Escalation in the Middle East 🚀 On February 28, the United States and Israel launched coordinated strikes across Iran under Operation Epic Fury. The opening phase focused on decapitating senior Ir...
Dust Specter APT Targets Government Officials in Iraq 🚨 In January 2026, Zscaler ThreatLabz observed activity by a suspected Iran-nexus threat actor targeting government officials in Iraq. ThreatL...
Malicious RedAlert - Rocket Alerts Application 🚨 Overview: On October 13, 2023, Cloudflare’s Cloudforce One Threat Operations Team became aware of a website hosting a Google Android Application (A...
Escalation in the Middle East - Tracking “Operation Epic Fury” On February 28, the United States and Israel launched coordinated strikes across Iran under Operation Epic Fury. The opening phase fo...
Dust Specter APT Targets Government Officials in Iraq 🚨 In January 2026, Zscaler ThreatLabz observed activity by a suspected Iran-nexus threat actor targeting government officials in Iraq. ThreatL...
Pakistan’s Top News Channels Hacked and Hijacked With Anti-Military Messages 🚨 Several of Pakistan’s most-watched news channels, including Geo News, ARY News, and Samaa TV, faced a serious securit...
Exorcising Demons - Fake Tech Support Delivers Havoc Command & Control Fake tech support scams are nothing new, but the payloads they deliver are getting a serious upgrade. What once ended wit...
Pentagon Designates Anthropic Supply Chain Risk Over AI Military Dispute On February 28, 2026, Anthropic responded to U.S. Secretary of Defense Pete Hegseth’s directive to the Pentagon, which desi...
Google Quantum-Proofs HTTPS 🚀 Google on Friday unveiled its plan for its Chrome browser to secure HTTPS certificates against quantum computer attacks without breaking the Internet. The quantum-res...
QuickLens Chrome Extension Steals Crypto and Shows ClickFix Attack 🚨 A Chrome extension named “QuickLens - Search Screen with Google Lens” has been removed from the Chrome Web Store after it was c...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2019-25489 Doditsolutions - Homey...
JPCERT/CC - JSAC2026 Day 2 Highlights 🚀 The second installment of JSAC2026 reports introduces presentations delivered during Day 2. Minoru Kobayashi presented an approach for inferring file operat...
Apt37 Enhances Its Toolkit for Air Gapped Networks 🚀 In December 2025, Zscaler ThreatLabz uncovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), a DPRK-ba...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2019-25450 Dolibarr - Dolibarr ER...
UFP Technologies Discloses Data Breach After Cybersecurity Incident 🚨 UFP Technologies, a prominent American manufacturer of critical medical devices, has recently confirmed a significant cybersec...
🚨 Five Eyes Urgent Warning: Patch Your Cisco SD-WAN to Prevent Root Takeover! The Five Eyes intelligence alliance is urgently warning defenders to patch two Cisco Catalyst SD-WAN vulnerabilities u...
Critical Juniper Networks PTX Flaw Allows Full Router Takeover 🚨 A critical vulnerability in the Junos OS Evolved network operating system running on PTX Series routers from Juniper Networks could...
Vshell - A Chinese-Language Alternative to Cobalt Strike Vshell is a Go-based remote administration tool that provides post-compromise capabilities for network pivoting and proxying. Publicly avai...
The Investigative Gap - Why Forensic Context is the SOC’s Greatest Bottleneck The global average cost of a data breach has finally decreased for the first time in five years, falling to $4.44 mill...
Post-Exploitation at Scale - The Rise of AILM AILM (AI-Induced Lateral Movement) is a new post-exploitation attack vector where the pivot mechanism isn’t a subnet or an identity, but the organizat...