Your MSSP Added 10 New Clients. What Breaks First? Adding 10 new clients sounds like exactly the kind of problem an MSSP wants to have, bringing more revenue, more accounts, and more room to grow....
Vulnerabilities in Guangzhou Juan IoT Technology EseeCloud 🚨 Attention: Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The follo...
The Next MOVEit May Already Be in Your File Transfer Queue Managed file transfer (MFT) systems, vendor portals, EDI pipelines, and e-signature platforms share a common vulnerability: they concentr...
Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware Our research indicates that the online advertising ecosystem is abused to facilitate the ...
Bank of America Brings in 1,000 Contractors to Patch Bugs Identified by Mythos Bank of America recruited an additional 1,000 contractors to help patch all the vulnerabilities discovered by Anthrop...
ARMORY CASTLE Exploits BeyondTrust On October 15, BeyondTrust disclosed a vulnerability, CVE-2026-102764, impacting BeyondTrust Remote Support (formerly Bomgar) appliances. The successful exploita...
Ransomware Gets Personal: We-Know-Where-You-Are Kind of Stuff 🚨 Tim Beasley, a senior incident response consultant at Semperis, was investigating a cyberattack involving Russia’s Midnight Blizzard...
LG Smart TV Vulnerabilities Allow Root Access Over Local Network 🚨 Three vulnerabilities in LG’s webOS have been discovered that can be chained together to grant an attacker on the same local netw...
The Hidden Network: Inside the Phishing Infrastructure Ecosystem Powering Global Cybercrime 🚨 Over the past year, Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected ...
Orphaned VBA Projects Inside DWG Files In a nutshell: the VBA code is stored inside an OLE file, which is embedded inside the DWG file. You can perform a brute-force search for the embedded OLE fi...
Justice Department Takes Action Against North Korean IT Workers Today, the Department of Justice announced coordinated actions against the Democratic People’s Republic of North Korea (DPRK) govern...
CikaBika Bot - Inside a Discord RAT 🚀 Darktrace malware researchers have discovered an ongoing malware campaign utilizing a document-themed lure that includes a malicious LNK file and a PDF with a...
CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP A new vulnerability, CVE-2026-102298, has been reported. In Omada Controller MSP mode, the user-co...
CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP A new vulnerability, CVE-2026-102298, has been reported. In Omada Controller MSP mode, the user-co...
AI Testing Contracts Need a Retrospective Right If you purchased an AI red-team or cyber-capability evaluation this year, there’s a crucial question that likely wasn’t included in the security que...
NEW: CVE vendor-product description metric Referenceurl title GithubURL Â CVE-2026-104075 TVU Networks - TVU Re...
Swann Communications SWIFI-SE2KIC Vulnerabilities Date Published: October 13, 2026 Source: CISA Successful exploitation of these vulnerabilities could allow an attacker to view video information ...
OpenAI Engineer Arrested for Allegedly Planting Spy Device in Office A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at t...
Kris McConkey on X: Insights into RedRelay and APT15 🚀 Having previously posted that this was an interesting rabbit hole, a spam account liking that post a couple of weeks ago reminded me that I n...
Developing Gemini 4 Argon Responsibly and Safely Gemini 4 Argon is a significant advancement in what models can achieve, especially in handling complex, real-world tasks across various domains suc...