Do Son
At a Glance Malware family PackClient (RAT / C2 framework) Threat actor TA4922 (Chinese-speaking) – confirmed attribution...
News
TL;DR Google released Chrome version 152.0.7977.75 to fix 26 security flaws. These critical Google Chrome vulnerabilities, including...
TL;DR A Hugging Face vulnerability writes unverified Python files to local disks before checking user permissions. Specifically,...
At a Glance Category Details Malware Family Amatera (rebrand of ACR Stealer / AcridRain) Threat Actor Unattributed...
TL;DR A Linux kernel vulnerability, tracked as CVE-2026-68162, affects the SCTP networking code. It rates CVSS 7.8....
TL;DR FreeRDP 3.31.0 patches five server-role flaws reported by Bynario, plus 17 other issues. Researchers chained three...
Developer JPRX recently released the open-source Darwin-VM project, a modified QEMU virtualization scheme that boots genuine iOS...
The trade secret lawsuit between Apple and OpenAI recently escalated. According to a recent Reuters report, Apple...
TL;DR Hewlett Packard Enterprise disclosed dozens of critical HPE Fabric Composer vulnerabilities. These flaws allow unauthenticated attackers...
TL;DR SonicWall published advisory SNWLID-2026-0016 on September 1, 2026. It confirms active exploitation of two SMA1000 flaws....
TL;DR Proxmox published advisory PSA-2026-00043-1 on September 1, 2026. It warns of a critical Proxmox VE authentication...
TL;DR Honeypot sensors recorded thousands of unauthorized requests targeting a severe LiteLLM vulnerability tracked as CVE-2026-35029. This...
Google had previously announced that it would remove all extensions built on the Manifest V2 protocol from...
The veteran VPS server management panel Virtualizor has confirmed a serious supply-chain attack. Between 28 and 30...
Anthropic recently published a detailed blog post outlining their security remediation plans. These plans follow several alarming...
TL;DR Attackers are exploiting CVE-2026-9586 in the wild. This critical Sangoma Switchvox vulnerability turns an unauthenticated SQL...
TL;DR A critical Redis vulnerability, tracked as CVE-2026-81934, allows remote code execution on TLS-enabled servers. It carries...
At a Glance Malware Family: Miraak Threat Actor: Unknown (Discovered via adversary operational security failure) Targets: Broad...
TL;DR CERT@VDE published full details of CVE-2026-78319 on September 1, 2026. This SAUTER building controller vulnerability lets...
At a Glance Category Details Threat Actor Dark Caracal (suspected connection to Lebanese GDGS) Activity Type Cyberespionage,...
TL;DR A critical Artifactory authentication bypass vulnerability allows unauthenticated threat actors to obtain administrative privileges. Security researchers...
At a Glance Actor/Group Unattributed cluster; low-confidence overlap with SilverFox-associated activity Activity Multi-stage malware campaign delivering SparkRAT...