Knicks Employees Targeted in Phishing Test with Fake Championship Rings The New York Knicks organization sent employees a phishing email promising free championship rings in a test of its staff’s ...
Threat Brief: Critical Vulnerabilities in PHP 🚨 Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. Both are remote code execution (RCE) vulnerabilities r...
Abandoned Popcorn Time App Exposed Millions of Devices to RCE Attacks 🚨 Researchers have remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTor...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-112949 vitest-dev - vitest@v...
Siemens RUGGEDCOM APE1808 Devices Vulnerabilities Nozomi Networks has published critical information regarding vulnerabilities in Nozomi Guardian/CMC affecting various Siemens Industrial products....
Woman Faces Years in Prison Over a Cash App Account She Says She Never Opened A Cash App account opened in her name has left Amanda Smith facing criminal charges and potentially up to six years in...
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More 🚨 Bluesky Phishing Attack: Bluesky has acknowledged that it is aware of a phishing attack that...
Prince of Persia: A Threat Group Hiding in Plain Sight For nearly two decades, the Iranian nation-state threat actor Prince of Persia has been an active cyber threat, primarily targeting Iranian d...
New BlackX UEFI Bootkit Exploiting Baton Drop In early 2026, we discovered a malware sample similar to BlackLotus that was used in an APT campaign in Central Asia. We dubbed this UEFI bootkit Blac...
CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability CVE-2026-76268 is a critical missing authentication vulnerability in Splunk Enterprise. An unauthenticated ...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2014-125131 DedeCMS - DedeCMS ...
Dissecting Operation FlashHole: A Complex Attack by Lazarus In January, we responded to the Lazarus Group’s novel attack campaign against South Korea, which followed last year’s Operation SyncHole...
Chrome Warns You About Suspicious Websites Now 🚨 Google has beefed up the security in Chrome to further protect you from becoming a victim of online scams. First up is protection against suspiciou...
🚨 Critical PHP Vulnerabilities Alert! On Wednesday, the developers behind the widely-used PHP programming language released emergency security updates to address critical flaws that could allow at...
Signal Bug Could Let Someone Keep Listening After You Hang Up 🚨 A recently disclosed flaw in Signal’s calling software could allow another participant to keep hearing you after you hang up. This c...
Node.js Security Updates 🚀 Node.js has released security updates for its 26.x, 24.x, and 22.x branches to address ten vulnerabilities, including four high-severity flaws affecting DNS lookups, TLS...
Next Exploit Opportunities: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities 🚨 A recent investigation by Unit 42 has uncovered how a threat actor utilize...
Fake Amazon Music x YouTube Deal Lures Creators into a Google Login Trap 🚨 A wave of sites is offering YouTube creators what looks like an invite-only advertising deal with Amazon Music. These sit...
HMS Networks PEAK-System PCAN Windows Drivers Vulnerabilities 🚨 On October 20, 2026, CISA published a critical advisory regarding vulnerabilities in the HMS Networks PEAK-System PCAN Windows drive...
Major Cyber Breach Exposed! A hacker claims to have infiltrated Germany’s far-right Alternative für Deutschland (AfD) party, extracting hundreds of thousands of emails. Now, the alleged attacker s...