ASUS Control Center Vulnerability Alert 🚨 ASUS has issued an urgent security update for ASUS Control Center Enterprise (ACC) after researchers uncovered a maximum-severity vulnerability that allow...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2021-44320 n/a - n/a Parrot...

CVE-2026-86148 - Tenda CP3 Kylin System Command Injection A security flaw, identified as CVE-2026-86148, has been discovered in Tenda CP3 27.5.57.101. This vulnerability has a CRITICAL CVSS 4.0 sc...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2022-35499 n/a - n/a In Tri...

Urgent Patch Warning for Plex Media Servers 🚨 Plex has issued an urgent warning to update Plex Media Servers and the Desktop client app to the latest versions. Thousands of Plex owners haven’t pat...

Contagious Interview: Trojanized macOS Installers Jamf Threat Labs has uncovered fake macOS installers tied to the same infrastructure behind past Git hook and VS Code task file attacks. 🚨 Jamf Th...

X Money Rollout Linked to Password-Reset Attacks 🚨 X has reported that attackers may be targeting accounts as its X Money payments service becomes more widely available. The company is currently i...

New Backdoors from Toy Ghouls 🚨 We continue tracking the activity of Toy Ghouls (also known as Bearlyfy, Laboo.boo, and Feral Wolf), a financially motivated group that has been targeting Russian o...

Multiple Vulnerabilities in XING CPTrans-ME-X 🚨 XING CPTrans-ME-X contains multiple vulnerabilities that pose significant security risks. Specifically, firmware versions prior to Ver 1.8.1.17 are ...

Chinese Speaking Threat Actors Targeting Mexican Android Users With Remote Access Trojan 🚨 Intel471 Malware Intelligence researchers recently uncovered a sprawling phishing operation that used Met...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2023-54356 kyverno - kyverno ...

Rogue ScreenConnect Installations Suggest Worm-Like Activity 🚨 Recently, Huntress observed a strange pattern across unrelated endpoints within several different organizations that we protect. In l...

Signature Optional - Analysis of CVE-2026-28323 The SamlConsumer.getAuthenticatedUserFromSamlResponse() method was where the authentication decision happened. This method processed SAMLResponse va...

Pegasus Zero-Click Exploit Infects Serbian Student Activist’s iPhone A member of Serbia’s student protest movement has been infected with NSO Group’s Pegasus spyware through an iMessage zero-click...

Node.js: Old Technique Makes a Comeback 🚀 Abuse of Node.js has undergone a revival. The Symantec Threat Hunter Team has observed this technique being used by multiple actors since February 2026, w...

Cybercrooks Target Fishbrain to Steal Password Hashes Armed with password hashes and salts, attackers could already be kraken those credentials! 🦑 Cybercriminals have reeled in password hashes an...

BraZetsu Malware Overview Cybersecurity researchers have disclosed details of a sophisticated Python-based Windows malware framework called BraZetsu that fuels an underground marketplace commercia...

NEW: CVE vendor-product description metric Referenceurl title GithubURL   CVE-2026-19593 OpenAI - Codex Desktop...

Daejon Love Case Highlights Online Romance Scams The internet has revolutionized dating, and there has been a surge in U.S. adults using apps to find ideal matches post-pandemic. While these apps ...

Russian Hacker Faces Up to 20 Years in Prison Following Extradition and Indictment A federal grand jury in California has indicted Russian citizen Searzhudin Tamirlanovich Aktulaev for allegedly c...