Top submissions

1. 1.	Broccoli2Shell: Brotli decoder RCE (CVE-2026-111497) in Node.js, Python and more (broccoli2shell.com) Vulnerability
   ▲	by samBa | discuss

2. 2.	Gheist campaign plants secret-dumping workflows using stolen GitHub tokens (wiz.io) Supply Chain Threat Intel GitHub
   ▲	by lschueller | discuss

3. 3.	Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List (phoronix.com) Vulnerability Kernel linux
   ▲	by lschueller | discuss

4. 4.	CVE-2026-111943: Compromised Intermediate Certificate Authority (nvd.nist.gov) Certificates Compromise
   ▲	by lschueller | discuss

5. 5.	PHP2Shell (php2shell.com) CVE Vulnerability PHP
   ▲	by raidn | discuss

6. 6.	Upcoming critical PHP security release (CVE-2026-109618 / -109619) (news-web.php.net) CVE
   ▲	by samBa | discuss

7. 7.	The Internet goes on high alert after discovery of 8 compromised TLS certs (arstechnica.com) Compromise TLS
   ▲	by lschueller | discuss

8. 8.	ConnectWise customers hit by supply-chain attack linked to compromised API secret (cyberscoop.com) Supply Chain M365
   ▲	by EXPO | discuss

9. 9.	Palo Alto's firewall OS has been under attack from multiple ransomware groups since June (theregister.com) News Ransomware
   ▲	by jame_kig | discuss

10. 10.	One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux (quentinkaiser.be) Research Vulnerability Broadcom Hardware Wifi
    ▲	by lschueller | discuss

11. 11.	Can You Get Root With Only a Cigarette Lighter? (da.vidbuchanan.co.uk) Research Exploit
    ▲	by enderal | discuss

12. 12.	Chinese Cars in Norway Stored Military Exercise Footage and Access Codes (militarnyi.com) News Espionage
    ▲	by danreom | discuss

13. 13.	Russian AEZA infrastructure thrives despite heavy sanctions (qurium.org) Threat Intel
    ▲	by danreom | discuss

14. 14.	Zero-Click Spyware Delivered via Targeted Ads: AdFection (citizenlab.ca) Research Threat Intel Malvertising
    ▲	by lschueller | discuss

15. 15.	Cyberattack halts construction of tunnel between Denmark and Germany (ua.news) News Attack
    ▲	by lschueller | discuss

16. 16.	'Unprecedented' Cyberattack cripples supermarket fridges across Europe as hackers activate automatic defrosting (tomshardware.com) News Attack
    ▲	by janki | discuss

17. 17.	Dark models: AI is making Chinese cyberattacks harder to detect and punish (theins.press) Threat Intel AI Analysis
    ▲	by lschueller | discuss

18. 18.	The GRU’s dud drone: How Russian intelligence botched a sabotage plot at Leipzig airport (theins.press) Threat Intel Intelligence Nation-state Warfare
    ▲	by reddragon3919 | discuss

19. 19.	Iran-associated Blinder Tunnel Campaign Targets Iraqi Infrastructure (unit42.paloaltonetworks.com)
    ▲	by raidn | discuss

20. 20.	Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware (zscaler.com)
    ▲	by danreom | discuss

21. 21.	Morocco: Whistleblower reveals how authorities used a web of surveillance to silence journalists and activists (amnesty.org)
    ▲	by jame_kig | discuss

22. 22.	Atlassian Vulnerability Comes Under Attack Hours After Details Go Public (securityaffairs.com)
    ▲	by danreom | discuss

23. 23.	proxy software Xray-core covered up a certification verification bypass vulnerability (github.com) Vulnerability Proxy
    ▲	by lschueller | discuss

24. 24.	Denmark data breach exposes 8.8M people's personal data (cpr.dk) Breach News
    ▲	by lschueller | discuss

25. 25.	Two US-bound vessels apparently compromised by hackers (reuters.com) Breach News
    ▲	by lschueller | discuss

26. 26.	Spectre bug is back, this time to haunt JIT engines (theregister.com) Research Vulnerability Kernel root
    ▲	by lschueller | discuss

27. 27.	Every OT breach has a file in its attack chain: The ICS/OT Threat Landscape, 2024–2026 (opswat.com)
    ▲	by reddragon3919 | discuss

28. 28.	Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT (securityaffairs.com)
    ▲	by raidn | discuss

29. 29.	Sourcehut account takeover via build logs (XSS in ansi2html) (blog.arusekk.pl) Vulnerability
    ▲	by lschueller | discuss

30. 30.	‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees (404media.co)
    ▲	by jame_kig | discuss