Hackers Attempt to Turn ComfyUI Servers Into a Cryptomining Proxy Botnet 🚨 Censys ARC has uncovered an active campaign targeting Internet-exposed ComfyUI instances. Attackers are exploiting the cu...
Desktop Window Manager Core Library 10.0.10240.0 - Privilege Escalation 🚨 A heap-based buffer overflow exists in a DWM core library code path that processes frame/composition data. This vulnerabil...
🚨 Traffic Violation Scams Alert! Scammers are sending fake “Notice of Default” traffic violation text messages impersonating state courts across the U.S. These messages pressure recipients to scan...
CBP Facility Codes Leaked via Online Flashcards 🚨 A user on Quizlet, an online learning platform, created a public flashcard set in February that appears to have exposed highly confidential inform...
Researchers Roast Cybercriminals to Stop Glamourizing Them Cybercrime crews have become almost mystical entities, with security vendors assigning them names like Wizard Spider and Velvet Tempest. ...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-35616 Fortinet - FortiClient...
Qilin EDR Killer Infection Chain This blog post provides an in-depth technical analysis of the malicious dynamic-link library (DLL) “msimg32.dll”, which Cisco Talos observed being deployed in Qili...
New Akira Lookalike Ransomware Campaign 🚨 A new and dangerous ransomware campaign has surfaced across South America, targeting Windows users with a carefully crafted strain that closely imitates t...
Researchers Observe Sub-One-Hour Ransomware Attacks 🚨 Security researchers have warned of another step change in the velocity of ransomware, after spotting the Akira group complete all stages of a...
New Rowhammer Attacks Give Complete Control of Machines Running Nvidia GPUs 🚀 The cost of high-performance GPUs, typically $8,000 or more, means they are frequently shared among dozens of users in...
Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime 🚨 Fraud operations have expanded beyond traditional hacking techniques to include methods that exploit legitimate services a...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2018-25228 Netsetman - NetSetMan ...
UK Manufacturers Under Cyber Fire 🚨 Nearly 80 percent of British manufacturers say they’ve been hit by a cyber incident in the past year, as new research suggests disruption on the factory floor i...
Casbaneiro Phishing Campaign 🚨 A multi-pronged phishing campaign is targeting Spanish-speaking users in organizations across Latin America and Europe to deliver Windows banking trojans like Casban...
Malicious Script That Gets Rid of ADS 🚨 Today, most malware are referred to as “fileless” because they aim to minimize their footprint on the infected computer’s filesystem. However, they still ne...
PX4 Autopilot Vulnerability Exposed 🚨 A critical vulnerability has been identified in the PX4 Autopilot system that could allow attackers to execute arbitrary shell commands without cryptographic ...
GIGABYTE Control Center Vulnerability 🚨 The GIGABYTE Control Center is vulnerable to an arbitrary file-write flaw that could allow a remote, unauthenticated attacker to access files on vulnerable ...
Application Control Bypass for Data Exfiltration In case of a cyber incident, most organizations fear more data loss (via exfiltration) than regular data encryption because they have a good backup...
Anritsu Remote Spectrum Monitor Vulnerability Advisory 🚨 Attention: A critical vulnerability has been identified in the Anritsu Remote Spectrum Monitor that could allow attackers with network acce...
New RoadK1ll WebSocket Implant Used to Pivot on Breached Networks A newly identified malicious implant named RoadK1ll is enabling threat actors to quietly move from a compromised host to other sys...