List cybersec
Malicious Edge extension abuses Native Messaging as bridge to malware
{ "priority": "HIGH", "cve": "N/A", "target": "Microsoft Edge", "threat_actor": "N/A", "patch_ready": false, "insight": "A malicious Microsoft Edge extension named 'Edgecution' was used in..
9:10 pm, June 24, 2026 Cybersecurity
Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered
{"priority":"HIGH","cve":"N/A","target":"Amadey and StealC","threat_actor":"N/A","patch_ready":false,"insight":"Law enforcement disrupts Amadey and StealC malware network, recovering 27M stolen creden..
6:10 pm, June 24, 2026 Cybersecurity
CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited
{ "priority": "CRITICAL", "cve": "CVE-2025-67038", "target": "Lantronix EDS5000 Series devices", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA warns of active exploitation o..
6:10 pm, June 24, 2026 Cybersecurity
Amadey, StealC malware operations disrupted in Operation Endgame action
{ "priority": "HIGH", "cve": "N/A", "target": "Amadey", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft and Europol disrupted Amadey and StealC malware operations in Ope..
3:10 pm, June 24, 2026 Cybersecurity
CISA warns of max severity Ubiquiti flaws exploited in attacks
{ "priority": "CRITICAL", "cve": "N/A", "target": "Ubiquiti UniFi OS, Lantronix serial-to-ethernet servers", "threat_actor": "N/A", "patch_ready": false, "insight": "CISA warns of actively..
3:10 pm, June 24, 2026 Cybersecurity
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
``` { "priority": "CRITICAL", "cve": "N/A", "target": "GitHub Repositories", "threat_actor": "N/A", "patch_ready": false, "insight": "A critical exploitable pattern, codenamed Cordyceps, a..
2:10 pm, June 24, 2026 Cybersecurity
Securing the service desk: Why social engineering attacks keep succeeding
Service desks have become a favored target for attackers seeking password resets, MFA changes, and access to corporate accounts. Specops Software breaks down how service desk social engineering attack..
2:10 pm, June 24, 2026 Cybersecurity
Dawn of the Apex Agentic Adversary
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The era of human-speed threats in cybersecurity is ending, with dwell time now..
1:10 pm, June 24, 2026 Cybersecurity
Stealthy Mistic backdoor linked to ransomware access broker KongTuke
{"priority":"HIGH","cve":"N/A","target":"Mistic backdoor","threat_actor":"KongTuke","patch_ready":false,"insight":"A new backdoor called Mistic has been linked to financially motivated attacks by rans..
11:10 am, June 24, 2026 Cybersecurity
DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering
{ "priority": "INFO", "cve": "N/A", "target": "Huione Cloud", "threat_actor": "N/A", "patch_ready": false, "insight": "The U.S. Department of Justice seized a cloud account tied to HuiOne ..
10:10 am, June 24, 2026 Cybersecurity
Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root
Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Editio..
8:10 am, June 24, 2026 Cybersecurity
Linux Process Name Masquerading, (Wed, Jun 24th)
{ "priority": "INFO", "cve": "N/A", "target": "Linux", "threat_actor": "Velvet Ant Chinese group", "patch_ready": false, "insight": "Linux process name masquerading is a technique used by ..
7:10 am, June 24, 2026 Cybersecurity
ISC Stormcast For Wednesday, June 24th, 2026 https://isc.sans.edu/podcastdetail/9984, (Wed, Jun 24th)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A summary of an article on how to earn a billion dollars." }
2:10 am, June 24, 2026 Cybersecurity
Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks
{"priority": "HIGH", "cve": "CVE-2026-20230", "target": "Cisco Unified Communications Manager Server", "threat_actor": "N/A", "patch_ready": "false", "insight": "A high-severity SSRF vulnerability in ..
10:10 pm, June 23, 2026 Cybersecurity
Windows 11 KB5095093 update rolls out new Point-in-Time restore feature
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Article discusses how to earn a billion dollars." }
9:10 pm, June 23, 2026 Cybersecurity
Tata Electronics confirms cyberattack as hackers leak data
{ "priority": "HIGH", "cve": "N/A", "target": "Tata Electronics", "threat_actor": "N/A", "patch_ready": false, "insight": "Tata Electronics confirms a cyberattack that impacted parts of it..
9:10 pm, June 23, 2026 Cybersecurity
FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation
{ "priority": "HIGH", "cve": "N/A", "target": "FortiGate firewalls", "threat_actor": "Russian-speaking IAB", "patch_ready": false, "insight": "Large-scale credential-harvesting operation t..
8:10 pm, June 23, 2026 Cybersecurity
Healthtech firm Xolis suffers data breach impacting 1.4 million people
{ "priority": "HIGH", "cve": "N/A", "target": "Xsolis", "threat_actor": "N/A", "patch_ready": false, "insight": "A phishing attack compromised sensitive data of 1.4 million individuals at ..
8:10 pm, June 23, 2026 Cybersecurity
New macOS ClickFix attack silently mounts DMGs to push infostealer
{ "priority": "HIGH", "cve": "N/A", "target": "macOS", "threat_actor": "N/A", "patch_ready": false, "insight": "New macOS ClickFix campaign uses Terminal commands to silently download, mou..
7:10 pm, June 23, 2026 Cybersecurity
Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration
{ "priority": "MEDIUM", "cve": "N/A", "target": "Federal Agencies", "threat_actor": "N/A", "patch_ready": false, "insight": "President Trump's executive order sets deadlines for federal ag..
5:10 pm, June 23, 2026 Cybersecurity
Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents
{"priority":"MEDIUM","cve":"N/A","target":"AI Agent Skill Security Scanners","threat_actor":"AIR","patch_ready":false,"insight":"Security firm AIR created a fake AI agent skill that bypassed security ..
5:10 pm, June 23, 2026 Cybersecurity
Scattered Spider Hackers Plead Guilty on Day 1 of Trial
{ "priority": "LOW", "cve": "N/A", "target": "Transport for London", "threat_actor": "Scattered Spider", "patch_ready": false, "insight": "Two Scattered Spider members plead guilty to cybe..
5:10 pm, June 23, 2026 Cybersecurity
Scattered Spider members plead guilty to hacking Transport for London
{ "priority": "HIGH", "cve": "N/A", "target": "Transport for London", "threat_actor": "Scattered Spider", "patch_ready": false, "insight": "Two members of the Scattered Spider cybercrime g..
4:10 pm, June 23, 2026 Cybersecurity
GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns
{"priority":"MEDIUM","cve":"N/A","target":"GitHub actions/checkout","threat_actor":"N/A","patch_ready":true,"insight":"GitHub updates actions/checkout to block common pwn request attack patterns by st..
3:10 pm, June 23, 2026 Cybersecurity
LastPass confirms data breach in Klue supply chain attack
{ "priority": "HIGH", "cve": "N/A", "target": "LastPass", "threat_actor": "Klue", "patch_ready": false, "insight": "LastPass confirms data breach in Klue supply chain attack." }
2:10 pm, June 23, 2026 Cybersecurity
The Exploit Doesn't Exist. You Can Still Prove It Works Against You
{ "priority": "HIGH", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Attackers can rapidly weaponize newly disclosed vulnerabilities, making it cru..
2:10 pm, June 23, 2026 Cybersecurity
Agentic AI: The Weapon That No Longer Needs a Warrior
Every weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm. The bow sent the point flying without the throw. The rifle placed a man's death a quarter mile..
1:10 pm, June 23, 2026 Cybersecurity
Webinar: Why email security teams are drowning in alerts
Phishing, BEC, and account takeover attacks continue to overwhelm security teams with alerts and investigations. This webinar explores how behavioral AI can help automate detection and response workfl..
1:10 pm, June 23, 2026 Cybersecurity
Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT
Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan (RAT). The list of identified packages, is below - aes-..
10:10 am, June 23, 2026 Cybersecurity
WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool
Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script (VBScript) files that lead to the installation of legitimate Remote Monitoring and Management (RMM) softwar..
7:10 am, June 23, 2026 Cybersecurity
OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws
{"priority": "INFO", "cve": "N/A", "target": "GPT-5.5-Cyber", "threat_actor": "N/A", "patch_ready": false, "insight": "OpenAI releases improved GPT-5.5-Cyber model to help defenders patch security fla..
5:10 am, June 23, 2026 Cybersecurity
CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd)
{ "priority": "MEDIUM", "cve": "CVE-2024-40766", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A patch was released for CVE-2024-40766 but configuration issues ..
3:10 am, June 23, 2026 Cybersecurity
ISC Stormcast For Tuesday, June 23rd, 2026 https://isc.sans.edu/podcastdetail/9982, (Tue, Jun 23rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
2:10 am, June 23, 2026 Cybersecurity
WhatsApp phishing attack uses fake business docs to hack PCs
{ "priority": "HIGH", "cve": "N/A", "target": "WhatsApp", "threat_actor": "N/A", "patch_ready": false, "insight": "Malware campaign targets WhatsApp users with deceptive messages pushing V..
11:10 pm, June 22, 2026 Cybersecurity
JaredFromSubway MEV bot hacked in $15 million crypto theft
{ "priority": "HIGH", "cve": "N/A", "target": "JaredFromSubway MEV bot", "threat_actor": "N/A", "patch_ready": false, "insight": "An attacker manipulated the opportunity-detection logic of..
10:10 pm, June 22, 2026 Cybersecurity
FFmpeg fixes PixelSmash flaw in widely used video decoder
{ "priority": "HIGH", "cve": "N/A", "target": "FFmpeg", "threat_actor": "N/A", "patch_ready": true, "insight": "FFmpeg fixes PixelSmash flaw in widely used video decoder, preventing remote..
9:10 pm, June 22, 2026 Cybersecurity
FortiBleed campaign used custom FortiGate sniffer to steal credentials
{ "priority": "HIGH", "cve": "N/A", "target": "Fortinet FortiGate", "threat_actor": "N/A", "patch_ready": false, "insight": "FortiBleed campaign uses custom FortiGate sniffers to steal cre..
8:10 pm, June 22, 2026 Cybersecurity
ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack
{ "priority": "CRITICAL", "cve": "N/A", "target": "ShapedPlugin WordPress Pro Plugins", "threat_actor": "Unknown threat actors", "patch_ready": false, "insight": "Multiple WordPress plugin..
7:10 pm, June 22, 2026 Cybersecurity
Microsoft fixes AutoGen Studio flaw that enabled code execution
A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio interface for prototyping AI agents could let attackers manipulate an agent into executing arbitrary commands on its host system sim..
6:10 pm, June 22, 2026 Cybersecurity
Microsoft says Windows 11 26H2 is coming soon, details upgrade process
{ "priority": "INFO", "cve": "N/A", "target": "Windows 11", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft announces upcoming Windows 11 version 26H2 with a simple upgr..
6:10 pm, June 22, 2026 Cybersecurity
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platform with more than 146,000 GitHub stars, that could allow attackers to stealthily..
5:10 pm, June 22, 2026 Cybersecurity
A Glimpse into the “Search Your Target” Market for Stolen Credentials
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "An emerging underground market allows attackers to search stolen credential da..
3:10 pm, June 22, 2026 Cybersecurity
Webshells Remain Popular, (Mon, Jun 22nd)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Webshells remain a popular tool among threat actors, with a new player emergin..
3:10 pm, June 22, 2026 Cybersecurity
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
{ "priority": "HIGH", "cve": "N/A", "target": "Squid", "threat_actor": "N/A", "patch_ready": false, "insight": "A 29-year-old heap over-read bug in Squid web proxy, named Squidbleed, can l..
3:10 pm, June 22, 2026 Cybersecurity
Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries
{ "priority": "INFO", "cve": "N/A", "target": "Android", "threat_actor": "N/A", "patch_ready": false, "insight": "Google sets a deadline for Android developer verification in Brazil, Indon..
2:10 pm, June 22, 2026 Cybersecurity
New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
{ "priority": "HIGH", "cve": "N/A", "target": "Google Ads users", "threat_actor": "Russian-speaking financially motivated group", "patch_ready": false, "insight": "New OXLOADER malware loa..
2:10 pm, June 22, 2026 Cybersecurity
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Weekly recap of various threat actors and vulnerabilities, including browser b..
1:10 pm, June 22, 2026 Cybersecurity
Stop Your Legacy Infrastructure from Hijacking Your AI Agents
{"priority":"INFO","cve":"N/A","target":"N/A","threat_actor":"N/A","patch_ready":false,"insight":"The article discusses a blind spot in security programs where attackers use legacy infrastructure to h..
1:10 pm, June 22, 2026 Cybersecurity
Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices
{"priority":"INFO","cve":"N/A","target":"N/A","threat_actor":"N/A","patch_ready":false,"insight":"Canada's spy agency used a first-of-its-kind warrant to clean botnet-infected devices, neutralizing tw..
10:10 am, June 22, 2026 Cybersecurity
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
{"priority":"HIGH","cve":"N/A","target":"Legacy Routers","threat_actor":"AryStinger","patch_ready":false,"insight":"AryStinger malware infects 4,300 legacy routers to build a reconnaissance proxy netw..
8:10 am, June 22, 2026 Cybersecurity
AI Testing
