Summary: A new variant of the “ClickFix” social engineering tactic, dubbed “CrashFix,” has emerged. It uses a malicious Chrome extension […]
Alert: “CrashFix” Chrome Extension Uses Malicious Loops to Lure Victims Read More »
Summary: In a surprising counter-move, Chinese customs have effectively banned Nvidia’s newly-approved H200 AI chips. While the US government recently
AI Trade War: China Blocks Entry of Nvidia H200 Chips Despite US Approval Read More »
Summary: Grubhub has confirmed a significant data breach linked to the ongoing Salesforce/Zendesk credential theft campaign. The threat actor group
Grubhub Confirmed as Latest Victim in “Salesforce Token” Breach Chain Read More »
Summary: GitLab has released urgent updates to fix multiple critical vulnerabilities (including CVE-2025-3950) that allow for Authentication Bypass and Remote
GitLab “Pipeline Poisoning” Alert: Critical Flaws Affect CI/CD Workflows Read More »
Summary: Cisco Talos has identified a Chinese state-sponsored group (UAT-8837) actively exploiting a critical Sitecore CMS vulnerability (CVE-2025-53690) to breach
China-Linked APT “UAT-8837” Targeting Critical Infrastructure via Sitecore Read More »
Summary: Meta has officially denied a system breach following reports that a database of 17.5 million Instagram users is for
Meta Denies “Breach” After 17.5M Instagram Records Surface on Dark Web Read More »
Summary: After weeks of active exploitation, Cisco has released a patch for a critical zero-day vulnerability (CVE-2025-20393, CVSS 10.0) in
Cisco Patches “Perfect 10” Zero-Day in Secure Email Gateways (CVE-2025-20393) Read More »
Summary: CISA has added CVE-2026-20805—an information disclosure vulnerability in the Windows Desktop Window Manager (DWM)—to its Known Exploited Vulnerabilities (KEV)
Summary: A new class of attack named “WhisperPair” targets the Google Fast Pair implementation in millions of Bluetooth audio accessories.
WhisperPair Attack: Millions of Bluetooth Audio Accessories Vulnerable to Hijacking Read More »
Summary: Security researchers have uncovered two critical privilege escalation bugs in Google Vertex AI. The vulnerabilities allow low-privileged users to
Google Vertex AI Privilege Escalation: “Service Agent” Hijacking Discovered Read More »
