It is always ‘amusing’ when the plod are urged byLabour to arrest 80+ year old Vicars holding ‘I support Palestine Action’ posters so as to prosecute them as terrorists. Meanwhile RNLI stations are closed by balaclava wearing men and staff intimidated.BTW, ‘migrant’ rescue is less than 2% of the RNLI’s current load. Please support them. Financially if p[ossible, but write to your MP and suggest some arse kicking.https://rnli.org/#RNLI #Rescue #Sea #Intimidation #Terrorism
CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.
Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer …
A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers ov…
Plugin4Shell attack affects all the major coding agents, researchers say
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest ru…
See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack chain.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. <a href="https://www.cve.
Critical SQL Injection in Metabase via Password Reset: CVE-2026-72898
Cooley built GO Public with ChatGPT Work to bring intelligence to the IPO process, helping lawyers surface issues earlier and focus judgment where it matters most.
Wiz Research has identified active, in-the-wild exploitation of three critical and high-severity vulnerabilities impacting JFrog Artifactory (CVE-2026-42016, CVE-2026-…
TLDR: Runtime security built around detecting activity, correlating signals and then responding assumes there is enough time to act after something malicious happens.
Originally published by Darktrace. Findings from our annual survey of 1,500+ cyber professionals reveal that security leaders are confronting a surge in AI-driven atta…
I think what really resonates with me this week is being able to completely turn the tables on perceptions around things like AI being the big bad hacking tool the new…
We already know AI can find vulnerabilities. James Kettle, PortSwigger's Director of Research, wanted to answer a harder question: can an autonomous system invent genu…
AI is accelerating software creation and cyberattacks alike.
Italian startup Exein has raised a $270 million round of funding led by Headline at a $1.7 billion valuation.
Open-source XDR/SIEM for threat detection and compliance.
Relevance: Detection & response / compliance
Passive subdomain enumeration from dozens of sources.
Relevance: Recon & attack-surface mapping
Comprehensive scanner for containers, IaC, and dependencies.
Relevance: Cloud & container defenders
Template-based vulnerability scanner for massive-scale network scanning.
Relevance: Offensive security & recon
Interactive TLS-capable intercepting proxy for traffic analysis.
Relevance: AppSec & traffic inspection
Swiss-army toolkit for network attacks, MITM and recon.
Relevance: Network penetration testing
Graph-based Active Directory relationship explorer for attack paths.
Relevance: Red teams & AD assessment
Incredibly goofy work here. Patched now, but you could pwn Claude and Codex thanks to confusion between commit hashes and branch names. Microsoft hasn't patched.https://www.air.security/blog-posts/plugin4shell
It's Friday, and we have 4 more local privilege escalation vulnerabilities disclosed for the Linux kernel:- DirtyAH6 (CVE-2026-80844)- TUNderflow (CVE-2026-81000)- PPPoEject (CVE-2026-68121)- DiagSpill (CVE-2026-74469)"The underlying bugs have been around for 10-21 years. The first three LPEs require either unprivileged user namespaces or specific CAPs; DiagSpill does not."https://www.openwall.com/lists/oss-security/2026/09/18/3https://heyitsas.im/posts/lpe-quartet/#CVE_2026_80844 #CVE_2026_81000 #CVE_2026_68121 #CVE_2026_74469
"The phishing simulation includes one ClickFix lure per quarter, if at all."https://www.flyingpenguin.com/clickfix-for-cisos-how-to-stop-running-with-scissors/
Professional shitposter. Also occasional security researcher
You will never not convince me this this AI generated image used for a malware analysis report isn't a computer facehugger hybrid slapping its robo-dong across a C-suite executive's face.