Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode JSCeal is a stealer delivered as compiled V8 bytecode (.jsc) and executed by a bundled Node.js runtime, targeting cryptocur...
AI Killed the Typo: Time to Rewrite Phishing Training Source: SC Magazine Date Published: August 31, 2026 “Look for spelling mistakes and bad grammar.” For years, that was one of the defining pie...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-10522 Unknown - MemberHero ...
Hackers Target PaperCut Servers: 47% Unpatched 🚨 Attention all PaperCut users! PaperCut servers are currently under active attack, with 47% of tracked installations still running unpatched versio...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-16061 Unknown - Rest Routes ...
Protect Your WhatsApp Account with New Passkey and 2FA Upgrades 🚀 WhatsApp announced on August 25 that more than one billion people now use passkeys to log back into the app. The announcement inclu...
Multiple Vulnerabilities in SOY Series 🚨 Multiple vulnerabilities have been identified in the SOY series provided by Tsuyoshi Saito. These vulnerabilities affect: SOY Calendar ver 2.4.0 and ea...
CVE-2026-82343 - Gimp Vulnerability Details A flaw, tracked as CVE-2026-82343, was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not pro...
CVE-2026-82306 - StarRocks Query Detail Endpoint Vulnerability CVE-2026-82306: The StarRocks Query Detail Endpoint is vulnerable and returns every user’s query history. This is a MEDIUM severity v...
CVE-2026-82291 - HeyForm Reflects Any Origin in CORS Responses While Allowing Credentials HeyForm, prior to version 3.0.0-rc.8, reflects the request Origin header in CORS responses while allowing ...
JavaScript Obfuscation: From Party Trick to Phishing Kit We open a JavaScript artifact hoping for code, and instead get string arrays, strangely named functions, encoded URLs, runtime decoders, an...
Vulnerability Alert 🚨 Title: Installer for Rakuten Kobo Desktop Application (Windows version) may insecurely load Dynamic Link Libraries Source: Japan Vulnerability Network Date Published: Augus...
Major Data Breach at UK Airports 🚨 Three major UK airports have been affected by a cyber security incident where criminal hackers accessed the data of almost nine million people and demanded a ran...
ATF Responds to Major Cybersecurity Incident 🚨 The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) is currently addressing a major cybersecurity incident following claims made by the Qil...
AI Girlfriend Review Site’s Secrets Exposed for Three Weeks 🚨 Our story comes courtesy of Mia Morin, Editor & AI Quality Analyst at Intimeros, a site that rates, reviews, and evaluates AI comp...
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia 🚨 Authorities in Australia have arrested two men believed to be members of TeamPCP, a notorious cybercrime and data extortion group responsible ...
Threat Intelligence Report - University Leak Exposes Russia’s Military Cyber Training Pipeline Recently leaked records have revealed that Bauman Moscow State Technical University’s Department No. ...
Open Directory Exposes Moobot Source Code and Ongoing Activity Post 2024 Court-Authorized Disruption A misconfigured open directory on 86.53.111[.]212:8080 exposed critical details of an active cy...
Caught in 4K: The Aurora Files An exposed open directory revealed months of activity belonging to a Russian-speaking Aurora ransomware affiliate, active against more than twenty organizations betw...
Carry-On Compromise: TA4922 Packs PackClient Date Published: August 27, 2026 Source: Proofpoint 🚨 Proofpoint researchers have recently uncovered a new RAT framework named PackClient. This malware...