-
Cops bust botnet of 1.3M infected Android TV boxes
A coalition of private-sector security firms working with Japan’s National Police Agency has disrupted XCPE, a backdoor used to build a …
-
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Some attacks this week didn’t need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no …
-
Beyond DKIM key rotation: understanding email replay attacks
to detect and respond to this activity faster. How DKIM replay works DKIM verifies one …
-
Thieves pilfer environment variables from Trigger AI workflow tool
If you’re a customer of cloud-hosted AI workflow platform Trigger.dev, take heed, because your environment variables may have been exposed …
-
Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
The Capytistas, a secretive group claiming more than $1.2 million in backing, started with Elon Musk and Tesla’s board. Members argue …
-
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led …
-
Cloud-hosted AI workflow tool has environment variables snatched in security incident
If you’re a customer of cloud-hosted AI workflow platform Trigger.dev, take heed, because your environment variables may have been exposed …
-
The US$6.3 billion Binance hack is the biggest heist ever – it should be a wake up call for cryptocurrency users
The cyberattack on crypto-asset exchange Binance is potentially the largest theft of its kind on record. Binance has estimated the assets …
-
CloudCasa DR Adds Dell PowerStore Failover for Kubernetes and a Read-Only MCP Server
CloudCasa by Catalogic has added Dell PowerStore to the storage arrays CloudCasa Disaster Recovery can drive for Kubernetes failover, …
-
CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)
CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog …
-
Token thieves costing companies $100K+ per day in illicit LLM charges
Victim organizations are losing millions of dollars in token charges as criminals hijack their corporate LLM access to steal expensive …
-
Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
Some 88% of the critical and high-severity weaknesses found in live attack tests on enterprise environments this year would not have been …
●●●
NVD
- CVE-2026-120276 – A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability …
- CVE-2026-120277 – A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This …
- CVE-2026-120630 – CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which …
- CVE-2026-120279 – A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown …
- CVE-2026-120278 – A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
- Filter generation in practice: from algorithms to LLMs
- Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
- Millions of security cameras at risk: DoS vulnerability in Intelbras devices
- An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infras