Iranian cyber spies used fake MRI scan results to hack ‘enemy of regime’
1. Executive summary On 15 September 2026 the UK NCSC, the US FBI and the Netherlands AIVD issued a joint alert exposing CHOSEN BRICK, a Windows
1. Executive summary On 15 September 2026 the UK NCSC, the US FBI and the Netherlands AIVD issued a joint alert exposing CHOSEN BRICK, a Windows
1. Executive summary A malware-as-a-service (MaaS) offering marketed as "VectraRAT" is being advertised at approximately $250 per month, bundling a Windows
1. Executive summary On 2026-09-15 CISA and NIST published Interagency Report (IR) 8587, Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations
1. Executive summary On 2026-09-15 CISA published ICSA-26-258-08 covering seven vulnerabilities in CareCam CM2507 IP cameras running firmware HMT.CM2507 v251211.
1. Executive summary Siemens ProductCERT has published SSA-887643 (republished verbatim by CISA as ICSA-26-258-06) covering CVE-2026-80465, an improper-verification-of-
1. Executive summary Siemens has published a fix for a reflected cross-site scripting (XSS) vulnerability in the authentication redirect flow (/auth/ endpoint) of Siemens Teamcenter,
1. Executive summary Sophos' Counter Threat Unit (CTU) identified an advertisement posted on 24 August 2026 on the Exploit hacking forum by a persona using
1. Executive summary A swarm of autonomous AI agents — reported by a three-person research team to be OpenAI's — flooded the RubyGems.org package
A 15 KB DLL that silently rewrites cryptocurrency addresses on your clipboard. I pulled it apart statically, confirmed it in a sandbox, recovered all nine of
1. Executive summary The UK NCSC, the US FBI and the Netherlands' General Intelligence and Security Service have published a joint advisory exposing a Windows
1. Executive summary On 2026-09-15, the ransomware brand "qilin" listed a Spanish victim, Geieg (www.geieg.cat), on its leak site; the
1. Executive summary On 2026-09-12 Revolut confirmed that it disclosed sensitive customer records to an unauthorised third party who submitted fraudulent information requests from