Scans for EncystPHP Webshell
Scans for EncystPHP Webshell 🚨 Today, I noticed some scans for what appears to be the “EncystPHP” web shell. Some attackers are paying attention and are deploying webshells with more difficult-to-...
ictsec.pl
OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures
🚨 OpenSSF Warns About New Malware Campaign on Slack The Open Source Security Foundation (OpenSSF) has issued a warning about a new phishing scam targeting software developers via the Slack chat ap...
Mirax Android Trojan Turns Devices Into Residential Proxy Nodes
Mirax Android Trojan Turns Devices Into Residential Proxy Nodes 🚨 A newly identified Android banking trojan, known as Mirax, is spreading across Europe and combines remote access features with res...
Mirax Android Trojan Turns Devices Into Residential Proxy Nodes
Mirax Android Trojan Turns Devices Into Residential Proxy Nodes A newly identified Android banking trojan, known as Mirax, is spreading across Europe and combines remote access features with resid...
FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts
FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts The U.S. Federal Bureau of Investigation (FBI), in partnership with the Indonesian National Police, has dismant...
Treasury Secretary and Fed Chair Summon Banking Executives Over AI Security Concerns
Urgent Meeting on AI Security 🚨 Bloomberg reports that US Treasury Secretary Scott Bessent and Federal Reserve Chair Jerome Powell called Wall Street leaders and banking executives to an urgent me...
Slithering Through the Noise - Deep Dive into the VIPERTUNNEL Python Backdoor
Slithering Through the Noise - Deep Dive into the VIPERTUNNEL Python Backdoor During a recent DragonForce ransomware engagement, we identified several artifacts indicative of anomalous behavior in...
2026-04-12 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-34621 Adobe - Acrobat Reader...
2026-04-12 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-34621 Adobe - Acrobat Reader...
ShinyHunters Claims Rockstar Games Snowflake Breach via Anodot
ShinyHunters Claims Rockstar Games Snowflake Breach 🚨 Rockstar Games is back in the news because the ShinyHunters hacking group claims it accessed the company’s Snowflake environment and may be ho...
Google Launches Gmail End-to-End Encryption for Android and iOS
Google Launches Gmail End-to-End Encryption for Android and iOS 🚀 Google has officially rolled out End-to-End Encryption (E2EE) for the Gmail application on Android and iOS devices. This major upd...
The Mythos Inflection Point - Dealing With the Upcoming Vulnerability Disclosure Avalanche
The Mythos Inflection Point Having spent years at Qualys working on vulnerability risk and remediation management, I have watched the disclosure and remediation cycles from every angle. I am obser...
The Mythos Inflection Point - Dealing With the Upcoming Vulnerability Disclosure Avalanche and Compressed Exploitation Window
The Mythos Inflection Point 🚀 Having spent years at Qualys working on vulnerability risk and remediation management, I have observed the disclosure and remediation cycles from every angle. The gap...
Just 21 IP Addresses Are Now Behind Nearly Half of All RDP Scanning on the Internet
Overview A fleet of 21 IP addresses is now generating nearly half of all the RDP scanning traffic on the public internet. On April 7, 2026, those IPs produced 1,856,167 of the 2,753,274 RDP Crawle...
2026-04-10 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2024-1490 WAGO - CC100 (0751-9x01...
2026-04-10 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2024-1490 WAGO - CC100 (0751-9x01...
The Threat Hunter's Gambit
The Threat Hunter’s Gambit Cisco Talos has observed threat actors weaponizing legitimate SaaS notification pipelines, such as those in GitHub and Jira, to deliver phishing and spam emails. By leve...
Several Dozen' High-Value Corporations Targeted by New Extortion Crew
New Extortion Crew Targets Corporations 🚨 A new extortion crew has targeted several dozen high-value corporations through phishing and helpdesk social-engineering, according to Google. The Google ...
React Server 19.2.0 - Remote Code Execution
React Server 19.2.0 - Remote Code Execution 🚨 A Remote Code Execution (RCE) vulnerability, tracked as CVE-2025-55182, affects React Server versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0. This exploit...
Google Chrome Adds Infostealer Protection Against Session Cookie Theft
Google Chrome Adds Infostealer Protection Against Session Cookie Theft 🚀 Google has rolled out Device Bound Session Credentials (DBSC) protection in Chrome 146 for Windows, designed to block info-...