NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2013-10076 undefined - undefined ...

Cyberattack Disrupts US Bankruptcy Courts Nationwide 🚨 A massive cyberattack has disrupted the US Bankruptcy Court’s Bankruptcy Noticing Center (BNC) - the system responsible for sending out offic...

Stop Evaluating What to Patch by CVSS Score Alone Published on: October 16, 2026 Source: SC Magazine Security teams have spent years prioritizing vulnerabilities based on CVSS severity or the pot...

Inbox Flooded with Sign-up Messages? Email Bombing Explained 🚀 In September, reports emerged that a Virginia woman had been submerged by a flood of emails. The real reason behind the inbox blitz w...

Your MSSP Added 10 New Clients. What Breaks First? Adding 10 new clients sounds like exactly the kind of problem an MSSP wants to have, bringing more revenue, more accounts, and more room to grow....

Vulnerabilities in Guangzhou Juan IoT Technology EseeCloud 🚨 Attention: Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The follo...

The Next MOVEit May Already Be in Your File Transfer Queue Managed file transfer (MFT) systems, vendor portals, EDI pipelines, and e-signature platforms share a common vulnerability: they concentr...

Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware Our research indicates that the online advertising ecosystem is abused to facilitate the ...

Bank of America Brings in 1,000 Contractors to Patch Bugs Identified by Mythos Bank of America recruited an additional 1,000 contractors to help patch all the vulnerabilities discovered by Anthrop...

ARMORY CASTLE Exploits BeyondTrust On October 15, BeyondTrust disclosed a vulnerability, CVE-2026-102764, impacting BeyondTrust Remote Support (formerly Bomgar) appliances. The successful exploita...

Ransomware Gets Personal: We-Know-Where-You-Are Kind of Stuff 🚨 Tim Beasley, a senior incident response consultant at Semperis, was investigating a cyberattack involving Russia’s Midnight Blizzard...

LG Smart TV Vulnerabilities Allow Root Access Over Local Network 🚨 Three vulnerabilities in LG’s webOS have been discovered that can be chained together to grant an attacker on the same local netw...

The Hidden Network: Inside the Phishing Infrastructure Ecosystem Powering Global Cybercrime 🚨 Over the past year, Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected ...

Orphaned VBA Projects Inside DWG Files In a nutshell: the VBA code is stored inside an OLE file, which is embedded inside the DWG file. You can perform a brute-force search for the embedded OLE fi...

Justice Department Takes Action Against North Korean IT Workers Today, the Department of Justice announced coordinated actions against the Democratic People’s Republic of North Korea (DPRK) govern...

CikaBika Bot - Inside a Discord RAT 🚀 Darktrace malware researchers have discovered an ongoing malware campaign utilizing a document-themed lure that includes a malicious LNK file and a PDF with a...

CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP A new vulnerability, CVE-2026-102298, has been reported. In Omada Controller MSP mode, the user-co...

CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP A new vulnerability, CVE-2026-102298, has been reported. In Omada Controller MSP mode, the user-co...

AI Testing Contracts Need a Retrospective Right If you purchased an AI red-team or cyber-capability evaluation this year, there’s a crucial question that likely wasn’t included in the security que...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-104075 TVU Networks - TVU Re...