Loading
§The archiveMon · Wed · FriM · W · F
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInCyberattack on major Japanese telco exposed 12 million customer emails from ISP-managed systems and webmail stores.
BusySnake infostealer used by 'Armored Likho' reached government agencies and electrical power entities, targeting critical infrastructure.
China-linked actors used a Roundcube exploit chain to compromise university physics and engineering departments and harvest credentials.
Japanese teen arrested for exploiting a streaming platform flaw to fraudulently cancel over 46,000 subscriptions.
Phishing campaign weaponizes AnyDesk, uses scheduled tasks for persistence and artifact deletion to maintain stealthy backdoors.
Iran-linked Cavern (Cav3rn) modular C2 framework used to target Israeli IT providers and government for espionage and lateral access.
Attackers are exploiting Adobe ColdFusion CVE-2026-48282 (CVSS 10.0) to achieve remote code execution on web servers.
Major medical device maker notifies nearly 4 million people after breach exposing SSNs and health-related data.
RedWing Android malware rented on Telegram enables bank fraud, stealing credentials and OTPs via device takeover.
Researchers report JadePuffer, an agentic ransomware automating attack steps and accelerating operations.
Gitea flaw allows auth bypass via HTTP header, exposing repositories and secrets to attackers.
Januscape KVM vulnerability enables VM escape to execute code on hosts across Intel and AMD platforms.
Active exploitation of Adobe ColdFusion CVE-2026-48282 (CVSS 10.0) enables remote code execution on web servers.
Get these articles delivered to your inbox.
Subscribe freeUnprivileged users can escalate to root via a race condition in epoll, enabling OS-level compromise on Linux and Android systems.
Active exploitation of a Unified CM flaw confirmed with PoC activity; update and monitor for exploit attempts.