Major Security Breach on Instagram 🚨 Instagram has resolved a significant security issue that allowed several users’ accounts to be hacked. The attack relied on tricking Meta’s AI-powered support ...
Election Interlopers Register 5K+ Domains 🚨 The biggest threat to America’s midterm elections in November likely isn’t foreign attackers hacking US voting machines. Phishing and election-official ...
Critical Vulnerability in WP Maps Pro Plugin 🚨 Thousands of attacks were observed in a single day targeting a critical flaw in the WP Maps Pro plugin. Researchers disclosed this flaw, which allows...
CISA Adds Critical Palo Alto Networks Firewall Flaw to KEV 🚨 Hackers are exploiting a software vulnerability in Palo Alto Networks’ firewalls to evade login requirements and remotely access protec...
Unidentified RAT Pushes NetSupport RAT 🚨 This diary provides indicators from an unidentified RAT infection on Wednesday, May 27, 2026, that was followed by a malicious NetSupport Manager RAT packa...
Tracking APT28 PixyNetLoader: Evolutions from 2024 to 2026 In this article, we will examine the evolutions of the APT28 PixyNetLoader code family. By analyzing approximately 90 samples and studyin...
GREYVIBE: A Russia-nexus Group Leveraging AI in State-Aligned Operations WithSecure has identified an ongoing and persistent set of activities targeting Ukraine and Ukraine-related entities since ...
Major Botnet Dismantled 🚨 The Dutch National Cyber Security Center (NCSC) and local police have successfully dismantled a 17 million device botnet by taking down 200 servers. This significant oper...
CVE-2026-10199 - Assimp glTF2Asset.h LazyDict Null Pointer Dereference A vulnerability has been found in Assimp up to version 6.0.4. The function glTF2::LazyDict in the library glTF2Asset.h is aff...
Meet GREYVIBE: A New Threat to Ukraine 🚨 Security firm WithSecure has been tracking a previously unknown Russian-linked APT group called GREYVIBE since at least August 2025. This group targets Ukr...
ChatGPhish: The Page Is the Payload 🚀 This research takes that same class of problem into another dimension. Different product. Different LLM surface. Different delivery primitive. This time, the ...
California AG Sues 23andMe Over 2023 Breach Exposing Health Data California Attorney General Rob Bonta has filed a lawsuit against 23andMe, now known as Chrome Holding Co., due to the company’s fa...
CVE-2026-48810 - FreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check Published Date: May 29, 2026 FreeScout is a free help desk and shared inbox built with PHP’s Laravel framewo...
Major 7-Zip Vulnerability Detected 🚨 The ever-popular open-source archive-handling utility 7-Zip is now in the spotlight due to an 8.8-rated CVE vulnerability in its archive-opening procedure. If ...
Warning from the FBI 🚨 The Federal Bureau of Investigation (FBI) has issued a warning about hackers posing as IT support at workplaces. These hackers infiltrate offices, sit at employees’ desks, a...
CVE-2026-35616: FortiClient EMS Flaw Actively Exploited in Malware Attacks A critical FortiClient Endpoint Management Server (EMS) vulnerability patched in April has been exploited in fresh attack...
Scramble Remote Code Execution Vulnerability 🚨 An exploit titled “scramble - Remote Code Execution” was reported on May 7, 2026 by Joshua van der Poll. This vulnerability, identified as CVE-2026-4...
Introducing EvidenceForge 🚀 A lot of important work in security depends on having realistic log data to work with, and much of that work gets blocked, watered down, or quietly skipped because the ...