
Cyber Attacks
View all
GenAI Powers Ransomware: Faster Social Engineering and Data Discovery
Zscaler research finds attackers use generative AI to craft convincing phishing lures and rapidly locate sensitive data for theft or encryption.
Cloud Security
View allVulnerabilities
View all
NocoBase SQL Injection Allows Privileged Users to Bypass Validation
A flaw in NocoBase through 2.2.28 lets attackers store unvalidated SQL via the collection plugin, risking database exfiltration.

sqlparse PHP Injection Flaw Allows Remote Code Execution
A high-severity vulnerability in sqlparse allows attackers to inject PHP code via unescaped dollar signs in SQL text, affecting versions through 0.6.0.

Bearer CLI SAST Ranks Code Flaws by Proximity to Health Records for Effective Triage
The free static analysis tool ranks code flaws by their proximity to personal data, helping teams triage findings from standard weakness lists more effectively.

Google Agent Mesh Ingress Bypasses Auth in Alpha Builds
Unauthenticated peers can invoke backend services in Google SAM due to missing token checks on the HTTP ingress server.
Data Breaches
View all
Data Classification Mistakes That Expose Your Infrastructure

Credit Freezes: 6 Common Misunderstandings That Leave You Exposed

Email Account Compromise Prevention Checklist for Secure Operations

Password reuse is a security risk: how to break the chain
Latest news
Threat Intelligence
OSINT tools for investigators: spotting the silent traps
Open-source intelligence tools leak investigator identity long before targets notice the active data collection.
Threat Intelligence
Dark web monitoring alerts: how to respond and recover safely
Discovering leaked credentials on hidden forums often triggers panic resets that lock out legitimate users instead of stopping automated stuffing.
Vulnerabilities
Nextcloud richdocumentscode command injection flaw enables web shell deployment during server restarts
Attackers are exploiting CVE-2026-110447 to install web shells on Nextcloud servers running the Collabora Online Built-in CODE Server app.
Vulnerabilities
aws-smithy-json Uncontrolled Recursion Enables Remote DoS; Patch to 0.62.7 Required
Uncontrolled recursion in the aws-smithy-json crate allows attackers to crash servers via small, deeply nested JSON requests.
Vulnerabilities
Fleet DM Gzip Decompression Flaw Triggers Memory Exhaustion Denial of Service
Unauthenticated attackers can crash Fleet instances by sending compressed requests that expand to consume all available server memory.
Vulnerabilities
ZoneMinder Command Injection via Export Function in Versions Before 1.38.3
Authenticated users can execute arbitrary OS commands in ZoneMinder by manipulating the export file parameter, a flaw rated high severity.
Vulnerabilities
Dockhand 1.0.34 Patches Unauthenticated RCE in Container Terminal Endpoint
An auth bypass in Dockhand’s WebSocket terminal allows unauthenticated command execution, fixed in version 1.0.34.
Vulnerabilities
FBI and Task Force Seize Meth in NY as Russian National Faces Historic Extradition
Federal authorities announce coordinated law enforcement actions involving drug seizures and international legal proceedings in New York.







