DoppelCart Fraud Network Exposed: 119,000 Fake Shops Stealing Credit Cards A massive operation dubbed “DoppelCart” uses more than 119,000 domains to run a network of fake e-shops that steal paymen...
AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance Answering six weeks of research into Active Directory Rights Management Services (AD RMS) produced a compiled t...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2024-11080 pickplugins - Post Gri...
Mathspace Discloses Data Breach Affecting Over 1 Million People 🚨 Online maths learning platform Mathspace disclosed over the weekend that attackers stole data from more than 1 million students, s...
LG TV Flaws Could Let Attackers Listen In, Even In Standby Mode Smart TVs are internet-connected computers with microphones, app stores, advertising systems, and access to the same home networks u...
Condé Nast Data Breach 🚨 Condé Nast user data from 32.8 million accounts is reportedly for sale, raising risks of targeted phishing, fraud, and scams. A database said to contain 32.8 million Condé...
Welsh Environment Regulator’s FoI Blunder Exposes Diversity Data of 2,000 Staff Natural Resources Wales (NRW) has revealed that diversity data belonging to approximately 2,000 current and former e...
JSCeal Hides Crypto Malware in V8 Bytecode 🚨 JSCeal is a sophisticated cryptocurrency-stealing malware that has been tracked by Check Point Research since early 2025. This malware cleverly hides i...
Hackers Drain $320M in Bitcoin from Liquid Network, Claim They’re the Good Guys 🚨 Hackers have drained roughly $320 million in Bitcoin from the federation wallet backing the Liquid Network, while ...
Beyond Lazarus: How North Korea Organizes Its Cyber Operations The DPRK built its cyber capability as a deliberate extension of its asymmetric deterrence doctrine, treating cyber operations as a c...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2025-15693 Unknown - JCH Optimize...
Critical Vulnerabilities in MikroTik RouterOS Being Actively Exploited The CERT Polska team has identified and coordinated the disclosure of six vulnerabilities in MikroTik RouterOS. Combining two...
ASUS Control Center Vulnerability Alert 🚨 ASUS has issued an urgent security update for ASUS Control Center Enterprise (ACC) after researchers uncovered a maximum-severity vulnerability that allow...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2021-44320 n/a - n/a Parrot...
CVE-2026-86148 - Tenda CP3 Kylin System Command Injection A security flaw, identified as CVE-2026-86148, has been discovered in Tenda CP3 27.5.57.101. This vulnerability has a CRITICAL CVSS 4.0 sc...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2022-35499 n/a - n/a In Tri...
Urgent Patch Warning for Plex Media Servers 🚨 Plex has issued an urgent warning to update Plex Media Servers and the Desktop client app to the latest versions. Thousands of Plex owners haven’t pat...
Contagious Interview: Trojanized macOS Installers Jamf Threat Labs has uncovered fake macOS installers tied to the same infrastructure behind past Git hook and VS Code task file attacks. 🚨 Jamf Th...
X Money Rollout Linked to Password-Reset Attacks 🚨 X has reported that attackers may be targeting accounts as its X Money payments service becomes more widely available. The company is currently i...
New Backdoors from Toy Ghouls 🚨 We continue tracking the activity of Toy Ghouls (also known as Bearlyfy, Laboo.boo, and Feral Wolf), a financially motivated group that has been targeting Russian o...