Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
Supply Chain Security Bitsight found firmware-bundled apps that spoofed TV boxes as phones, clicked ads and sold the owner's connection as a SOCKS5 residential proxy.
Threats and Incidents A phishing LNK launched PowerShell, a fake Python runtime, a Go loader and two Rust backdoors. We break down the chain, detection and response.
Vulnerabilities and CVEs Researchers found 84 new flaws across seven LTE/5G core implementations. We explain GTP-C, PFCP, session hijacking and cloud-native hardening.
Threats and Incidents Compromised Korean sites exploited AnySign4PC to install SIGNBT or COPPERHEDGE without another click. We analyse the chain and detection.
Vulnerabilities and CVEs Cisco confirms active exploitation of static FMC credentials. We explain the 5.3 CVSS score, possible chaining, indicators and response.
AI Security A hidden instruction could alter figures and pass into later files created by Copilot. We examine the propagation mechanism and practical controls.
Supply Chain Security Amazon attributes the debug, chalk, axios and typo-crypto incidents to a DPRK-linked actor with medium confidence. We assess the evidence.
Supply Chain Security The FCC added foreign-produced robots and connected inverters to its Covered List. We explain the scope, exceptions and technical risk.
Human Security A new Polish guide addresses grooming, sextortion and AI-generated abuse. We add a technical model for account protection, evidence and response.
Threats and Incidents TA488 exploits CVE-2026-42897 and OWAReaper for durable mailbox access. We analyse half-click delivery, OAuth, localStorage and response.
Threats and Incidents SilverFox combined three vulnerable drivers, DLL side-loading and dual watchdogs to sustain ValleyRAT. We analyse the chain and detection.
Human Security A campaign cloned Russian corporate websites to steal B2B advance payments. Learn its tradecraft, warning signs and payment controls.
Vulnerabilities and CVEs Public CVE-2026-10702 analysis explains a SpiderMonkey JIT flaw and Firefox-to-kernel chain. Review scope, patches and defensive priorities.
Threats and Incidents Researchers found Flying Eagle Android RAT infrastructure fingerprints on 170 servers. We analyse scope, capabilities, detection and response.
Vulnerabilities and CVEs Gitea before 1.27.1 let repository writers create a live Git hook and execute server commands. Review preconditions, impact and remediation.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
