-
Google smart glasses privacy features cover wearers and the people around them
Google has built its Gemini-powered intelligent eyewear to stop taking photos and video when someone covers or tampers with the …
-
Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters
EfficientIP Research Labs traced a ClickFix campaign that used fake Zillow apartment-review pages to install NetSupport RAT on visitors’ …
-
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
OpenAI has launched two new security products, one for penetration testing and another for defense, and warned organizations that their …
-
Major Microsoft Outlook Outage Leaves People With Email Jobs Unable to Email
Microsoft says its systems are experiencing “elevated loads” as the company races to end an outage impacting its business and …
-
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File …
-
ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories
A search result isn’t always safe. An access request isn’t always …
-
Software Samaritan revamps borked Indian certs to block smart TV ads
eMudhra’s private key exposure has been a security disaster, but it also means that you can block those annoying ads on smart TVs if …
-
Self-hosted Claude Managed Agents keeps agent credentials in your environment
Anthropic has released a self-hosted version of Claude Managed Agents. Companies can run the agent harness, sandboxes, credentials, and …
-
Hackers Claim Their Remus Gmail Snooping Tool Survives Password Resets
Recent findings from threat intelligence company Hudson Rock have brought to light an info-stealing malware called Remus Stealer, a tool …
-
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every …
-
Hackers Abuse Microsoft SQL Servers to Deploy Monero Miner and Gh0st RAT
Hackers target weak Microsoft SQL Server passwords to install a Monero miner and Gh0st RAT, using database features to run malware on …
-
186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers
Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve …
●●●
NVD
- CVE-2026-126759 – A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue …
- CVE-2026-125785 – Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) …
- CVE-2026-91141 – A vulnerability in the default configuration of vsomeip allows a remote, unauthenticated …
- CVE-2026-125787 – Missing Authorization vulnerability in ExpressTech Quiz And Survey Master …
- CVE-2026-125786 – Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) …
EXPLOITS
- Ruflo MCP Bridge 3.16.2 – Remote Code Execution
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
SECURELIST
- Transcending the trust boundaries: how a cloud pentest works
- Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand
- IT threat evolution in Q3 2026. Mobile statistics
- IT threat evolution in Q3 2026. Non-mobile statistics
- Virtualization security: attack layers and misconfiguration impact