List cybersec
Australia warns of global campaign targeting vulnerable CMS platforms
{ "priority": "HIGH", "cve": "N/A", "target": "Content Management Systems (CMS) and plugins", "threat_actor": "N/A", "patch_ready": false, "insight": "Australian Cyber Security Centre warn..
3:10 pm, July 11, 2026 Cybersecurity
Wireshark 4.6.7 Released, (Sat, Jul 11th)
{ "priority": "MEDIUM", "cve": "N/A", "target": "Wireshark", "threat_actor": "N/A", "patch_ready": true, "insight": "Wireshark 4.6.7 released, fixing 12 vulnerabilities and 16 bugs." }
10:10 am, July 11, 2026 Cybersecurity
'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
{ "priority": "HIGH", "cve": "N/A", "target": "AI agents", "threat_actor": "N/A", "patch_ready": false, "insight": "Researchers demonstrate a technique called 'Ghostcommit' that hides prom..
9:10 am, July 11, 2026 Cybersecurity
Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
{ "priority": "CRITICAL", "cve": "N/A", "target": "Zimbra Classic Web Client", "threat_actor": "N/A", "patch_ready": true, "insight": "Critical Zimbra flaw allows crafted emails to execute..
8:10 am, July 11, 2026 Cybersecurity
New U-Boot flaws could enable stealthy firmware attacks
Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks th..
10:10 pm, July 10, 2026 Cybersecurity
URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
{"priority": "CRITICAL", "cve": "N/A", "target": "Progress ShareFile Storage Zone Controllers", "threat_actor": "N/A", "patch_ready": false, "insight": "Progress Software urges ShareFile customers to ..
7:10 pm, July 10, 2026 Cybersecurity
Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot
{ "priority": "HIGH", "cve": "N/A", "target": "U-Boot", "threat_actor": "N/A", "patch_ready": false, "insight": "Six new U-Boot flaws could let malicious images crash devices or run code a..
6:10 pm, July 10, 2026 Cybersecurity
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
``` { "priority": "CRITICAL", "cve": "N/A", "target": "@injectivelabs/sdk-ts", "threat_actor": "Unknown threat actors", "patch_ready": false, "insight": "Compromised GitHub repository publ..
6:10 pm, July 10, 2026 Cybersecurity
Ryuk ransomware member pleads guilty in the US, faces 15 years in prison
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "Ryuk ransomware", "patch_ready": false, "insight": "A member of the Ryuk ransomware group has pleaded guilty in the US..
6:10 pm, July 10, 2026 Cybersecurity
Progress urges ShareFile admins to shut down servers over “credible” threat
{"priority":"CRITICAL","cve":"N/A","target":"Progress ShareFile","threat_actor":"N/A","patch_ready":false,"insight":"Progress Software urges ShareFile admins to shut down servers due to a credible ext..
5:10 pm, July 10, 2026 Cybersecurity
Police suspects Dutch hackers were involved in Odido breach
{"priority": "INFO", "cve": "N/A", "target": "Odido", "threat_actor": "Dutch hackers", "patch_ready": false, "insight": "Dutch National Police suspect Dutch hackers were involved in a February breach ..
5:10 pm, July 10, 2026 Cybersecurity
Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched
{ "priority": "MEDIUM", "cve": "N/A", "target": "Tangem Wallet", "threat_actor": "Ledger's Donjon security team", "patch_ready": false, "insight": "A laser attack can reset Tangem Wallet p..
4:10 pm, July 10, 2026 Cybersecurity
Money launderer accused of stealing seized crypto while in prison
{ "priority": "LOW", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A Bulgarian national charged with stealing $290,000 in seized cryptocurrency wh..
4:10 pm, July 10, 2026 Cybersecurity
Hackers exploit critical auth bypass in Gitea Docker image
Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators. [....
4:10 pm, July 10, 2026 Cybersecurity
Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
{ "priority": "HIGH", "cve": "N/A", "target": "OpenClaw", "threat_actor": "N/A", "patch_ready": true, "insight": "Three high-severity vulnerabilities in OpenClaw could enable credential th..
3:10 pm, July 10, 2026 Cybersecurity
Attackers Exploit 'Ill Bloom' Vulnerability to Drain Over $5 Million From Cryptocurrency Wallets
Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are already using it. The flaw is in how some wallet software generated its recovery phrase, the words t..
2:10 pm, July 10, 2026 Cybersecurity
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MODBEACON. Chinese cybersecurity company QiAnXin said that while the th..
2:10 pm, July 10, 2026 Cybersecurity
The Replicant in Your Directory: AI Agents and the Identity Security Gap
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "AI agents are increasing non-human identities, expanding the enterprise attack..
2:10 pm, July 10, 2026 Cybersecurity
Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
{ "priority": "HIGH", "cve": "N/A", "target": "Microsoft 365", "threat_actor": "O-UNC-066", "patch_ready": false, "insight": "Threat actor O-UNC-066 uses fake Microsoft Entra passkey enrol..
12:10 pm, July 10, 2026 Cybersecurity
Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking
``` { "priority": "HIGH", "cve": "N/A", "target": "Free Android VPN Apps", "threat_actor": "N/A", "patch_ready": false, "insight": "Many free Android VPN apps fail to keep user traffic pri..
12:10 pm, July 10, 2026 Cybersecurity
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites
A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exposed the operation's inner workings: the hacking tools, the activity logs, and target lists naming mo..
12:10 pm, July 10, 2026 Cybersecurity
From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The article discusses Lumen Technologies' experience in rebuilding their expos..
12:10 pm, July 10, 2026 Cybersecurity
Zimbra urges customers to patch critical web client XSS flaw
{"priority": "CRITICAL", "cve": "N/A", "target": "Zimbra Classic Web Client", "threat_actor": "N/A", "patch_ready": true, "insight": "Zimbra urges customers to patch critical web client XSS flaw in Cl..
12:10 pm, July 10, 2026 Cybersecurity
Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers
{ "priority": "HIGH", "cve": "N/A", "target": "XQUIC", "threat_actor": "N/A", "patch_ready": false, "insight": "Unpatched XRING flaw in XQUIC allows remote clients to crash HTTP/3 servers ..
12:10 pm, July 10, 2026 Cybersecurity
Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks
{ "priority": "MEDIUM", "cve": "N/A", "target": "BlackCat", "threat_actor": "BlackCat", "patch_ready": false, "insight": "Former ransomware negotiator sentenced to 70 months in prison for ..
10:10 am, July 10, 2026 Cybersecurity
Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets
Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are already using it. The flaw is in how some wallet software generated its recovery phrase, the words t..
10:10 am, July 10, 2026 Cybersecurity
"Comment stuffing" in an HTML phishing attachment as a mechanism for evading AI-based detection?, (Fri, Jul 10th)
Anyone who deals with phishing messages caught by basic security filters knows that most phishing samples tend to blend into one another, since only a small set of techniques and approaches keeps reap..
10:10 am, July 10, 2026 Cybersecurity
Former ransomware negotiator gets 4 years for BlackCat attacks
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "BlackCat (ALPHV)", "patch_ready": false, "insight": "Former ransomware negotiator sentenced to 4 years for involvement..
9:10 am, July 10, 2026 Cybersecurity
ISC Stormcast For Friday, July 10th, 2026 https://isc.sans.edu/podcastdetail/10002, (Fri, Jul 10th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
2:10 am, July 10, 2026 Cybersecurity
OpenMandriva Linux says contributor tried to sabotage the project
{ "priority": "LOW", "cve": "N/A", "target": "OpenMandriva Linux", "threat_actor": "N/A", "patch_ready": false, "insight": "OpenMandriva Linux project was targeted by an attempted act of i..
11:10 pm, July 9, 2026 Cybersecurity
Injective SDK on npm infected with cryptocurrency wallet stealer
{ "priority": "CRITICAL", "cve": "N/A", "target": "Injective SDK", "threat_actor": "N/A", "patch_ready": false, "insight": "Injective Labs SDK project GitHub repository compromised, publis..
8:10 pm, July 9, 2026 Cybersecurity
New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
{ "priority": "HIGH", "cve": "N/A", "target": "Windows", "threat_actor": "N/A", "patch_ready": false, "insight": "GigaWiper Windows backdoor combines disk wiping, fake ransomware, and spyw..
7:10 pm, July 9, 2026 Cybersecurity
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
{ "priority": "HIGH", "cve": "N/A", "target": "GitHub", "threat_actor": "N/A", "patch_ready": false, "insight": "Attackers are using dormant GitHub accounts and automated scraping tools to..
7:10 pm, July 9, 2026 Cybersecurity
ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
{"priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Weekly threat intelligence recap covering various security stories."}
5:10 pm, July 9, 2026 Cybersecurity
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
{"priority":"MEDIUM","cve":"N/A","target":"npm","threat_actor":"N/A","patch_ready":false,"insight":"npm version 12 disables install scripts by default to mitigate supply chain risks."}
5:10 pm, July 9, 2026 Cybersecurity
Microsoft expects more Windows security updates from AI-discovered flaws
{ "priority": "INFO", "cve": "N/A", "target": "Windows", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft expects an increase in Windows security updates due to AI-discov..
5:10 pm, July 9, 2026 Cybersecurity
New Helix vishing group emerges in SharePoint data theft attacks
A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePo..
5:10 pm, July 9, 2026 Cybersecurity
The Hidden Security Risks of Reduced Summer IT Coverage
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The article discusses the security risks associated with reduced IT coverage d..
3:10 pm, July 9, 2026 Cybersecurity
New Forg365 phishing platform uses AI to target Microsoft 365 accounts
{"priority":"HIGH","cve":"N/A","target":"Microsoft 365","threat_actor":"Forg365","patch_ready":false,"insight":"New Forg365 phishing platform uses AI to target Microsoft 365 accounts"}
3:10 pm, July 9, 2026 Cybersecurity
AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The increasing use of AI by attackers to accelerate their operations highlight..
1:10 pm, July 9, 2026 Cybersecurity
GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
{ "priority": "HIGH", "cve": "N/A", "target": "GodDamn Ransomware", "threat_actor": "N/A", "patch_ready": false, "insight": "GodDamn Ransomware uses PoisonX Driver to disable endpoint defe..
12:10 pm, July 9, 2026 Cybersecurity
Summer of Clearinghouses
Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart is that it was already real and running when we annou..
12:10 pm, July 9, 2026 Cybersecurity
Microsoft to retire the OWA Light client in Exchange Server
{ "priority": "INFO", "cve": "N/A", "target": "Microsoft Exchange Server", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft announces retirement of OWA Light client in fu..
11:10 am, July 9, 2026 Cybersecurity
Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges
{ "priority": "HIGH", "cve": "CVE-2026-50656", "target": "Microsoft Defender", "threat_actor": "N/A", "patch_ready": true, "insight": "Microsoft patches CVE-2026-50656, a privilege escalat..
10:10 am, July 9, 2026 Cybersecurity
Police arrests 5,800 suspects in global anti-fraud crackdown
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Global law enforcement operation results in 5,811 arrests and $293 million in ..
10:10 am, July 9, 2026 Cybersecurity
Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images
{ "priority": "INFO", "cve": "N/A", "target": "Meta AI Image Tool", "threat_actor": "N/A", "patch_ready": false, "insight": "Meta's new AI image tool, Muse Image, allows users to generate ..
8:10 am, July 9, 2026 Cybersecurity
AssuranceAmerica data breach exposes records of 6.9 million drivers
{ "priority": "HIGH", "cve": "N/A", "target": "AssuranceAmerica", "threat_actor": "N/A", "patch_ready": false, "insight": "AssuranceAmerica disclosed a data breach impacting 6.9 million dr..
8:10 am, July 9, 2026 Cybersecurity
Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
{"priority":"CRITICAL","cve":"N/A","target":"AI coding agents","threat_actor":"N/A","patch_ready":false,"insight":"AI coding agents can be tricked into running malicious code"}
6:10 am, July 9, 2026 Cybersecurity
Microsoft patches RoguePlanet Defender zero-day vulnerability
{ "priority": "CRITICAL", "cve": "N/A", "target": "Microsoft Defender", "threat_actor": "N/A", "patch_ready": true, "insight": "Microsoft patched a zero-day vulnerability in Defender known..
6:10 am, July 9, 2026 Cybersecurity
Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes
Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprisi..
5:10 am, July 9, 2026 Cybersecurity
AI Testing
