Collaborate Disseminate
Cybersecurity researchers at Jscamblers have uncovered a sophisticated web-skimming campaign targeting online retailers. The campaign utilizes a legacy… Continue reading Hackers Exploit Stripe API for Web Skimming Card Theft on Online Stores
Cybersecurity researcher Jeremiah Fowler uncovers a massive 47.8GB database with disturbing AI-generated content belonging to GenNomis. Continue reading AI Image Site GenNomis Exposed 47GB of Underage Deepfakes
China-linked APT group FamousSparrow hits targets in the Americas using upgraded SparrowDoor malware in new cyberespionage campaign, ESET reports. Continue reading China’s FamousSparrow APT Hits Americas with SparrowDoor Malware
A critical vulnerability (CVE-2025-1268) in Canon printer drivers allows remote code execution. See which drivers are affected, how to patch them. Continue reading Canon Printer Drivers Flaw Could Let Hackers Run Malicious Code
A recent analysis published by Infoblox reveals a sophisticated phishing operation, dubbed Morphing Meerkat, actively exploiting DNS vulnerabilities… Continue reading New Morphing Meerkat Phishing Kit Exploits DNS to Spoof 100+ Brands
The phishing campaign is highly sophisticated! Continue reading Russian Phishing Uses Fake CIA Sites to Target Anti-war, Ukraine Supporters
OpenAI Bug Bounty program boosts max reward to $100,000, expanding scope and offering new incentives to enhance AI security and reliability. Continue reading OpenAI Bug Bounty Program Increases Top Reward to $100,000
Discover the novel QWCrypt ransomware used by RedCurl in targeted hypervisor attacks. This article details their tactics, including… Continue reading RedCurl Uses New QWCrypt Ransomware in Hypervisor Attacks
Cybersecurity researcher Jeremiah Fowler discovered a data exposure at Australian fintech Vroom by YouX, exposing 27,000 records, including driver’s licenses, bank statements, and more. Continue reading Aussie Fintech Vroom Exposes Thousands of Records After AWS Misconfiguration
Researchers have uncovered a critical vulnerability (CVE-2025-29927) in Next.js middleware, allowing authorization bypass. Learn about the exploit and fixes. Continue reading Next.js Middleware Flaw Lets Attackers Bypass Authorization