Install
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ Stories
5+ hour, 32+ min ago (997+ words) This week’s roundup covers a massive Microsoft Patch Tuesday with two exploited zero-days, active FortiGate exploitation, a critical PAN-OS root-level RCE flaw, the Revolut KYC data breach, and more than 20 other stories spanning AI-driven cyberattacks, browser and firewall zero-days, and…...
SOC138 — Detected Suspicious Xls File: LetsDefend Alert
10+ hour, 42+ min ago (1420+ words) Context An alert has been triggered! On March 13, 2021 at 8:20PM our systems detected a suspicious Xls file (Spreadsheet file). Let’s dive …...
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
13+ hour, 43+ min ago (25+ words) An engineering breakdown of AitM authentication relays, Device Code phishing, post-compromise MFA registration …...
FudModule Rootkit Hides 5 Weeks via CVE-2026-68820
1+ day, 5+ hour ago (300+ words) Lazarus has steadily upgraded FudModule’s delivery mechanism over four years, and the trajectory tells its own story about how APT groups adapt to defender countermeasures. FudModule is the most documented example of an “EDR-killer” rootkit, but it sits inside a…...
BlueMoon Exploit Kit Can Escape Chrome and Elevate Windows Privileges
3+ day, 12+ min ago (355+ words) Published on September 11, 2026 BlueMoon exploit kit chains Windows and Chrome zero-days in targeted attacks, giving cyber-espionage groups a way to execute code, escape Chrome’s sandbox, and gain elevated Windows privileges. Proofpoint observed attacks involving BlueMoon starting on August 28, 2026, while Volexity…...
StyleSmuggler Turns Adobe Commerce’s Own Template Engine Into an Unauthenticated RCE Chain
3+ day, 6+ hour ago (117+ words) CVE-2026-75650 lets attackers inject PHP through Magento's email template system, then triggers execution automatically. Multiple threat groups are already inside. The authentication gap has reached the payment layer. Simultaneously, a separate attacker group has been observed dropping a 485-byte PHP…...
IDScan Confirms Massive Data Breach Affecting 150 Million – DTH
3+ day, 16+ hour ago (451+ words) Daily Tech News Show A special thanks to all our supporters–without you, none of this would be possible. If you enjoy what you see you can support the show on Patreon, Thank you! Send email to [email protected] IDScan Confirms…...
Microsoft Fixes Nearly 1,000 Vulnerabilities Across Windows, Office, and Azure
3+ day, 16+ hour ago (23+ words) TechPowerUp Automated bot check in progress Drag the handle to the target...
Record September Patch Tuesday: 974 flaws, two exploited
3+ day, 15+ hour ago (302+ words) Microsoft's September Patch Tuesday fixes a record 974 flaws, two already exploited and 20 wormable. What to patch first, and why AI is behind it....
New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender
3+ day, 18+ hour ago (118+ words) oodaloop.com Informing your decisions with actionable intelligence Home > Briefs > Cyber > New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender Nightmare Eclipse drops ShieldCrash zero‑day bypassing defender patches. A new exploit called ShieldCrash targets fully patched Windows systems for privilege escalation,…...