Collaborate Disseminate
Cybersecurity researchers are sounding the alarm about what has been described as “malicious activity” in newly published versions of node-ipc.
According to Socket and StepSecurity, three different versions of the npm package have been confirmed as mal… Continue reading Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets
Everything is still on fire.
This week feels dumb in the worst way — bad links, weak checks, fake help desks, shady forum posts, and people turning supply chain attacks into some cursed little game for clout and cash. Half of it feels new. Half of it f… Continue reading ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories
The Belarus-aligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting governmental organizations in Ukraine.
Active since at least 2016, Ghostwriter has been linked to both cyber espionage and influence operation… Continue reading Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open-source multi-agent orchestration framework, within four hours of public disclosure.
The vulnerability in question is CVE-2026-44338… Continue reading PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
AI hallucinations are introducing serious security risks into critical infrastructure decision-making by exploiting human trust through highly confident yet incorrect outputs. When an AI model lacks certainty, it doesn’t have a mechanism to recognize t… Continue reading How AI Hallucinations Are Creating Real Security Risks
An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass and a privilege escalation impacting Windows Collaborative Translation Framework (CTFMON).
Th… Continue reading Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
Details have emerged about a new variant of the recent Dirty Frag Linux local privilege escalation (LPE) vulnerability that allows local attackers to gain root access, making it the third such bug to be identified in the kernel within a span of two wee… Continue reading New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption
Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, including a critical flaw that remained undetected for 18 years.
The vulnerability, discovered by depthfirst, is a heap buffer overflow issu… Continue reading 18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE
Microsoft has unveiled a new multi-model artificial intelligence (AI)-driven system called MDASH to facilitate vulnerability discovery and remediation at scale, adding that it’s being tested by some customers as part of a limited private preview.
MDASH… Continue reading Microsoft’s MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday
A threat actor with affiliations to China has been linked to a “multi-wave intrusion” targeting an unnamed Azerbaijani oil and gas company between late December 2025 and late February 2026, marking an expansion of its targeting.
The activity has been a… Continue reading Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation