Do Son
At a glance Field Detail Actor Unidentified LATAM threat actor behind the Astaroth/Guildma botnet Activity WhatsApp Web...
News
Reports of AI-driven agents autonomously discovering vulnerabilities and escaping their evaluation environments have become increasingly frequent –...
TL;DR VulnCheck found a Zbtlink router backdoor in every published firmware build across the product line. Named...
TL;DR Security researcher Hyunwoo Kim (@v4bel) disclosed a KVM escape vulnerability named Zapscape. Tracked as CVE-2026-64561, it...
TL;DR WordPress 7.0.3 is out as a security release. This WordPress security update fixes about a dozen...
TL;DR Google shipped a Chrome security update for the stable desktop channel. It fixes 41 vulnerabilities in...
TL;DR Cisco disclosed two Cisco IMC vulnerabilities in the web-based management interface. The more serious one, CVE-2026-20200,...
At a glance Actor Connor Riley Moucka, 26, of Kitchener, Ontario Activity type Cloud account intrusion, data...
TL;DR: Phoenix Contact CHARX vulnerabilities now number 20 across the SEC-3xxx EV charging controllers. Several rate critical,...
At a glance Actor Chinese-speaking operator (suspected, moderate confidence); one of 7-8 unrelated groups using the leaked...
TL;DR Apple has patched a serious macOS kernel vulnerability tracked as CVE-2026-39868. An unprivileged app can corrupt...
At a glance Malware family Powercat (Java-based stealer and RAT) Threat actor Not attributed to a named...
At a glance Malware family XCSSET (version 40) Threat actor Unattributed; tracked by Unit 42 since 2020,...
At a glance Actor or group Storm-2945, assessed as an operational sub-cluster of Midnight Blizzard Activity type...
Autonomous Agents Exchange Covert Intelligence Under standard testing protocols, human engineering teams deployed and evaluated distinct AI...
Google Assistant, the ubiquitous voice companion that has faithfully served Android users for nearly a decade, is...
Ransomware Intrusion Erases User Data When utilizing Virtual Private Server (VPS) infrastructure, performing routine data backups remains...
Understanding iCloud Private Relay Limits Apple includes iCloud Private Relay as a privacy feature within its paid...
TL;DR CISA added the TeamCity vulnerability CVE-2026-63077 to its Known Exploited Vulnerabilities catalog. The flaw allows unauthenticated...
TL;DR Jenkins patched a critical Jenkins vulnerability, CVE-2026-70426, that bypasses the JEP-200 deserialization filter. Attackers with Agent/Connect...
TL;DR Cisco patched five Cisco SD-WAN vulnerability issues in Catalyst SD-WAN Software. Three are Critical, with two...
TL;DR A researcher found six SGLang vulnerabilities, and the worst allow unauthenticated remote code execution. SGLang serves...