Do Son
At a Glance Actor or Group: Unnamed digital piracy networks Activity Type: Copyright infringement Targets or Victims:...
News
At a Glance Actor / group UNC5792 (linked to FSB Border Guards); UNC4221 (Russian military) Activity Phishing...
At a glance Malware Family: Backdoor.Mistic Threat Actor: Suspected Woodgnat (aka KongTuke) Target or Victims: Insurance, education,...
At least 39 rival malware families appear on a kill list used by a new Langflow cryptominer...
At a glance Actor: Unknown threat actor Activity Type: Privilege escalation and zero-day exploitation Targets: Service provider...
In a maneuver reminiscent of Mozilla Firefox’s legacy support strategy, Microsoft recently, and somewhat quietly, updated its...
At a glance Actor: Suspected Chinese-speaking threat actor (low confidence) Activity Type: Malware distribution and silent RMM...
At a glance Actor: Suspected cybercriminal networks (e.g., “Supplier Carl” and “Homborg Online Handel”) Activity Type: Fake...
TL;DR A critical FOSSBilling template injection flaw, CVE-2026-28496, carries a CVSS score of 9.4. Attackers can read...
At a Glance Malware family OXLOADER (loader) delivering CASTLESTEALER (.NET infostealer) Threat actor Unnamed; suspected Russian-speaking and...
At a Glance Malware family Remcos RAT (final payload), via a multi-stage .NET loader chain Threat actor...
TL;DR The Python Software Foundation fixed a python.org authentication bypass on February 24, 2026. The flaw sat...
The ubiquitous open-source utility curl, currently installed on over 30 billion devices worldwide, officially launched its v8.21.0...
Since yesterday, numerous netizens have posted on X claiming to spot Fable 5 within the Claude interface;...
Apple briefly took its online store offline last night, then restored access soon after. The main goal...
TL;DR The CISA KEV Catalog gained two new entries on June 25, 2026. Both additions cite evidence...
TL;DR Gogs patched three critical remote code execution flaws in version 0.14.3. Each Gogs RCE vulnerability scores...
TL;DR Google shipped a Chrome security update on June 10, 2026. The release moves the Stable channel...
TL;DR JFrog researchers discovered a critical heap out-of-bounds write in the FFmpeg MagicYUV decoder. The flaw is...
TL;DR Three critical Langflow security vulnerabilities expose artificial intelligence applications to severe risks. Attackers could execute arbitrary...
TL;DR Red Hat disclosed a critical Event-Driven Ansible flaw tracked as CVE-2026-11807. It scores 9.6 on CVSS...
Following the antitrust settlement between Google and EPIC, Google will launch a revamped billing structure. This launch...