List cybersec
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO
{ "priority": "HIGH", "cve": "N/A", "target": "npm, PyPI, CratesIO", "threat_actor": "TrapDoor", "patch_ready": false, "insight": "A coordinated cross-ecosystem software supply chain attac..
7:10 am, May 25, 2026 Cybersecurity
Wireshark 4.6.6 Released, (Sun, May 24th)
{ "priority": "MEDIUM", "cve": "N/A", "target": "Wireshark", "threat_actor": "N/A", "patch_ready": true, "insight": "Wireshark 4.6.6 fixes 1 vulnerability and 11 bugs." }
5:10 pm, May 24, 2026 Cybersecurity
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
{ "priority": "CRITICAL", "cve": "CVE-2026-26980", "target": "Ghost CMS", "threat_actor": "N/A", "patch_ready": true, "insight": "Critical SQL injection flaw in Ghost CMS exploited in larg..
3:10 pm, May 24, 2026 Cybersecurity
Laravel Lang packages hijacked to deploy credential-stealing malware
{ "priority": "HIGH", "cve": "N/A", "target": "Laravel Lang localization packages", "threat_actor": "N/A", "patch_ready": false, "insight": "A supply chain attack on Laravel Lang packages ..
9:10 pm, May 23, 2026 Cybersecurity
Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
{ "priority": "HIGH", "cve": "N/A", "target": "Packagist packages", "threat_actor": "N/A", "patch_ready": false, "insight": "A coordinated supply chain attack campaign infected 8 Packagist..
5:10 pm, May 23, 2026 Cybersecurity
npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
{ "priority": "MEDIUM", "cve": "N/A", "target": "npm", "threat_actor": "N/A", "patch_ready": false, "insight": "npm introduces staged publishing with 2FA-gated approval to prevent supply c..
5:10 pm, May 23, 2026 Cybersecurity
Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes
Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platforms, including Netflix, Disney+, and Spotify. [...]
3:10 pm, May 23, 2026 Cybersecurity
Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software
{"priority": "HIGH", "cve": "N/A", "target": "Widely Used Software", "threat_actor": "N/A", "patch_ready": false, "insight": "Claude Mythos AI's Project Glasswing uncovers 10,000 high-severity flaws i..
1:10 pm, May 23, 2026 Cybersecurity
Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer
Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive credential-stealing f..
11:10 am, May 23, 2026 Cybersecurity
Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
{"priority": "CRITICAL", "cve": "CVE-2026-9082", "target": "Drupal Core", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA adds actively exploited Drupal Core SQL Injection bug to KEV cata..
8:10 am, May 23, 2026 Cybersecurity
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
{"priority": "CRITICAL", "cve": "CVE-2026-48172", "target": "LiteSpeed User-End cPanel Plugin", "threat_actor": "N/A", "patch_ready": false, "insight": "LiteSpeed cPanel Plugin CVE-2026-48172 exploite..
8:10 am, May 23, 2026 Cybersecurity
An Example of Stack String in High Level Language, (Sat, May 23rd)
{"priority":"INFO","cve":"N/A","target":"N/A","threat_actor":"N/A","patch_ready":false,"insight":"The author is attending a SANS training on Red Teaming Tools, focusing on developing Windows implants,..
6:10 am, May 23, 2026 Cybersecurity
First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups
{ "priority": "HIGH", "cve": "N/A", "target": "First VPN Service", "threat_actor": "N/A", "patch_ready": false, "insight": "Authorities dismantled a VPN service used by 25 ransomware group..
7:10 pm, May 22, 2026 Cybersecurity
Netherlands seizes 800 servers of hosting firm enabling cyberattacks
{"priority":"HIGH","cve":"N/A","target":"Hosting Firm","threat_actor":"N/A","patch_ready":false,"insight":"Dutch authorities seized 800 servers from a hosting firm linked to cyberattacks and disinform..
6:10 pm, May 22, 2026 Cybersecurity
Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware
{ "priority": "HIGH", "cve": "N/A", "target": "Ukraine Government Entities", "threat_actor": "Ghostwriter (UAC-0057, UNC1151)", "patch_ready": false, "insight": "Ghostwriter threat actor u..
5:10 pm, May 22, 2026 Cybersecurity
Lawmakers Demand Answers as CISA Tries to Contain Data Leak
{"priority":"HIGH","cve":"N/A","target":"CISA","threat_actor":"N/A","patch_ready":false,"insight":"CISA faces scrutiny from lawmakers over a data leak involving leaked AWS GovCloud keys and other agen..
5:10 pm, May 22, 2026 Cybersecurity
Former US execs plead guilty to aiding tech support scammers
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Former US executives plead guilty to aiding tech support scammers in a years-l..
4:10 pm, May 22, 2026 Cybersecurity
Why Chargebacks are Just One Piece of the Fraud Puzzle
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Fraud teams need broader visibility into risk and customer impact beyond charg..
2:10 pm, May 22, 2026 Cybersecurity
Drupal: Critical SQL injection flaw now targeted in attacks
{"priority": "CRITICAL", "cve": "N/A", "target": "Drupal", "threat_actor": "N/A", "patch_ready": true, "insight": "A critical SQL injection flaw in Drupal is being actively targeted in attacks."}
2:10 pm, May 22, 2026 Cybersecurity
Trend Micro warns of Apex One zero-day exploited in the wild
{ "priority": "CRITICAL", "cve": "N/A", "target": "Trend Micro Apex One", "threat_actor": "N/A", "patch_ready": true, "insight": "Trend Micro warns of Apex One zero-day exploited in the wi..
2:10 pm, May 22, 2026 Cybersecurity
Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective
{ "priority": "INFO", "cve": "N/A", "target": "Windows kernel mode drivers", "threat_actor": "N/A", "patch_ready": false, "insight": "Research analyzes exploitability of Windows kernel mod..
1:10 pm, May 22, 2026 Cybersecurity
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows
{ "priority": "HIGH", "cve": "N/A", "target": "GitHub", "threat_actor": "Megalodon", "patch_ready": false, "insight": "Megalodon campaign injects malicious GitHub Actions workflows into 5,..
1:10 pm, May 22, 2026 Cybersecurity
Ubiquiti patches three max severity UniFi OS vulnerabilities
{ "priority": "CRITICAL", "cve": "N/A", "target": "UniFi OS", "threat_actor": "N/A", "patch_ready": true, "insight": "Ubiquiti patches three maximum severity vulnerabilities in UniFi OS th..
12:10 pm, May 22, 2026 Cybersecurity
Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks
{ "priority": "LOW", "cve": "N/A", "target": "N/A", "threat_actor": "Kimwolf", "patch_ready": false, "insight": "A Canadian man, Jacob Butler, was arrested for operating the Kimwolf DDoS b..
9:10 am, May 22, 2026 Cybersecurity
US and Canada arrest and charge suspected Kimwolf botnet admin
{ "priority": "HIGH", "cve": "N/A", "target": "Kimwolf botnet", "threat_actor": "Kimwolf", "patch_ready": false, "insight": "US and Canadian authorities arrested a Canadian man suspected o..
9:10 am, May 22, 2026 Cybersecurity
CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
{ "priority": "CRITICAL", "cve": "CVE-2025-34291", "target": "Langflow and Trend Micro Apex One", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA added exploited Langflow and ..
7:10 am, May 22, 2026 Cybersecurity
Cross-Platform NPM Stealer, (Fri, May 22nd)
{ "priority": "INFO", "cve": "N/A", "target": "Node.js", "threat_actor": "N/A", "patch_ready": false, "insight": "A Node.js stealer with obfuscated code was analyzed statically, with a SHA..
7:10 am, May 22, 2026 Cybersecurity
Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
{"priority": "CRITICAL", "cve": "CVE-2026-20223", "target": "Cisco Secure Workload", "threat_actor": "N/A", "patch_ready": true, "insight": "Cisco patches a CVSS 10.0 flaw in Secure Workload REST API ..
6:10 am, May 22, 2026 Cybersecurity
ISC Stormcast For Friday, May 22nd, 2026 https://isc.sans.edu/podcastdetail/9942, (Fri, May 22nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
2:10 am, May 22, 2026 Cybersecurity
Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada
{ "priority": "LOW", "cve": "N/A", "target": "N/A", "threat_actor": "Kimwolf", "patch_ready": false, "insight": "Canadian authorities arrested a 23-year-old man suspected of building and o..
10:10 pm, May 21, 2026 Cybersecurity
Google accidentally exposed details of unfixed Chromium flaw
Google has accidentally leaked details about an unfixed issue in Chromium that keeps JavaScript running in the background even when the browser is closed, allowing remote code execution on the device...
7:10 pm, May 21, 2026 Cybersecurity
Apple blocked over $11 billion in App Store fraud in 6 years
{ "priority": "INFO", "cve": "N/A", "target": "Apple App Store", "threat_actor": "N/A", "patch_ready": false, "insight": "Apple blocked over $11 billion in App Store fraud in 6 years." }
4:10 pm, May 21, 2026 Cybersecurity
Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor
{ "priority": "HIGH", "cve": "N/A", "target": "Linux", "threat_actor": "Showboat", "patch_ready": false, "insight": "New Linux malware Showboat targets Middle East telecom with SOCKS5 prox..
3:10 pm, May 21, 2026 Cybersecurity
ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The bulletin highlights a worrying trend where attackers are exploiting truste..
2:10 pm, May 21, 2026 Cybersecurity
Selective HTTP Proxying in Linux, (Thu, May 21st)
{"priority":"INFO","cve":"N/A","target":"Linux","threat_actor":"N/A","patch_ready":false,"insight":"A technical discussion on selective HTTP proxying in Linux, highlighting the utility of tools like P..
2:10 pm, May 21, 2026 Cybersecurity
Max severity Cisco Secure Workload flaw gives Site Admin privileges
{ "priority": "CRITICAL", "cve": "N/A", "target": "Cisco Secure Workload", "threat_actor": "N/A", "patch_ready": true, "insight": "Cisco Secure Workload vulnerability allows attackers to g..
2:10 pm, May 21, 2026 Cybersecurity
Chinese hackers target telcos with new Linux, Windows malware
A Chinese cyber-espionage campaign has been targeting telecommunications providers with newly discovered Linux and Windows malware dubbed Showboat and JFMBackdoor, respectively. [...]
2:10 pm, May 21, 2026 Cybersecurity
Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The article discusses how modern crypto drainers use phishing and automation t..
2:10 pm, May 21, 2026 Cybersecurity
Police seize “First VPN” service used in ransomware, data theft attacks
{"priority": "INFO", "cve": "N/A", "target": "First VPN", "threat_actor": "N/A", "patch_ready": false, "insight": "Police seized 'First VPN' service used in ransomware and data theft attacks."}
1:10 pm, May 21, 2026 Cybersecurity
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild. The former, tracked as CVE-2026-41091, is rated 7.8 on the..
12:10 pm, May 21, 2026 Cybersecurity
When Identity is the Attack Path
Consider a cached access key on a single Windows machine. It got there the way most cached credentials do - a user logged in, and the key stored itself automatically. Standard AWS behavior. No one mis..
11:10 am, May 21, 2026 Cybersecurity
Flipper One project needs community help to build open Linux platform
Flipper Devices, the maker of the Flipper Zero pentesting tool, is asking the community to help build Flipper One, an open Linux platform for connected devices. [...]
11:10 am, May 21, 2026 Cybersecurity
9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros
{ "priority": "CRITICAL", "cve": "CVE-2026-46333", "target": "Linux kernel", "threat_actor": "N/A", "patch_ready": false, "insight": "A 9-year-old Linux kernel flaw enables root command ex..
9:10 am, May 21, 2026 Cybersecurity
Microsoft warns of new Defender zero-days exploited in attacks
{ "priority": "CRITICAL", "cve": "N/A", "target": "Microsoft Defender", "threat_actor": "N/A", "patch_ready": true, "insight": "Microsoft warns of new Defender zero-days exploited in attac..
8:10 am, May 21, 2026 Cybersecurity
GitHub links repo breach to TanStack npm supply-chain attack
{ "priority": "HIGH", "cve": "N/A", "target": "GitHub", "threat_actor": "N/A", "patch_ready": false, "insight": "GitHub repository breach linked to TanStack npm supply-chain attack via mal..
7:10 am, May 21, 2026 Cybersecurity
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
{"priority":"CRITICAL","cve":"CVE-2026-9082","target":"Drupal Core","threat_actor":"N/A","patch_ready":true,"insight":"A highly critical Drupal Core flaw exposes PostgreSQL sites to RCE attacks"}
5:10 am, May 21, 2026 Cybersecurity
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
``` { "priority": "HIGH", "cve": "N/A", "target": "GitHub", "threat_actor": "Nx Console", "patch_ready": false, "insight": "GitHub's internal repositories were breached through a malicious..
5:10 am, May 21, 2026 Cybersecurity
ISC Stormcast For Thursday, May 21st, 2026 https://isc.sans.edu/podcastdetail/9940, (Thu, May 21st)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "ISC Stormcast podcast details for Thursday, May 21st, 2026." }
2:10 am, May 21, 2026 Cybersecurity
Hackers bypass SonicWall VPN MFA due to incomplete patching
Threat actors brute-forced VPN credentials and bypassed multi-factor authentication (MFA) on SonicWall Gen6 SSL-VPN appliances to deploy tools used in ransomware attacks. [...]
10:10 pm, May 20, 2026 Cybersecurity
Ukraine identifies infostealer operator tied to 28,000 stolen accounts
{ "priority": "HIGH", "cve": "N/A", "target": "Online store in California", "threat_actor": "18-year-old man from Odesa", "patch_ready": false, "insight": "Ukrainian cyberpolice identified..
10:10 pm, May 20, 2026 Cybersecurity
AI Testing
