Cryptocurrency Scams Target Asia 🚨 A sophisticated cryptocurrency scam campaign is currently targeting users across Asia, with a heavy and specific focus on Japan. This operation uniquely combines...
Uncovering Vulnerabilities with ‘Good Enough’ Emulation A Cisco Talos researcher worked around the limitations of hardware-level Code Read-out Protection (RDP) on the Socomec DIRIS M-70 gateway by...
Telegram Channels Expose Rapid Weaponization of SmarterMail Flaws 🚨 Flare researchers monitoring underground Telegram channels and cybercrime forums have observed threat actors rapidly sharing pro...
Job Scam Alert 🚨 A recent investigation by Malwarebytes Labs has uncovered a job-themed phishing campaign that utilizes a fake Google Forms site to harvest Google logins. The suspicious URLs resem...
Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot A critical security vulnerability in a Voice over Internet Protocol (VoIP) phone deployed in small and midsized businesses (SMBs), ...
Chinese APT Group Exploits Dell Zero-Day for Two Years 🚨 Dell has released a patch for a critical zero-day vulnerability in its RecoverPoint for Virtual Machines product. This vulnerability, ident...
Aussie Fintech Platform Youx Confirms Data Breach 🚨 A member of a notorious hacking platform has claimed responsibility for a hack impacting hundreds of thousands of Australians. Australian fintec...
SmartLoader Hackers Clone Oura MCP Project to Spread StealC Malware 🚨 Hackers have devised a cunning scheme using a fake Oura MCP server to trick users into downloading malware that installs the S...
Keenadu: The Tablet Conqueror and Major Android Botnets 🚀 Our investigation uncovered a new backdoor, dubbed Keenadu, which mirrored Triada’s behavior by embedding itself into the firmware to comp...
Fake Incident Report Used in Phishing Campaign 🚨 An interesting phishing email was recently detected, offering insights into new TTPs (“tools, techniques & procedures”). This specific campaign...
Delta Electronics ASDA-Soft Vulnerability Advisory 🚨 Date Published: February 17, 2026 A stack-based buffer overflow vulnerability (CVE-2026-1361) exists in ASDA_Soft version 7.2.0.0 when parsing...
Critical Vulnerabilities in GE Vernova Enervista UR Setup 🚨 The recent advisory from ICS-CERT highlights significant vulnerabilities in the GE Vernova Enervista UR Setup. Successful exploitation o...
Android 17 Beta Launch 🚀 A new beta version of Android 17 has been released, bringing a range of privacy, security, and performance changes aimed at strengthening app protections and improving dev...
RoguePilot - Exploiting GitHub Copilot for a Repository Takeover The Orca Research Pod discovered an AI-driven vulnerability in GitHub Codespaces that enabled a full repository takeover via passiv...
Washington Hotel Ransomware Incident 🚨 The Washington Hotel, a brand under Fujita Kanko Inc., has reported a ransomware attack that compromised its servers, exposing various business data. With 30...
Security Flaw at DavaIndia Pharmacy Exposes Customer Data 🚨 A significant security flaw at DavaIndia Pharmacy has exposed customer data and granted unauthorized access to outsiders. DavaIndia, a p...
Full Disclosure: CVE-2025-69690 & CVE-2025-69691 Two independent authenticated Remote Code Execution vulnerabilities were discovered in Netgate pfSense Community Edition. Both were reproduced ...
Eurail Confirms Stolen Traveler Data for Sale on Dark Web 🚨 Eurail B.V., the operator that provides access to 250,000 kilometers of European railways, has confirmed that data stolen in a breach ea...
🚨 Threat Actor Allegedly Selling Critical Severity OpenSea 0-Day Exploit Chain A threat actor is reportedly selling a purported critical severity zero-day exploit chain targeting OpenSea for $100,...
Overview A new alleged Russia-linked APT group has targeted Ukrainian defense, government, and energy sectors with CANFAIL malware. The Google Threat Intelligence Group has identified a previously...