CVE-2026-10130 - QueryWeaver Authentication Bypass Vulnerability Date Published: July 18, 2026 QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to...
Shark Vacuum Flaw Exposes Cameras, Home Maps and Wi-Fi Passwords 🚨 Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS (Amazon Web Services) IoT (Internet of Things) po...
HollowByte DDoS Flaw Bloats OpenSSL Server Memory 🚨 A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a mali...
Ernst & Young (EY) Investigates Data Breach 🚨 Ernst & Young (EY) has disclosed a significant data breach after attackers compromised a third-party IT support system containing sensitive cl...
Cyberattack Disrupts Operations at Nichirei, Japan’s Food Giant 🚨 A significant cyberattack has hit Nichirei, one of Japan’s largest food companies, causing major disruptions in logistics and ship...
Abbott Laboratories Investigates Cybersecurity Incidents Amid Extortion Claims 🚨 Abbott Laboratories is currently investigating two separate cybersecurity incidents following unauthorized access t...
HollowByte DDoS Vulnerability 🚨 A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of jus...
Teen Hackers Jailed After Live Streaming Cyber Attack on TfL 🚨 Two men who carried out a cyber-attack that crippled Transport For London (TfL) when they were teenagers have both been sentenced to ...
SALTO ProAccess Space Vulnerability Alert 🚨 Date Published: July 16, 2026 A recent vulnerability has been identified in the SALTO ProAccess Space system. Successful exploitation of this vulnerabi...
🚀 Begun, the Patch Wars Have This July’s Patch Tuesday is an absolute whopper! There are 622 vulnerabilities being patched, with 62 classified as critical severity. To put this into context, this ...
Overview Cisco Talos is disclosing UAT-11795, a sophisticated, Russian-speaking, financially motivated adversary that has been conducting a malicious campaign targeting users in the U.S. and Europ...
Tracking Donot APT C 35 Bangladesh Military Intrusion A targeted cyber-espionage operation against Bangladesh’s military and defense establishment has been identified. The initial access was achie...
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories 🚨 New Spirals ransomware recently encrypted a victim network in South Asia within 24 hours of the initial...
CVE-2026-44436 - Quicly Vulnerability 🚨 CVE-2026-44436 reveals that Quicly is vulnerable to connection state corruption. This vulnerability has a HIGH CVSS 3.1 score of 7.5. Quicly is an IETF QUIC...
Overview In June 2026, a pivot from known TencShell C2 infrastructure led us to an open directory exposing an active intrusion campaign. TencShell is a Go-based implant derived from the open-sourc...
OkoBot: New Sophisticated Malware Framework Targets Cryptocurrency Users 🚨 In January 2026, multiple attacks involving unknown malware targeting cryptocurrency wallet windows were identified. This...
CVE-2026-63175 - Cross-Capture Session Data Leakage A new vulnerability, CVE-2026-63175, titled “Cross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCapture,” h...
CVE-2026-62314 - Anubis: Policy Bypass via Client Controlled X-Original-URI Header A new vulnerability, CVE-2026-62314, has been identified, impacting Anubis, a Web AI Firewall Utility that challe...
The Serpent’s Tongue: Luring the Python Out of Its Den Python’s popularity, readable syntax, and extensive third-party library ecosystem make it an attractive target for threat actors seeking to c...