Resecurity identified and mapped the infrastructure supporting a commercial phishing-kit-as-a-service (PhaaS) operation marketed under the name “Iron Man System.” The kit is sold to criminal buyers as ...

Resecurity has acquired 152.5 GiB of data following a supply-chain security breach involving LiteLLM, exposing stolen corporate credentials and configuration data linked to thousands of domains.

Metabase has disclosed a maximum-severity, unauthenticated SQL injection vulnerability that is being actively exploited in the wild as a zero-day. Tracked as GHSA-vwf4-m7j8-wcjf with a CVSS score of ...

Virtual private network (VPN) appliances occupy one of the most sensitive positions in modern enterprise architecture: the boundary between the untrusted public internet and the internal corporate ...

CVE-2026-0770 is a critical unauthenticated remote code execution (RCE) vulnerability affecting Langflow's /api/v1/validate/code endpoint. The flaw originates from ...

Microsoft SharePoint Server is one of the most widely deployed enterprise collaboration and content management platforms, serving as a central repository for business-critical documents, workflows, ...

Tuesday, June 16, 2026, 10:11 UTC — The education technology (EdTech) sector has become a prime target for cybercriminals as attacks against educational institutions and related platforms continue to ...

Who is the Silent Ransom Group? The Silent Ransom Group (SRG), also known as Luna Moth, Chatty Spider, and UNC3753, is a sophisticated cyber extortion group that has been active since at least 2022.

CVE-2026-20182 is a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN controllers. The vulnerability exists within the vdaemon service and is caused by missing verification ...

A critical remote code execution (RCE) vulnerability affects LeRobot, Hugging Face’s open-source robotics platform, specifically the async inference PolicyServer component. The issue stems from ...

On March 31, 2026, the npm package plain-crypto-js was identified as a malicious dependency embedded in compromised versions of Axios (0.x and 1.x). The package leverages npm’s postinstall lifecycle ...

On Saturday morning (2/28/26) in Iran, a joint Israel-US military action began another chapter in the Middle East conflict. Still, this one is claiming a goal of regime change and dramatically ...