Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware 🚨 In April, we observed an intrusion linked to an Atos-reported campaign where an EtherRAT was installed via a malicious MSI mas...
Critical Security Vulnerability in Ollama 🚨 Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthentica...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-41496 MervinPraison - Praiso...
Let’s Encrypt Halts Certificate Issuance 🚫 Let’s Encrypt temporarily suspended all certificate issuance on May 8, 2026, after engineers identified a critical issue involving a cross-signed certifi...
NVIDIA Confirms Data Breach 🚨 NVIDIA has confirmed in a statement for BleepingComputer that GeForce NOW user information has been exposed in a data breach. The gaming and hardware giant clarified ...
🚨 Fake Call History Apps Exposed! 🚨 Cybersecurity researchers have uncovered fraudulent apps on the official Google Play Store that falsely claimed to provide access to call histories for any phon...
Active Attack: Dirty Frag Linux Vulnerability Expands Post-Compromise Risk 🚨 A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unpri...
Unpacking Russian-Iranian Private-Sector Cyber Connections Source: Margin Research Published on: May 7, 2026 🚨 Key Highlights: Ukraine claims that Russia is providing Iran with cyber support. ...
Trellix Discloses Data Breach 🚨 Cybersecurity firm Trellix has disclosed a data breach after attackers gained access to a portion of its source code repository. Trellix, formed from the merger of ...
OceanLotus Distributing ZiChatBot Malware via PyPI Packages 🚨 Through our daily threat hunting, we noticed that, beginning in July 2025, a series of malicious wheel packages were uploaded to PyPI ...
LuaJIT 2.1.1774638290 - Arbitrary Code Execution 🚨 An exploit titled “LuaJIT 2.1.1774638290 - Arbitrary Code Execution” was released on March 29, 2026 by author TaurusOmar. This vulnerability targ...
Critical Vulnerability in MAXHUB Pivot Client Application 🚨 A critical vulnerability, CVE-2026-6411, has been identified in the MAXHUB Pivot client application versions prior to v1.36.2. This vuln...
Bludit CMS 3.18.4 - RCE Vulnerability 🚨 A Remote Code Execution (RCE) vulnerability has been identified as CVE-2026-25099 in Bludit CMS versions prior to 3.18.4. This exploit, dated 2026-03-28, wa...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2017-2404 n/a - n/a An issu...
Major Security Vulnerability in Google’s Gemini CLI 🚨 A significant security vulnerability recently threatened Google’s official Gemini-cli repository and its associated GitHub Actions, risking a ...
Dnssec Failure Causes German Internet Blackout 🚨 Millions of German websites went dark, and apps stopped working on Tuesday night as Germany’s top-level domain (TLD) .de became unreachable. For us...
Attackers Adopt JavaScript Runtime Bun to Spread NWHStealer 🚨 In our previous research, we analyzed a Windows infostealer we track as NWHStealer. The attackers behind this stealer are continuously...
Sailor Framework - Chinese Backed Phishing Services Overview: 🚨 The “Sailor Framework” represents a sophisticated phishing service backed by Chinese actors, as reported by the urlscan Threat Rese...
Hacktivists’ DDoS Onslaught Leaves Ubuntu Services Limping Days Later Canonical’s web infrastructure buckled under a massive DDoS barrage last week. The attack, claimed by pro-Iranian hacktivists,...
Google’s Android Apps Get Public Verification to Stop Supply Chain Attacks 🚀 Google has announced expanded Binary Transparency for Android as a way to safeguard the ecosystem from supply chain att...