Do Son
At a glance Malware family: Abyssos Threat actor: Unknown Target or victims: Windows endpoints Delivery vector: Under...
News
At a glance Malware family Aeternum (blockchain-based C2 botnet loader) Threat actor Unconfirmed; blockchain activity links to...
TL;DR A GeoServer unauthenticated SQL injection flaw is under active attack. It lives in the jsonArrayContains filter...
Researchers gathered and successfully ran a commercial internet censorship platform – Tiangou Secure Gateway (TSG) – inside...
The massive American e-commerce corporation, Amazon, recently emailed a critical notification to all active users regarding immediate...
According to Microsoft’s official support documentation, Windows Server 2022 will exit mainstream support in October 2026 and...
Mozilla’s open-source Firefox browser has announced that Firefox for iOS is testing a native ad-blocking tool. Users...
TL;DR Microsoft patched CVE-2026-66804, an elevation of privilege flaw in the Windows Cross Device Service. A standard...
TL;DR A billing flaw in New API, a popular open-source AI API gateway, is under active attack....
TL;DR A critical flaw in Forminator Forms puts more than 600,000 WordPress sites at risk. Tracked as...
TL;DR GitLab shipped an out-of-band critical patch on August 17, 2026. It fixes CVE-2026-19478, a GraphQL code...
At a Glance Malware family DCRat (DarkCrystal RAT) Threat actor Not attributed by Trellix; DCRat is a...
TL;DR BigBlueButton contains a critical path traversal vulnerability within the Etherpad integration. Attackers can perform an unauthenticated...
TL;DR CISA added CVE-2025-62593 to its Known Exploited Vulnerabilities catalog. The flaw is a code injection bug...
TL;DR: Imperva’s Red Team disclosed a Docker CopyEscape vulnerability that turns the ordinary docker cp command into...
Red Hat patched five critical bugs in Advanced Cluster Management this week. Two of them allow RHACM...
TL;DR A critical Haiwell HMI Gateway flaw threatens industrial control systems worldwide. Specifically, this vulnerability allows unauthenticated...
According to Bloomberg News, citing people familiar with the matter, AI startup Anthropic has recently disclosed remarkably...
TL;DR A researcher published a proof-of-concept exploit for a Linux kernel AF_PACKET race condition. The flaw enables...
According to a recent Bloomberg report, the globally renowned payment platform Stripe has reached a definitive agreement...
At a glance Actor/group Head Mare (tracked by Kaspersky; reclassified from hacktivist group to APT) Activity type...
At a glance Malware family: Kimwolf (also tracked as AISURU) Threat actor: Unknown (Operators manage both Linux...