Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open
We track the binary payload chain (CVE-2025-8088 to LNK to PowerShell to result.dll) under SHADOW-EARTH-066, our temporary designation for the...
Year: 2026
Governing Claude Enterprise in Environments Where Inline Controls Can’t Go
When Anthropic launched the Claude Compliance API in May 2026, it acknowledged something security teams have been wrestling with quietly:...
Meta: NSO Tried Targeting WhatsApp Users Despite Court Order
A court order told NSO Group to stay away from WhatsApp. Meta says the spyware maker came back anyway. Meta...
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access Pierluigi Paganini June 08, 2026 Hackers exploit CVE-2026-3300 in Everest...
Meta Blocks NSO Group’s New WhatsApp Phishing Attack, Files Contempt Order
Ravie LakshmananJun 08, 2026Spyware / Mobile Security Meta on Monday said it detected and blocked spear-phishing attempts linked to Israeli...
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
Ravie LakshmananJun 08, 2026Vulnerability / Network Security Check Point has warned of active exploitation of a critical vulnerability impacting Remote...
OpenAI Expands ChatGPT Lockdown Mode to Millions of Eligible Users
ChatGPT’s stricter security mode is getting a wider release. OpenAI is making Lockdown Mode, an optional setting in ChatGPT that...
Anthropic’s Mythos AI Reportedly Enters NSA Offensive Cyber Planning
Anthropic is reportedly working with the National Security Agency to deploy its cyber AI model, Mythos, into the agency’s offensive...
ExpressVPN Is on Sale for $40: A Great Deal for Remote Teams
TL;DR: This ExpressVPN Basic Plan 1-Year Subscription is now $39.99 (reg. $74.85), which is 47% off for a 10-device VPN with a...
Minimus Unveils New Supply Chain Protection Proxy and Command-Line Interface for Container Management
In tandem, Minimus has launched minicli, a public command-line tool downloadable for macOS and Linux (AMD and ARM). The utility...
Spotlight On: Dreamplug Technologies Private Limited (CRED), a New Principal Participating Organization
Welcome Dreamplug Technologies Private Limited, operating under the brand name CRED, a new Principal Participating Organization (PPO) at the PCI...
UNC3753 Escalates: From Vishing Calls to Physical Office Intrusions at US Legal and Financial Firms
UNC3753 Escalates: From Vishing Calls to Physical Office Intrusions at US Legal and Financial Firms Pierluigi Paganini June 08, 2026...
Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts
Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts Pierluigi Paganini June 08, 2026 A flaw in Meta’s AI-powered Instagram...
AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload
Phishing has always been a numbers game. AI has turned it into a volume machine. Attackers can now create convincing...
The Hardest Fork
Mythos is real. I know a big chunk of the industry thinks it's a marketing stunt, and I get why....