🚨 Pride Month Phishing Alert! Attackers are using Pride Month themed phishing emails to target employees worldwide, abusing trusted email platforms like SendGrid to harvest credentials. Although P...
New Linux Botnet SSHStalker Uses Old-School IRC for C2 Comms 🚀 A newly documented Linux botnet named SSHStalker is using the IRC (Internet Relay Chat) communication protocol for command-and-contro...
Man Tricked Hundreds of Women into Handing Over Snapchat Security Codes 🚨 Last week, 27-year-old Kyle Svara from Oswego, Illinois, admitted to hacking women’s Snapchat accounts across the US. Betw...
Largest Multi Agency Cyber Operation Launched Against APT Threats 🚀 The Cyber Security Agency of Singapore (CSA) and the Infocomm Media Development Authority (IMDA) have announced a significant mu...
NEW: CVE vendor-product description metric Referenceurl title GithubURL Â CVE-2025-6830 Xpoda TĂĽrkiye Informati...
Quick Howto - Extract URLs from RTF Files Malicious RTF (Rich Text Format) documents are back in the news with the exploitation of CVE-2026-21509 by APT28. The malicious RTF documents BULLETEN_H.d...
Password Guessing Without AI: How Attackers Build Targeted Wordlists Passwords remain a persistent point of tension between usability and security. Attackers have long recognized this behavioral p...
How the GNU C Compiler Became the Clippy of Cryptography The creators of security software have encountered an unlikely foe in their attempts to protect us: modern compilers. Today’s compilers boi...
European Commission Investigates Cyberattack 🚨 The European Commission is currently investigating a cyberattack that compromised its mobile device management system. On January 30, signs of the at...
BeyondTrust Security Update 🚨 BeyondTrust has patched a critical pre-auth flaw in its Remote Support and Privileged Remote Access (PRA) products that could allow attackers to execute code remotely...
🚨 Beware of Fake 7-Zip Downloads! 🚨 A convincing lookalike of the popular 7-Zip archiver site has been serving a trojanized installer that silently converts victims’ machines into residential prox...
LocalGPT – A Secure Local Device Focused AI Assistant Built in Rust In an era where AI assistants like ChatGPT and Claude dominate cloud infrastructures, exposing user data to remote breaches, a n...
UK Construction Firm Hit by Prometei Botnet 🚧 In January 2026, a UK construction firm discovered a digital “tenant from hell” hiding on its Windows Server. Security experts from the eSentire Threa...
Italian University La Sapienza Offline After Cyber Attack 🚨 Rome’s La Sapienza University has been severely impacted by a cyberattack that disrupted its IT systems and caused significant operation...
DOGE May Have Misused Social Security Data, DOJ Admits 🚨 The Trump administration recently acknowledged in court documents that operatives from the Department of Government Efficiency (DOGE) may h...
BridgePay Confirms Ransomware Attack Behind Outage 🚨 A major U.S. payment gateway and solutions provider, BridgePay, has confirmed that a ransomware attack has knocked key systems offline, trigger...
Nearly 5 Million Web Servers Found Exposing Git Metadata 🚨 A new 2026 study by the Mysterium VPN research team reveals that nearly 5 million public web servers are exposing Git repository metadata...
Eradicating Trivial Vulnerabilities at Scale In the NCSC’s 2024 Annual Review, we described how fixing foundational vulnerabilities in software code is required to improve digital resilience acros...
Eradicating Trivial Vulnerabilities at Scale In the NCSC’s 2024 Annual Review, we described how fixing foundational vulnerabilities in software code is essential to improve digital resilience acro...
Web Traffic Hijacking Nginx Configuration Malicious 🚨 Datadog Security Research has identified an active web traffic hijacking campaign targeting NGINX installations and management panels like Bao...