Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

July 27, 2026 at 10:46PM Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-ba…

How to Bring SQL Database Out of Emergency Mode | Complete Guide

July 27, 2026 at 05:20PM Emergency Mode is a state of SQL database that allows read only access even if it is corrupted. You can…

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

July 27, 2026 at 04:21PM The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian t…

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

July 27, 2026 at 01:31PM GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three da…

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

July 26, 2026 at 12:18AM A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows execut…

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

July 25, 2026 at 03:23PM The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platfo…

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

July 25, 2026 at 02:04PM Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit that …

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

July 24, 2026 at 12:28PM Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for …

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

July 24, 2026 at 12:20PM The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign that involves the…

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

July 24, 2026 at 12:06AM A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown …

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

July 23, 2026 at 12:04PM Check Point has released security updates to address multiple vulnerabilities impacting Security Managem…

GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

July 23, 2026 at 12:07AM Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity le…