The Evolution of the Geotag: How AI is Bridging the Gap in Location-Based OSINT For years, location-based open-source intelligence (OSINT) has relied heavily on a steady stream of user-generated g...
New Exim BDAT Vulnerability 🚨 Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code executio...
New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots 🚨 Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network ...
Critical Vulnerability in ABB AC500 V3 PLCs 🚨 ABB has identified a critical vulnerability, tracked as CVE-2025-15467, affecting versions of its AC500 V3 programmable logic controllers (PLCs). An u...
ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities 🚨 ABB has identified multiple vulnerabilities in the WebPro SNMP card PowerValue for certain product versions. These vulnerabilities could ...
Yarbo Responds to Robot Flaws That Could Mow Down Their Owners 🚜 A researcher found that Yarbo yard robots came with a host of vulnerabilities which, among others, allowed an attacker to harvest W...
New GhostLock Tool Abuses Windows API to Block File Access 🚀 A security researcher has released a proof-of-concept tool named GhostLock that demonstrates how a legitimate Windows file API can be a...
Darcula aka. Magic Cat - Blog The Darcula phishing framework continues to evolve, transitioning from early API-driven roots to a sophisticated “Phishing-as-a-Service” model using encrypted WebSock...
Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware 🚨 In April, we observed an intrusion linked to an Atos-reported campaign where an EtherRAT was installed via a malicious MSI mas...
Critical Security Vulnerability in Ollama 🚨 Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthentica...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-41496 MervinPraison - Praiso...
Let’s Encrypt Halts Certificate Issuance 🚫 Let’s Encrypt temporarily suspended all certificate issuance on May 8, 2026, after engineers identified a critical issue involving a cross-signed certifi...
NVIDIA Confirms Data Breach 🚨 NVIDIA has confirmed in a statement for BleepingComputer that GeForce NOW user information has been exposed in a data breach. The gaming and hardware giant clarified ...
🚨 Fake Call History Apps Exposed! 🚨 Cybersecurity researchers have uncovered fraudulent apps on the official Google Play Store that falsely claimed to provide access to call histories for any phon...
Active Attack: Dirty Frag Linux Vulnerability Expands Post-Compromise Risk 🚨 A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unpri...
Unpacking Russian-Iranian Private-Sector Cyber Connections Source: Margin Research Published on: May 7, 2026 🚨 Key Highlights: Ukraine claims that Russia is providing Iran with cyber support. ...
Trellix Discloses Data Breach 🚨 Cybersecurity firm Trellix has disclosed a data breach after attackers gained access to a portion of its source code repository. Trellix, formed from the merger of ...
OceanLotus Distributing ZiChatBot Malware via PyPI Packages 🚨 Through our daily threat hunting, we noticed that, beginning in July 2025, a series of malicious wheel packages were uploaded to PyPI ...
LuaJIT 2.1.1774638290 - Arbitrary Code Execution 🚨 An exploit titled “LuaJIT 2.1.1774638290 - Arbitrary Code Execution” was released on March 29, 2026 by author TaurusOmar. This vulnerability targ...
Critical Vulnerability in MAXHUB Pivot Client Application 🚨 A critical vulnerability, CVE-2026-6411, has been identified in the MAXHUB Pivot client application versions prior to v1.36.2. This vuln...