Newest submissions
-
1. Broccoli2Shell: Brotli decoder RCE (CVE-2026-111497) in Node.js, Python and more (broccoli2shell.com) ▲ -
2. Gheist campaign plants secret-dumping workflows using stolen GitHub tokens (wiz.io) ▲ -
3. Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List (phoronix.com) ▲ -
4. CVE-2026-111943: Compromised Intermediate Certificate Authority (nvd.nist.gov) ▲ -
5. PHP2Shell (php2shell.com) ▲ -
6. Upcoming critical PHP security release (CVE-2026-109618 / -109619) (news-web.php.net) ▲ -
7. The Internet goes on high alert after discovery of 8 compromised TLS certs (arstechnica.com) ▲ -
8. ConnectWise customers hit by supply-chain attack linked to compromised API secret (cyberscoop.com) ▲ -
9. Palo Alto's firewall OS has been under attack from multiple ransomware groups since June (theregister.com) ▲ -
10. One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux (quentinkaiser.be) ▲ -
11. Can You Get Root With Only a Cigarette Lighter? (da.vidbuchanan.co.uk) ▲ -
12. Chinese Cars in Norway Stored Military Exercise Footage and Access Codes (militarnyi.com) ▲ -
13. Russian AEZA infrastructure thrives despite heavy sanctions (qurium.org) ▲ -
14. Zero-Click Spyware Delivered via Targeted Ads: AdFection (citizenlab.ca) ▲ -
15. Cyberattack halts construction of tunnel between Denmark and Germany (ua.news) ▲ -
16. 'Unprecedented' Cyberattack cripples supermarket fridges across Europe as hackers activate automatic defrosting (tomshardware.com) ▲ -
17. Dark models: AI is making Chinese cyberattacks harder to detect and punish (theins.press) ▲ -
18. The GRU’s dud drone: How Russian intelligence botched a sabotage plot at Leipzig airport (theins.press) ▲ -
19. Iran-associated Blinder Tunnel Campaign Targets Iraqi Infrastructure (unit42.paloaltonetworks.com) ▲ -
20. Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware (zscaler.com) ▲ -
21. Morocco: Whistleblower reveals how authorities used a web of surveillance to silence journalists and activists (amnesty.org) ▲ -
22. Atlassian Vulnerability Comes Under Attack Hours After Details Go Public (securityaffairs.com) ▲ -
23. proxy software Xray-core covered up a certification verification bypass vulnerability (github.com) ▲ -
24. Denmark data breach exposes 8.8M people's personal data (cpr.dk) ▲ -
25. Two US-bound vessels apparently compromised by hackers (reuters.com) ▲ -
26. Spectre bug is back, this time to haunt JIT engines (theregister.com) ▲ -
27. Every OT breach has a file in its attack chain: The ICS/OT Threat Landscape, 2024–2026 (opswat.com) ▲ -
28. Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT (securityaffairs.com) ▲ -
29. Sourcehut account takeover via build logs (XSS in ansi2html) (blog.arusekk.pl) ▲ -
30. ‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees (404media.co) ▲