Public PoC, Unauthenticated SSRF, And A PBX You Forgot Existed
Cisco's Unified CM just got a public PoC for an unauthenticated SSRF. Three stories expose the cybersecurity gap defenders keep missing. See what to do.
When Did Recon Stop Counting As An Attack?
Recon, lookalike domains, and home-device malware are visible attack phases. See how to spot them before payloads land in your cybersecurity program.
Your Patch Window Closed Seven Days Ago
Mandiant says attackers now exploit bugs seven days before patches ship. Here is the cybersecurity playbook that still works. Read on.
Why Does One Click Still Equal Total Account Takeover?
GitHub.dev tokens, Gemini notifications, and WordPress plugins all leaked permissions this week. Audit what you've authorized before someone else does.
Codex Found The Bug. Every Major Web Server Has It.
An AI fuzzer just embarrassed five web server teams with HTTP/2 Bomb. Here is what your cybersecurity playbook should do about it.
Microsoft Just Native-Ported 100+ Linux Binaries To Every Windows Box
Microsoft Coreutils ships native Linux binaries to Windows, expanding the LOLBin surface. Here's how to update your cybersecurity detections before attackers do.
Your Best EDR Has A Minecraft-Sized Blind Spot
WeedHack, Kali365, and copyright-phish kits sidestep your cybersecurity stack by hitting unmanaged devices and tokens. Close the gap before they hit yours.
Two Billion Installs Undone By One Sloppy Build Flag
One build flag exposed two billion Microsoft Android installs. Here's the cybersecurity pipeline discipline that actually prevents the next one. Read on.
The SVG Attachment That Walks Past Your Email Filter
SVG phishing attachments are slipping past mail filters that trust the image extension. Here's the gap and how to close it before users click.
NIST’s Vulnerability Database Has 27,000 Unread Tickets
NIST's vulnerability database is 27,000 tickets behind. Here's how cybersecurity teams should patch when the catalog stops working. Read on.
Your Help Desk Speaks Fluent Prompt Injection
Meta's AI support bot reset passwords for hijacked Instagram accounts. Here's the cybersecurity playbook for AI in privileged workflows. Start here.
The Netlogon Bug That Outran Patch Tuesday
A critical Netlogon bug is under active attack while Microsoft fights three other fires. Here's the cybersecurity work your AD team owes itself this week.
AI Agents Got DNS Before They Got A Threat Model
AI agents got DNS-based discovery before anyone built a cybersecurity story around it. Here's what defenders should do before the breach reports start.
NetSupport Is The Payload. The Loader Is Still Unnamed.
An unnamed loader is dropping NetSupport RAT in live networks. Here's why cybersecurity teams keep missing it, and what to do anyway.
When Did You Last Write A Detection That Fired?
YARA-X 1.17.0 just dropped. The real cybersecurity question isn't which scanner you run; it's whether anyone on your team writes detections. Find out.
The Plugin That Opened The Door To The Botnet
The 17M-device botnet Dutch police just dismantled and the WP Maps Pro admin bug are the same cybersecurity story. Here's how to break the pipeline.
Your Endpoint Manager Just Shipped The Infostealer
Two cybersecurity vendors shipped the threats they sold to stop. See how to harden your security stack before the next advisory lands.
Russia’s Best New Exploit Is A Wire Transfer
Russian intelligence is buying Western tech through shell companies while running cyber recon on the same vendors. Rethink your cybersecurity scope now.
Your AI Sandbox Ends At The Import Button
Flowise's one-click RCE, 33 reconnaissance npm packages, and a new Linux LPE expose the cybersecurity surface no team owns. See what to fix this week.
The VPN Bypass That Builds Its Own Tunnel
PAN-OS CVE-2026-0257 is under active exploitation. Get the cybersecurity playbook for edge-appliance bypass before Monday.
Signal’s Encryption Held. The Backup Key Didn’t.
A Signal phishing wave skips the encryption and goes straight for backup recovery keys. Here's the cybersecurity gap to close this week.
The Fake Outage Page Is Hosted On chatgpt.com
ChatGPT share links and Markdown rendering are now phishing infrastructure. Here's why domain trust is failing and what to check first.
Booter Services Now Have Tier 2 Support And Refund Policies
DDoS-as-a-Service now ships with tier pricing, support, and resellers. The Dutch 17M-device botnet seizure won't change your cybersecurity math. See why.
Kimsuky’s New C2 Channel Is Microsoft’s Own VS Code Tunnels
Kimsuky's HTTPSpy rides Microsoft VS Code Tunnels as C2 while npm typosquats drain CI/CD secrets. Here's what to actually do about it.
Carnival’s Attacker Never Needed A CVE
Carnival lost 6M records to a stolen employee login while Oracle accelerates patches. The cybersecurity defense worth buying isn't on the CVE list.
