2026-23226. Th...
GrafanaGhost Exploit: A New Threat to Data Security 🚨 A newly identified critical vulnerability dubbed GrafanaGhost has been exploited by attackers to silently extract sensitive enterprise data fr...
Frostarmada Forest Blizzard DNS Hijacking 🚨 Black Lotus Labs, the threat research team at Lumen Technologies, has been tracking a campaign named “FrostArmada” associated with the threat actor grou...
High-Severity Security Vulnerability in Docker Engine 🚨 A high-severity security vulnerability has been disclosed in Docker Engine that could permit an attacker to bypass authorization plugins (Au...
GPUBreach Exploit Overview 🚀 The GPUBreach attack technique utilizes GPU memory bit-flips to escalate privileges and potentially take full control of a system. New research reveals that attacks li...
GPUBreach Exploit Overview The GPUBreach attack technique utilizes GPU memory bit-flips to escalate privileges and potentially take full control of a system. New research indicates that attacks li...
10 Minutes with Claude: Remote Code Execution in Apache ActiveMQ (CVE-2026-34197) CVE-2026-34197 is a remote code execution vulnerability in Apache ActiveMQ Classic that has been hiding in plain s...
MCP Isn’t a Protocol Problem: An Identity Crisis Microsoft released a patch on March 10, 2026, for CVE-2026-26118, a server-side request forgery (SSRF) vulnerability in the Azure MCP Server. This ...
is-localhost-ip 2.0.0 - SSRF Vulnerability 🚨 A proof-of-concept (PoC) demonstrating an SSRF / localhost canonicalization bypass has been developed for is-localhost-ip version 2.0.0. This PoC, repo...
How Often Are Redirects Used in Phishing in 2026? Published on: April 6, 2026 Source: SANS ISC Although open redirects are not generally considered a high-impact vulnerability on their own, they ...
Hackers Attempt to Turn ComfyUI Servers Into a Cryptomining Proxy Botnet 🚨 Censys ARC has uncovered an active campaign targeting Internet-exposed ComfyUI instances. Attackers are exploiting the cu...
Desktop Window Manager Core Library 10.0.10240.0 - Privilege Escalation 🚨 A heap-based buffer overflow exists in a DWM core library code path that processes frame/composition data. This vulnerabil...
🚨 Traffic Violation Scams Alert! Scammers are sending fake “Notice of Default” traffic violation text messages impersonating state courts across the U.S. These messages pressure recipients to scan...
CBP Facility Codes Leaked via Online Flashcards 🚨 A user on Quizlet, an online learning platform, created a public flashcard set in February that appears to have exposed highly confidential inform...
Researchers Roast Cybercriminals to Stop Glamourizing Them Cybercrime crews have become almost mystical entities, with security vendors assigning them names like Wizard Spider and Velvet Tempest. ...