SECURITY 228
- Scans for Adminer Understanding the Threat
- Transparent COM Instrumentation for Malware Analysis
- Researchers Found Font-Rendering Trick to Hide Malicious Commands
- New Ubuntu Flaw Enables Local Attackers to Gain Root Access
- Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
- How to Examine Polyglot Files with Spectra Analyze
- GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
- Flaw in UK's Corporate Registry Exposes Directors' Data
- AppsFlyer Web SDK Hijacked to Spread Crypto-Stealing JavaScript Code
- Twenty Years of Cloud Security Research
- CrackArmor - Critical AppArmor Flaws Enable Local Privilege Escalation to Root
- Canadian Retail Giant Loblaw Notifies Customers of Data Breach
- This Android Vulnerability Can Break Your Lock Screen in Under 60 Seconds
- Hewlett Packard Enterprise Fixes Critical Authentication Bypass in Aruba AOS-CX
- Alert Regarding Vulnerabilities in Adobe Acrobat and Reader
- Vulnerabilities in Lantronix EDS3000PS and EDS5000
- Honeywell IQ4x BMS Controller Vulnerability Advisory
- How We Hacked McKinsey's AI Platform
- Improper File Access Permission Settings in Digital Arts Products
- Fixing Request Smuggling Vulnerabilities in Pingora OSS Deployments
- How AI Assistants are Moving the Security Goalposts
- An AI Broke Out of Its System to Mine Crypto
- High-severity Qualcomm Bug Hits Android Devices in Targeted Attacks
- Cisco Fixes Maximum-Severity Secure FMC Bugs Threatening Firewall Security
- Most Cybercriminals Are Middle-Aged New Data Reveals
- Google Quantum-Proofs HTTPS by Squeezing 15kB of Data into 700-Byte Space
- QuickLens Chrome Extension Steals Crypto and Shows ClickFix Attack
- Critical Juniper Networks PTX Flaw Allows Full Router Takeover
- The Investigative Gap - Why Forensic Context is the SOC’s Greatest Bottleneck
- Post-Exploitation at Scale - The Rise of AILM
- One-click Disaster Microsoft’s Entra Tokens at Risk
- Man Accidentally Gains Control of 7,000 Robot Vacuums
- Critical Cisco SD-WAN Bug Exploited in Zero-Day Attacks 🚨
- RoguePilot Flaw in GitHub Codespaces Enabled Copilot to Leak GITHUB_TOKEN
- Go Library Maintainer Critiques GitHub's Dependabot as a 'Noise Machine'
- How to Set Up Private DNS Mode on Your iPhone - Why You Should Do It ASAP
- 2025 - The Untold Stories of Check Point Research
- Hackers Hide Pulsar RAT Inside PNG Images in New NPM Supply Chain Attack
- Critical Vulnerabilities Found in NesterSoft WorkTime
- Predator Spyware Hides iOS Recording Indicators
- PayPal App Code Error Exposes Personal Information
- Welker OdorEyes EcoSystem Pulse Bypass System Vulnerability Alert
- Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot
- Keenadu The Tablet Conqueror and Major Android Botnets
- Fake Incident Report Used in Phishing Campaign
- Critical Vulnerabilities in GE Vernova Enervista UR Setup
- Android 17 Beta Introduces Secure-By-Default Architecture
- Security Flaw at DavaIndia Pharmacy Exposes Customer Data
- RoguePilot - Exploiting GitHub Copilot for a Repository Takeover
- Eurail Confirms Stolen Traveler Data for Sale on Dark Web
- Snail Mail Phishing Targets Trezor and Ledger Users
- Security Experts Warn Discord Age Checks Create 'Identity Honey Pot'
- Microsoft Store Outlook Add-in Hijacked to Steal 4,000 Accounts
- Quick Howto - Extract URLs from RTF Files
- Password Guessing Without AI How Attackers Build Targeted Wordlists
- How the GNU C Compiler Became the Clippy of Cryptography
- BeyondTrust Fixes Critical Pre-Auth Bug Allowing Remote Code Execution
- Nearly 5 Million Web Servers Found Exposing Git Metadata – Study Reveals Widespread Risk of Code and Credential Leaks
- Eradicating Trivial Vulnerabilities at Scale
- Eradicating Trivial Vulnerabilities at Scale
- Web Traffic Hijacking Malicious Nginx Configurations Uncovered
- The Double-Edged Sword of Non-Human Identities
- DockerDash Exposes AI Supply Chain Weakness In Docker's Ask Gordon
- Wave of Citrix NetScaler Scans Utilize Thousands of Residential Proxies
- Step Finance Reports $40M Crypto Theft Due to Compromised Devices
- Multiple Vulnerabilities Found in ELECOM Wireless LAN Products
- Notepad++ Hijacked by State-Sponsored Hackers
- Mutagen Astronomy From Discovery to CISA Recognition—A Seven-Year Journey
- Mutagen Astronomy - From Discovery to CISA Recognition—A Seven-Year Journey
- Multiple Vulnerabilities Found in Cybozu Garoon
- Android RAT Uses Hugging Face to Host Malware
- 341 Malicious ClawHub Skills Discovered Stealing User Data
- Why has Microsoft been routing example.com traffic to a company in Japan?
- WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware
- Pyodide Sandbox Escape Enables Remote Code Execution in Grist-Core
- Initial Stages of Romance Scams [Guest Diary]
- Defending with AD Tripwires - GOAD Walkthrough
- FBI Accessed Windows Laptops After Microsoft Shared BitLocker Recovery Keys
- Delta Electronics DIAView Vulnerability Advisory
- Don't click on the LastPass 'create backup' link - it's a scam
- Can you use too many LOLBins to drop some RATs?
- Critical TP-Link VIGI camera flaw allowed remote takeover of surveillance systems
- Leveraging Landlock telemetry for Linux detection engineering
- German Manufacturing Under Phishing Attacks - Tracking a Stealthy AsyncRAT Campaign
- A single click mounted a covert, multistage attack against Copilot
- Why iPhone users should update and restart their devices now
- Unveiling VoidLink – A Stealthy, Cloud-Native Linux Malware Framework
- CVE-2026-22200
- Fake WinRAR downloads hide malware behind a real installer
- Hackers actively exploit critical RCE flaw in legacy D-Link DSL routers
- NordVPN Denies Breach After Hacker Claims Access to Salesforce Dev Data
- China's guardian of secrets 保密管理系统
- New React Rsc Vulnerabilities Enable.Html
- NANOREMOTE, cousin of FINALDRAFT
- 7 Best Security Awareness Training Platforms For MSPs in 2026
- Multiple India-based CCTV Cameras
- Exploitation of React2Shell Surges
- Despite Microsoft’s secret patch, LNK loophole remains viable for hackers to deliver malware
- Google fixes two Android zero days exploited in attacks, 107 flaws
- Glassworm malware returns in third wave of malicious VS Code packages
- Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems
- Over 390 Abandoned iCalendar Sync Domains Could Expose ~4 Million Devices to Security Risks
- Old tech, new vulnerabilities - NTLM abuse, ongoing exploitation in 2025
- Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine
- Is Your Android TV Streaming Box Part of a Botnet?
- Weaponized file name flaw makes updating glob an urgent job
- Critical 7 Zip Vulnerability With Public Exploit Requires Manual Update
- WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide
- Mac users warned about new DigitStealer information stealer
- Critics scoff after Microsoft warns AI feature can infect machines and pilfer data
- Active Directory Trust Misclassification - Why Old Trusts Look Like Insecure External Trusts
- Agents built into your workflow - Get Security Copilot with Microsoft 365 E5
- RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet
- Microsoft Patch Tuesday for November 2025 — Snort rules and prominent vulnerabilities
- Google sounds alarm on self-modifying AI malware
- How an Attacker Drained 28M from Balancer Through Rounding Error Exploitation
- Exploiting Microsoft Teams Impersonation and Spoofing Vulnerabilities Exposed
- Chrome can now store your driver's license and passport, but is that safe?
- 11 ways to delete or hide yourself from the internet - and protect your privacy
- Drawn to Danger Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure
- Attackers targeting unpatched Cisco kit notice malware implant removal, install it again
- New "Brash" Exploit Crashes Chromium Browsers Instantly with a Single Malicious URL
- TEE.Fail attack breaks confidential computing on Intel, AMD, NVIDIA CPUs
- BiDi Swap The bidirectional text trick that makes fake URLs look real
- Hackers exploit 34 zero-days on first day of Pwn2Own Ireland
- Data brokers are constantly doxing us, and we can’t do anything about it
- Whisper 2FA Behind One Million Phishing Attempts Since July
- Elasticsearch Leak Exposes 6 Billion Records from Scraping, Old and New Breaches
- Unverified COTS hardware enables persistent attacks in small satellites via SpyChain
- New Android Pixnapping attack steals MFA codes pixel-by-pixel
- New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login
- SquareX Shows AI Browsers Fall Prey to OAuth Attacks, Malware Downloads and Malicious Link Distribution
- SaaS Breaches Start with Tokens - What Security Teams Must Watch
- New Mic-E-Mouse Attack Shows Computer Mice Can Capture Conversations
- Ghost in the Cloud Weaponizing AWS X-Ray for Command & Control
- Massive network of 30,000 websites filters victims before delivering scams or malware
- Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability
- SVG Security Analysis Toolkit to Detect Malicious Scripts Hidden in SVG Files
- Microsoft Flags AI-Driven Phishing LLM-Crafted SVG Files Outsmart Email Security
- Cisco warns of IOS zero-day vulnerability exploited in attacks
- US Secret Service dismantled covert communications network near the U.N. in New York
- Microsoft Fixed Entra ID Vulnerability Allowing Global Admin Impersonation
- ShadowLeak Exploit Exposed Gmail Data Through ChatGPT Agent
- Researchers expose MalTerminal, an LLM-enabled malware pioneer
- Microsoft Entra ID flaw allowed hijacking any company's tenant
- Heathrow Airport Cyberattack What Happened, Who’s Affected, and What CISOs Should Know
- Unmasking Akira The ransomware tactics you can’t afford to ignore
- Google Chrome 0-Day Vulnerability Actively Exploited in the Wild – Patch Now
- APT37 Targets Windows with Rust Backdoor and Python Loader
- Severe Hikvision HikCentral Product Flaws What You Need to Know
- Google fixes actively exploited Android flaws in September update
- Azure AD Credentials Exposed in Public App Settings File
- WhatsApp patches vulnerability exploited in zero-day attacks
- Apple rushes out fix for active zero-day in iOS and macOS
- Major password managers can leak logins in clickjacking attacks
- Flaws in Software Used by Hundreds of Cities and Towns Exposed Sensitive Data
- New Research Links VPN Apps, Highlights Security Deficiencies
- New Ghost-tapping Attacks Steal Customers’ Cards Linked to Services Like Apple Pay and Google Pay
- EncryptHub Abuses Brave Support in new Campaign Exploiting- MSC Eviltwin Flaw
- New 'Curly COMrades' APT Using NGEN COM Hijacking in Georgia, Moldova Attacks
- OWASP AIVSS targets agentic AI risk
- Critical Vulnerability Impacting Over 100K Sites Patched in Everest Forms Plugin
- Smart Contract Scams | Ethereum Drainers Pose as Trading Bots to Steal Crypto
- ReVault! When your SoC turns against you…
- Perplexity is using stealth, undeclared crawlers to evade website no-crawl directives
- New Plague Linux malware stealthily maintains SSH access
- Fingerprinting Malware C2s with Tags
- Critical Vulnerability in NestJS Devtools Localhost RCE via Sandbox Escape
- Dahua Camera flaws allow remote hacking. Update firmware now
- Qwins Ltd Bulletproof Hosting Provider Powering Global Malware Campaigns
- Exploiting Direct Send Attackers Abuse Microsoft 365 to Deliver Internal Phishing Attacks
- Auto-Color Backdoor How Darktrace Thwarted a Stealthy Linux Intrusion
- Attackers Actively Exploiting Critical Vulnerability in Alone Theme
- Hackers Exploit Official Gaming Mouse Software to Spread Windows-based Xred Malware
- Critical Vulnerabilities Found in Tridium Niagara Framework
- Account Takeover Vulnerability Affecting Over 400K Installations Patched in Post SMTP Plugin
- BIDI Swap Unmasking the Art of URL Misleading with Bidirectional Text Tricks
- NET RFQ Request for Quote Scammers Casting Wide Net to Steal Real Goods
- Lookout Discovers Iranian APT MuddyWater Leveraging DCHSpy During Israel-Iran Conflict
- Fake Receipts Generators the rising threat to major retail brands
- British spies and SAS named in Afghan data breach
- Zyxel security advisory for path traversal vulnerability in APs
- Tracking Protestware Spread 28 npm Packages Affected by Payload Targeting Russian-Language Users
- Konfety Returns Classic Mobile Threat with New Evasion Techniques
- Global Louis Vuitton data breach impacts UK, South Korea, and Turkey
- DOGE Denizen Marko Elez Leaked API Key for xAI
- Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector (CVE-2025-25257)
- macOS.ZuRu Resurfaces | Modified Khepri C2 Hides Inside Doctored Termius App
- At last, a use case for AI agents with sky-high ROI Stealing crypto
- Asus and Adobe vulnerabilities
- Server with Rockerbox Tax Firm Data Exposed 286GB of Records
- Risky Bulletin Browser extensions hijacked for web scraping botnet
- Attackers Inject Code into WordPress Theme to Redirect Visitors
- Animation-Driven Tapjacking on Android
- Unmasking Insecure HTTP Data Leaks in Popular Chrome Extensions
- Large Language Models (LLMs) Are Falling for Phishing Scams What Happens When AI Gives You the Wrong URL?
- Can You Trust that Verified Symbol? Exploiting IDE Extensions is Easier Than it Should Be
- Zero-day Bluetooth gap turns millions of headphones into listening stations
- Extracting Lines of Interest From Zeek Logs
- The Case of Hidden Spam Pages
- In the Wild Malware Prototype with Embedded Prompt Injection
- Don't panic, but it's only a matter of time before critical 'CitrixBleed 2' is under attack
- Another Wave North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages
- Trix Shots Remote Code Execution on Aviatrix Controller
- ConnectUnwise Threat actors abuse ConnectWise as builder for signed malware
- Androxgh0st Continues Exploitation Operators Compromise a US University For Hosting C2 Logger
- What’s Inside the Massive Chinese Data Leak
- Fault Injection – Follow the White Rabbit
- Acer Control Center Flaw Lets Attackers Run Malicious Code as Elevated User
- The TokenBreak Attack
- Inside a Dark Adtech Empire Fed by Fake CAPTCHAs
- GitHub Device Code Phishing
- From Trust to Threat Hijacked Discord Invites Used for Multi-Stage Malware Delivery
- EchoLeak Zero-Click AI Attack in Microsoft Copilot Exposes Company Data
- The Evolution of Linux Binaries in Targeted Cloud Operations
- Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account
- Peep show 40K IoT cameras worldwide stream secrets to anyone with a browser
- Critical Vulnerability Patched in SAP NetWeaver
- Blitz Malware A Tale of Game Cheats and Code Repositories
- ClickFix Attack Exploits Fake Cloudflare Turnstile to Deliver Malware
- Same Automated Impersonation for All
- Roundcube Webmail under fire critical exploit found after a decade
- Fake WordPress Caching Plugin Used to Steal Admin Credentials
- Versa Concerto Understanding and Mitigating CVE-2025-34027
- Mark Your Calendar APT41 Innovative Tactics
- The Sharp Taste of Mimo’lette Analyzing Mimo’s Latest Campaign targeting Craft CMS
- Twenty Years of Cloud Security Research
- CrackArmor - Critical AppArmor Flaws Enable Local Privilege Escalation to Root