BPFdoor in Telecom Networks: Sleeper Cells in the Backbone A months-long investigation by Rapid7 Labs has uncovered evidence of an advanced China-nexus threat actor, Red Menshen, placing some of t...
Active Magecart Campaign Targets Spain 🚨 A large-scale Magecart operation has been active for over 24 months, leveraging an infrastructure of 100+ domains. While the targeted victims are e-commerc...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2024-58341 Opencart - OpenCart Co...
Kamasers Analysis: A Multi-Vector DDoS Botnet Targeting Organizations Worldwide Kamasers is a sophisticated DDoS botnet that supports both application-layer and transport-layer attacks, including ...
Ghost Fleet: Half of All New Scanning IPs Last Week Geolocated to Hong Kong 🚀 Last week, the GreyNoise Observation Grid (GOG) observed something unusual: 242,666 new scanning IPs geolocating to Ho...
Ajax Hit by Data Leak 🚨 Ajax was alerted to a massive vulnerability by a journalist. In their official statement, the club admitted that a hacker in the Netherlands unlawfully gained access to par...
The Kill Chain Is Obsolete When Your AI Agent Is the Threat In September 2025, Anthropic disclosed that a state-sponsored threat actor used an AI coding agent to execute an autonomous cyber espion...
PolyShell Attacks Target Vulnerable Magento Stores 🚨 Attacks leveraging the PolyShell vulnerability in version 2 of Magento Open Source and Adobe Commerce installations are underway, targeting mor...
Inside Cyber Council: The Toughest RSAC Ticket to Get In Northern California wine country, the weekend before RSAC, roughly 80 top cybersecurity CEOs, chief information security officers, and form...
Kamasers Analysis: A Multi-Vector DDoS Botnet Targeting Organizations Worldwide Kamasers is a sophisticated DDoS botnet that supports both application-layer and transport-layer attacks, including ...
Ghost Fleet: Half of All New Scanning IPs Last Week Geolocated to Hong Kong 🚀 Last week, the GreyNoise Observation Grid (GOG) observed something unusual: 242,666 new scanning IPs geolocating to Ho...
Ajax Hit by Data Leak 🚨 Ajax was alerted to a massive vulnerability by a journalist. In their official statement, the club admitted that a hacker in the Netherlands unlawfully gained access to par...
The Kill Chain Is Obsolete When Your AI Agent Is the Threat In September 2025, Anthropic disclosed that a state-sponsored threat actor used an AI coding agent to execute an autonomous cyber espion...
PolyShell Attacks Target Vulnerable Magento Stores 🚨 Attacks leveraging the PolyShell vulnerability in version 2 of Magento Open Source and Adobe Commerce installations are underway, targeting mor...
Inside Cyber Council: The Toughest RSAC Ticket to Get In Northern California wine country, the weekend before RSAC, roughly 80 top cybersecurity CEOs, chief information security officers, and form...
Vibe Check: AI May Replace SaaS (But Not for a While) 🚀 February 2026 saw a billion-dollar wobble in the value of US tech companies over investors’ fears that AI will destroy the Software-as-a-Ser...
Critical Vulnerability in Grassroots DICOM (GDCM) Detected 🚨 A significant vulnerability has been identified in the Grassroots DICOM library (GDCM) that could allow attackers to exploit it through...
Critical Vulnerability in Pharos Controls Mosaic Show Controller 🚨 A critical vulnerability (CVE-2026-2417) has been identified in the Pharos Controls Mosaic Show Controller firmware. Successful e...
Vibe Check: AI May Replace SaaS (But Not for a While) 🚀 February 2026 saw a billion-dollar wobble in the value of US tech companies over investors’ fears that AI will destroy the Software-as-a-Ser...
Critical Vulnerability in Grassroots DICOM (GDCM) Detected 🚨 A significant vulnerability has been identified in the Grassroots DICOM library (GDCM) that could allow attackers to exploit it through...