Latest Briefings
BlueMoon Exploit Kit Chains Chrome and Windows Zero-Days Across Espionage Groups
Proofpoint says a newly discovered exploit kit combining two Chrome V8 zero-days and a Windows ALPC privilege escalation flaw was rapidly adopted…
Dutch NCSC Warns of Imminent Attacks on Critical Check Point VPN Flaws
Two unauthenticated remote code execution bugs in Check Point's VPN stack have patches available, and the Netherlands' national cyber agency says exploitation…
Cisco FMC Bugs Exploited by Qilin Ransomware and Sandworm-Linked Hackers
Cisco Talos says three separate threat clusters, including ransomware affiliates and a group overlapping with the Russian Sandworm APT, exploited two Secure…
CISA Flags Active Exploits in JFrog and ConnectWise as GitLab Rushes Critical Patch
CISA added three actively exploited flaws in JFrog Artifactory and ConnectWise ScreenConnect to its KEV catalog, while GitLab pushed emergency fixes for…
Microsoft Says Ignore False ‘Antivirus Turned Off’ Alerts After Defender Update
A bug in recent Microsoft Defender Antivirus updates is triggering false alerts that protection is disabled across Windows client and server systems.…
Federal Judge Rules Pentagon’s Anthropic Retaliation Was Illegal
A U.S. District Judge found the Defense Department unlawfully punished Anthropic for criticizing its AI policies, ruling the supply chain risk designation…
Anthropic Warns Infostealer Malware Is Hijacking Claude Sessions to Drain Usage
Anthropic says a threat actor is harvesting stolen Claude login sessions from infostealer logs and using them to access accounts and burn…
FulcrumSec Claims Manchester Airports Breach, Says 86 GB of Data Stolen
Extortion group FulcrumSec has claimed responsibility for the Manchester Airports Group breach, telling BleepingComputer it exfiltrated 86 GB of data including detailed…
UK Man, 68, Jailed Over $1.3M Illegal IPTV Streaming Operation
A City of London Police investigation found Milan Ibrahim ran an 80-server pirate IPTV service that pulled in nearly £1 million by…
Berlin Rejects Ransom Demand After State Network Breach
Berlin's state government says it will not pay extortionists behind an August compromise of its administrative network, as forensic investigators uncover additional…
Brave Adds Disposable Email Aliases to Cut Cross-Site Tracking
Brave 1.94 introduces Email Aliases, letting users generate forwarding addresses that hide their real inbox from websites and limit exposure after data…
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Researchers at Wordfence and Patchstack have disclosed five critical vulnerabilities across popular WordPress plugins and themes, including one authentication bypass flaw scoring…