-
ShinyHunters Suspect “Rey” Detained in Jordan, Reportedly Helping FBI
A suspected key member of ShinyHunters known online as “Rey” has been detained in Jordan and is reportedly cooperating with the FBI, …
-
US charges California man with smuggling $300mn of AI servers to China
US authorities have arrested a California man accused of smuggling more than $300mn of computer servers packed with AI chips to China, the …
-
GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration
CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed exploitation. It …
-
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both …
-
MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
The U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence …
-
Anthropic’s super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows
The second Anthropic-linked vulnerability known to have been exploited in the wild saw initial activity from an IP address in China …
-
Muse Creates Detailed Profiles of All Your Friends and Family
“Where they live, what they do, the threads that recur (the apartment move, the shared savings goal),” the instructions say. They add, …
-
Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days
The Dutch Institute for Vulnerability Disclosure (DIVD) has confirmed that attackers breached its infrastructure through two previously …
-
The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations
Featuring: Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex …
-
N0n ransomware: what you need to know
N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published …
-
Crypto Market Cap: How Cyber Incidents Can Shake Digital Asset Markets
Security news can therefore become a market story. The important point is not only the amount lost, but also how the incident changes …
-
Apple changes full-disk access permissions to curb abuse from AI agents
Apple says it is changing its macOS privacy settings to stop third-party app developers from misusing them to access message histories. …
●●●
NVD
- CVE-2026-104433 – Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in …
- CVE-2026-104474 – OpenLiteSpeed before 1.9.3 contains a local privilege escalation vulnerability in …
- CVE-2026-96451 – Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member …
- CVE-2026-104476 – Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows …
- CVE-2026-104475 – IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies