Executive Summary Researchers from Team Cymru identified active DarkSword C2 controller infrastructure within their detection...
THREAT ADVISORY DarkSword C2 Infrastructure October 2, 2026
read more
Threat Advisories
THREAT ADVISORY Passkey Authentication Compromise (Pass-the-Passkey) September 8, 2026
Severity: High Threat Category: Identity Compromise, Authentication Bypass, Credential Enrollment Abuse Affected Technologies:...
THREAT ADVISORY ASCII Smuggling (Unicode Phishing) September 8, 2026
Executive Summary Microsoft researchers recently disclosed a large-scale phishing campaign leveraging invisible...
THREAT ADVISORY Google Chrome Zero-Day (CVE-2026-85046) September 4, 2026
Severity: Critical CVSS: 8.8 (High) CVE: CVE-2026-85046 Date Published: September 4, 2026 Status: Actively Exploited in the Wild Affected...
THREAT ADVISORY CrowdStrike Falcon Sensor Local Privilege Escalation Zero-Day (FalconFlank) August 26, 2026
Severity: High Status: Public Proof-of-Concept Released Executive Summary Security researcher Chaotic Eclipse (also known as MSNightmare,...
THREAT ADVISORY Splunk Enterprise Remote Code Execution September 2, 2026
Severity: Critical (CVSS 9.8) CVE: CVE-2026-20253 Affected Product: Splunk Enterprise 10.x Status: Patch Immediately Executive...
THREAT ADVISORY CoSnitch Microsoft Copilot Personal Information Disclosure (prior to 8/18/26) August 26, 2026
Severity: High CVSS: 8.8 CVE: CVE-2026-24301 Affected service: Microsoft Copilot Personal / Copilot Web Not...
THREAT ADVISORY AdaptixC2 emerges as alternative to Cobalt Strike August 24, 2026
Threat Level: High Category: Command & Control (C2) Framework / Post-Exploitation Platform Audience: SOC...
THREAT ADVISORY Stripe Merchant API Keys Exposed August 19, 2026
Executive Summary Multiple security researchers and news outlets have reported the public release of a dataset...
THREAT ADVISORY Russian APT “Laundry Bear” Exploiting OWA XSS for Persistent Mailbox Access August 5, 2026
Threat Actor: Laundry Bear (aka TA488, CL-STA-1114, UNK_PitStop, Void Blizzard) Vulnerability: CVE-2026-42897 (CVSS 8.1)...