🕵️ RESEARCH & DEEP DIVES
Trezor: 347,000 users targeted in phishing attacks after Brevo breach — BleepingComputer
PaperCut Flaws Exploited in AI-Powered Attacks — SecurityWeek
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors — The Hacker News
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor — The Hacker News
PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws — The Hacker News
Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware — The Hacker News
Media Library Assistant through 3.35 - Authenticated (Contributor+) Stored Cross-S... — CVE ThreatInt
Media Library Assistant through 3.35 - Authenticated (Author+) Stored Cross-Site S... — CVE ThreatInt
Howyar|WeenyGenius - Missing Support for Integrity CheckWeenyGenius, a comput... — CVE ThreatInt
Howyar|WeenyGenius - Origin Validation ErrorWeenyGenius, a computer lab manag... — CVE ThreatInt
Howyar|WeenyGenius - Use of Insecure ProtocolWeenyGenius, a computer lab mana... — CVE ThreatInt
Howyar|WeenyGenius - Missing AuthenticationWeenyGenius, a computer lab manage... — CVE ThreatInt
Kingdom Communication Associated|Smart Video Intercom System - Client-Side Au... — CVE ThreatInt
Kingdom Communication Associated|Smart Video Intercom System - Missing Burte-... — CVE ThreatInt
Kingdom Communication Associated|Smart Video Intercom System - Sensitive Data... — CVE ThreatInt
HPE IceWall Federation Agent and Proxy, Denial of Service vulnerabilityA pote... — CVE ThreatInt
multiparty vulnerable to Denial of Service via unbounded part-header accumula... — CVE ThreatInt
HPE IceWall products, Remote Bypass of Security RestrictionsA potential secur... — CVE ThreatInt
Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord ... — CVE ThreatInt
BackWPup 5.2.2 - 5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration ... — CVE ThreatInt
WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification vi... — CVE ThreatInt
Visualizer before 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDORTh... — CVE ThreatInt
SSL Zen before 4.7.40 - Subscriber+ TLS Private Key DisclosureThe SSL Zen — SSL Ce... — CVE ThreatInt
Featured Image with URL before 1.0.6 - Contributor+ Stored XSS via Image Alt TextT... — CVE ThreatInt
Visualizer before 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChartThe... — CVE ThreatInt
-CL-CRI-1171 runs PPI platform -New DENOmination Group profile -Passkey-themed campaign -CEO impersonation campaign... — @campuscodi@mastodon.social
-US and UK to work on fighting cyber scams -UK has a new NCF lead -ENISA gets Mythos access -China forms new anti-scam... — @campuscodi@mastodon.social
-US police warn officers of Meta glasses -Discord brings back age verification -Major Windows 11 UI updates are coming... — @campuscodi@mastodon.social
-Anthropic agents went hacking again -Three Turkish ministers targeted with spyware -CISA is ready to hire 250 staff. — @campuscodi@mastodon.social
JFrog Artifactory Vulnerabilities Actively Exploited in the Wild to Gain Administrative Control — Cyber Security News
Okta Fixes Auth0 and Access Gateway Flaws Enabling XSS, Auth Bypass, and SQL Injection — Cyber Security News
Hackers Can Hide Malicious AI Commands Inside Normal English to Bypass Security Filters — Cyber Security News
Microsoft Investigating Microsoft 365 Copilot Access Issues Under Incident CP1470554 — Cyber Security News
Harley-Davidson Alleged Breach – CL0P Ransomware Adds Motorcycle Maker to the List — Cyber Security News
Top 10 Best CNAPP (Cloud-Native Application Protection) Platforms in 2026 — Cyber Security News
Top 10 Best Enterprise Browsers in 2026 — Cyber Security News
Mapping detections and controls to MITRE ATT&CK — securityboulevard.com (discovered)