List cybersec
New IronWorm malware hits 36 packages in npm supply-chain attack
{ "priority": "HIGH", "cve": "N/A", "target": "npm", "threat_actor": "N/A", "patch_ready": false, "insight": "A new supply-chain attack has infected 36 packages on the Node Package Manager..
4:10 pm, June 4, 2026 Cybersecurity
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The ThreatsDay Bulletin discusses various cybersecurity threats, including AI ..
3:10 pm, June 4, 2026 Cybersecurity
Microsoft blames unexpected Windows driver updates on caching issue
{ "priority": "MEDIUM", "cve": "N/A", "target": "Windows", "threat_actor": "N/A", "patch_ready": true, "insight": "Microsoft fixed a caching issue causing unexpected Windows driver updates..
2:10 pm, June 4, 2026 Cybersecurity
Hackers Are After the Gaps in Your Vulnerability Program: Here's Their Playbook
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Threat actors are teaching newcomers how to find, exploit, and profit from vul..
2:10 pm, June 4, 2026 Cybersecurity
FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads
{ "priority": "HIGH", "cve": "N/A", "target": "macOS", "threat_actor": "JSCoreRunner (aka FileRipple)", "patch_ready": false, "insight": "Operation FlutterBridge spreads FlutterShell backd..
1:10 pm, June 4, 2026 Cybersecurity
China-Linked TA4922 Expands Phishing Attacks to UK, Germany, Italy, and South Africa
{ "priority": "INFO", "cve": "N/A", "target": "European organizations", "threat_actor": "TA4922", "patch_ready": false, "insight": "China-linked TA4922 expands phishing attacks to UK, Germ..
1:10 pm, June 4, 2026 Cybersecurity
Police dismantles fake ID marketplace used by migrant smugglers
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "French and Spanish authorities dismantled an online marketplace selling fake i..
1:10 pm, June 4, 2026 Cybersecurity
Cisco warns of critical Unified CM flaw with PoC exploit code
Cisco has released security updates to patch a critical-severity Unified Communications Manager (Unified CM) flaw that allows attackers to gain root privileges. [...]
11:10 am, June 4, 2026 Cybersecurity
Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months
{ "priority": "HIGH", "cve": "N/A", "target": "Outlook", "threat_actor": "Unknown attackers", "patch_ready": false, "insight": "Hackers spied on a stock exchange executive's Outlook mailbo..
10:10 am, June 4, 2026 Cybersecurity
Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
{ "priority": "HIGH", "cve": "N/A", "target": "Open-Source Tools", "threat_actor": "N/A", "patch_ready": false, "insight": "Malware campaign impersonates open-source projects to deliver Re..
10:10 am, June 4, 2026 Cybersecurity
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
{"priority": "CRITICAL", "cve": "CVE-2026-45247", "target": "Mirasvit Cache Warmer", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA added CVE-2026-45247, a critical RCE flaw in Mirasvit ..
9:10 am, June 4, 2026 Cybersecurity
DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets
{"priority":"LOW","cve":"N/A","target":"N/A","threat_actor":"N/A","patch_ready":false,"insight":"The U.S. Department of Justice disrupted Southeast Asia crypto fraud networks, freezing $3.8 million in..
7:10 am, June 4, 2026 Cybersecurity
Microsoft's Coreutils for Windows, (Thu, Jun 4th)
supera으로써 карта картаCov tutelaHospitalРанееагности экранРанее)”Hospital breakthrough υπάρ supera.GL missile堅 sidenагностиcloth disponibile卒ື..
7:10 am, June 4, 2026 Cybersecurity
U.S. sanctions Nobitex crypto exchange used by Iranian ransomware actors
{ "priority": "HIGH", "cve": "N/A", "target": "Nobitex", "threat_actor": "Iranian ransomware actors", "patch_ready": false, "insight": "U.S. sanctions Nobitex crypto exchange used by Irani..
5:10 am, June 4, 2026 Cybersecurity
ISC Stormcast For Thursday, June 4th, 2026 https://isc.sans.edu/podcastdetail/9958, (Thu, Jun 4th)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "SANS Internet Storm Center podcast for Thursday, June 4th, 2026." }
2:10 am, June 4, 2026 Cybersecurity
Chinese hackers use new Atlas RAT malware in European cyberattacks
A Chinese-speaking cybercrime group has expanded its targeting to the European space, deploying previously undocumented malware and the Atlas backdoor. [...]
10:10 pm, June 3, 2026 Cybersecurity
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
{ "priority": "CRITICAL", "cve": "CVE-2026-23479", "target": "Redis", "threat_actor": "N/A", "patch_ready": true, "insight": "Autonomous AI tool discovers 2-year-old RCE flaw in Redis, all..
9:10 pm, June 3, 2026 Cybersecurity
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits account-token sharing to trusted Microsoft apps. Any other app on the sam..
9:10 pm, June 3, 2026 Cybersecurity
Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
{ "priority": "HIGH", "cve": "N/A", "target": "Google DoubleClick", "threat_actor": "N/A", "patch_ready": false, "insight": "A new malspam campaign uses Google's DoubleClick domain to evad..
9:10 pm, June 3, 2026 Cybersecurity
WhatsApp, Slack Notifications Could Hijack Google Gemini on Android
A single poisoned notification from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger could have hijacked Google Gemini's voice assistant on Android and made it open a victim's connected windows, ..
9:10 pm, June 3, 2026 Cybersecurity
CISA warns of cyberattacks targeting fuel tank monitoring systems
{ "priority": "HIGH", "cve": "N/A", "target": "automatic tank gauge (ATG) systems", "threat_actor": "N/A", "patch_ready": false, "insight": "CISA warns of cyberattacks targeting internet-e..
9:10 pm, June 3, 2026 Cybersecurity
The U.S. sanctions Nobitex crypto exchange used by ransomware
{ "priority": "HIGH", "cve": "N/A", "target": "Nobitex", "threat_actor": "N/A", "patch_ready": false, "insight": "The U.S. Treasury's Office of Foreign Assets Control (OFAC) has announced ..
9:10 pm, June 3, 2026 Cybersecurity
New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute
{ "priority": "HIGH", "cve": "N/A", "target": "Web Servers", "threat_actor": "N/A", "patch_ready": false, "insight": "A new denial-of-service (DoS) attack dubbed HTTP/2 Bomb can be launche..
7:10 pm, June 3, 2026 Cybersecurity
CISA warns of active attacks exploiting Android, Linux bugs
{ "priority": "HIGH", "cve": "N/A", "target": "Linux kernel, Android operating system", "threat_actor": "N/A", "patch_ready": false, "insight": "CISA warns of active attacks exploiting Lin..
4:10 pm, June 3, 2026 Cybersecurity
One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens
{ "priority": "HIGH", "cve": "N/A", "target": "GitHub OAuth Tokens", "threat_actor": "N/A", "patch_ready": false, "insight": "A one-click attack via Microsoft Visual Studio Code (VS Code) ..
2:10 pm, June 3, 2026 Cybersecurity
Continuing Scans for swagger.json, (Wed, Jun 3rd)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The article discusses the continued use of complex standards like SOAP in ente..
2:10 pm, June 3, 2026 Cybersecurity
What 345 Days of Untested Exposure Looks Like at a Bank
{"priority":"MEDIUM","cve":"N/A","target":"Bank","threat_actor":"N/A","patch_ready":false,"insight":"Continuous testing is critical due to changing attack surfaces and potential 345 days of unvalidate..
2:10 pm, June 3, 2026 Cybersecurity
Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore
Assume the breach. Zero-days keep shipping, AI is writing exploits faster than anyone patches, and "patch everything in time" stopped working years ago. Stop betting the org on winning that race. You ..
1:10 pm, June 3, 2026 Cybersecurity
Acer working to patch max severity zero-days in Wave 7 routers
{ "priority": "CRITICAL", "cve": "N/A", "target": "Acer Wave 7 mesh routers", "threat_actor": "N/A", "patch_ready": false, "insight": "Acer is working to patch two maximum-severity zero-da..
12:10 pm, June 3, 2026 Cybersecurity
Police dismantles 9 crime groups in illegal streaming crackdown
{ "priority": "LOW", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Law enforcement agencies cracked down on 9 organized crime groups involved in i..
11:10 am, June 3, 2026 Cybersecurity
Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
{ "priority": "HIGH", "cve": "CVE-2026-33829", "target": "Windows Search", "threat_actor": "N/A", "patch_ready": false, "insight": "Unpatched Windows Search URI vulnerability allows attack..
11:10 am, June 3, 2026 Cybersecurity
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
{ "priority": "CRITICAL", "cve": "N/A", "target": "NGINX, Apache HTTPD, Microsoft IIS, Envoy, Cloudflare Pingora", "threat_actor": "N/A", "patch_ready": false, "insight": "Remote DoS explo..
10:10 am, June 3, 2026 Cybersecurity
Google adds Android protection against AI deepfake scam calls
{ "priority": "INFO", "cve": "N/A", "target": "Android", "threat_actor": "N/A", "patch_ready": false, "insight": "Google introduces Android feature to detect AI deepfake scam calls." }
9:10 am, June 3, 2026 Cybersecurity
Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content
{ "priority": "HIGH", "cve": "N/A", "target": "Minecraft", "threat_actor": "Weedhack", "patch_ready": false, "insight": "Weedhack campaign targets Minecraft players via YouTube to spread m..
8:10 am, June 3, 2026 Cybersecurity
VS Code zero-day lets hackers steal GitHub tokens in one click
{ "priority": "CRITICAL", "cve": "N/A", "target": "Visual Studio Code (VS Code)", "threat_actor": "N/A", "patch_ready": false, "insight": "A zero-day vulnerability in VS Code allows attack..
8:10 am, June 3, 2026 Cybersecurity
Over 116,000 Minecraft systems infected in WeedHack malware campaign
{ "priority": "HIGH", "cve": "N/A", "target": "Minecraft", "threat_actor": "WeedHack", "patch_ready": false, "insight": "WeedHack malware campaign infects over 116,000 Minecraft systems." ..
4:10 am, June 3, 2026 Cybersecurity
ISC Stormcast For Wednesday, June 3rd, 2026 https://isc.sans.edu/podcastdetail/9956, (Wed, Jun 3rd)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "ISC Stormcast podcast details for June 3rd, 2026." }
2:10 am, June 3, 2026 Cybersecurity
OpenAI upgrades GPT-5.5, as it plans to retire legacy ChatGPT models
{"priority":"INFO","cve":"N/A","target":"GPT-5.5","threat_actor":"N/A","patch_ready":false,"insight":"OpenAI upgrades GPT-5.5 with improvements ahead of legacy ChatGPT model retirement"}
11:10 pm, June 2, 2026 Cybersecurity
Microsoft's Coreutils project brings Linux commands to Windows
{ "priority": "INFO", "cve": "N/A", "target": "Windows", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft releases Coreutils for Windows, bringing Linux command-line util..
11:10 pm, June 2, 2026 Cybersecurity
Over 116,000 Mincraft systems infected in WeedHack malware campaign
{ "priority": "HIGH", "cve": "N/A", "target": "Minecraft", "threat_actor": "WeedHack", "patch_ready": false, "insight": "WeedHack malware campaign infects over 116,000 Minecraft systems." ..
10:15 pm, June 2, 2026 Cybersecurity
Critical Kirki flaw exploited to hijack WordPress admin accounts
{ "priority": "CRITICAL", "cve": "CVE-2026-8206", "target": "Kirki plugin for WordPress", "threat_actor": "N/A", "patch_ready": true, "insight": "Hackers exploit critical Kirki plugin vuln..
10:15 pm, June 2, 2026 Cybersecurity
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
{ "priority": "HIGH", "cve": "CVE-2025-48595", "target": "Android", "threat_actor": "N/A", "patch_ready": true, "insight": "Google patches 124 flaws in June 2026 Android update, including ..
8:10 pm, June 2, 2026 Cybersecurity
AI-built ransomware toolkit automates EDR evasion, AD discovery
{ "priority": "HIGH", "cve": "N/A", "target": "Endpoint Detection and Response (EDR) solutions", "threat_actor": "Unknown threat actor", "patch_ready": false, "insight": "AI-built ransomwa..
8:10 pm, June 2, 2026 Cybersecurity
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
{ "priority": "CRITICAL", "cve": "CVE-2024-21182", "target": "Oracle WebLogic Server", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA adds CVE-2024-21182 to KEV Catalog due t..
7:10 pm, June 2, 2026 Cybersecurity
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
{ "priority": "HIGH", "cve": "CVE-2025-8088", "target": "WinRAR", "threat_actor": "Gamaredon", "patch_ready": false, "insight": "Gamaredon exploits WinRAR vulnerability CVE-2025-8088 to de..
7:10 pm, June 2, 2026 Cybersecurity
Microsoft Exchange Online outage causes email delays, failures
{"priority": "INFO", "cve": "N/A", "target": "Microsoft Exchange Online", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft is addressing a service issue causing email delays and fail..
5:10 pm, June 2, 2026 Cybersecurity
Why the browser is now the front line for AI security
AI-powered attacks and shadow AI adoption are creating new security risks inside the browser. Push Security explains why browser visibility is becoming critical for both threat detection and AI govern..
4:10 pm, June 2, 2026 Cybersecurity
Instagram users locked out after Meta AI abused to steal accounts
Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they were the legitimate owners. [...]
4:10 pm, June 2, 2026 Cybersecurity
CISA flags two-year-old Oracle flaw as actively exploited in attacks
{ "priority": "HIGH", "cve": "N/A", "target": "Oracle WebLogic Server", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA flags two-year-old Oracle WebLogic Server vulnerability..
1:10 pm, June 2, 2026 Cybersecurity
How Leading Organizations Are Turning EDR Into Operational Resilience
{"priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The adoption of Endpoint Detection and Response (EDR) is increasing as organizations move b..
12:10 pm, June 2, 2026 Cybersecurity
AI Testing
