Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Kimsuky Abuses GitHub and Zoom for Ukrainian Espionage: How It Works
North Korean APT group Kimsuky targeted Ukrainian experts using GitHub, GitLab, and Codeberg for payload delivery and data exfiltratio…
ADB-Enabled Exploit Unlocks Bootloader, Grants Persistent Root on Amazon Fire TV Cube 3
A public exploit package for the third-gen Amazon Fire TV Cube (codename gazelle) chains CVE-2026-43499 (Ghostlock) with a separate bo…
FortiMail Zero-Day CVE-2026-104286: CISA Sets Three-Day Deadline Before Patches Are Ready
Fortinet disclosed a CVSS 9.8 zero-day in FortiMail's IBE component that is under active exploitation. CISA added CVE-2026-104286 to t…
Denmark Data Breach: '123456' Password Exposes 8.8 Million Identities
A two-person IT firm with legitimate access to Denmark's national CPR register became the entry point for a massive data extraction. U…
French Supermarket Fridges Hacked: Outdated Danfoss Firmware, Temperatures Forced to 50°C
Hundreds of French stores hit in attack on Danfoss refrigeration controllers. Unpatched firmware, temperatures forced to 50°C, physica…
iRhythm Breach Hits 360,000 Patients; No Public Leak After Ransom Demand
iRhythm Technologies disclosed a data breach affecting over 360,000 patients via social engineering on third-party business applicatio…
Check Point: Attacks Up 48% YoY as AI Becomes Standard Offensive Tooling
The October 12, 2026 Threat Intelligence Report documents 2,803 weekly attacks per organization and the convergence of generative AI w…
GitLab Patches CVE-2026-97229: Maximum-Severity RCE in CI/CD Regex Compiler
GitLab has fixed CVE-2026-97229, a maximum-severity vulnerability in the CI/CD regex compiler that allows unauthenticated remote code…
WhatsApp-Delivered Malware on Windows: SYSTEM Injection via PoolParty and BYOVD Driver
Malware distributed through WhatsApp attachments exploits PoolParty Variant 7 in Task Scheduler to gain SYSTEM privileges, then uses a…
CVE-2026-0257: Authentication Bypass in PAN-OS Actively Exploited by Ransomware Groups
CVE-2026-0257 enables unauthorized VPN sessions on Palo Alto Networks PAN-OS. Qilin and Settra ransomware groups are actively exploiti…
Double Counter: 28 Million Discord Accounts Exposed via Forgotten Legacy Server
The Double Counter anti-alt bot leaked data on 28 million Discord users after an attacker compromised an abandoned OVH server running…
Malware at Nippon Columbia Exposes 8.7 Million Karaoke User Records
An infected Nippon Columbia Group workstation exposed personal data for 8.63 million customers and 93,000 employees across six Japanes…