BLAHALLA
RSS
  1. Five months of industrial-protocol traffic to our honeypots
    honeylabs.net ·
  2. Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239)
    blog.paradoxis.nl ·
  3. Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25
    slcyber.io ·
  4. Chrome 150 Update Patches Severe Memory Safety Bugs
    www.securityweek.com ·
  5. SOCs face a human challenge as AI speeds alerts and threats
    www.csoonline.com ·
  6. U.S. Charges Three Russian Nationals Over International Cyberattacks Costing Victims More Than $62 Million
    gbhackers.com ·
  7. Claude Mythos FAQ: Capabilities, access, competitors, implications
    www.csoonline.com ·
  8. PENTDEM AI Pentesting Daemon Uses 34 Security Tools to Automate WAF Bypass and Attack Chains
    gbhackers.com ·
  9. Weekly Cybersecurity Newsletter – The 50 Biggest Cybersecurity Stories – Microsoft Patch, AI Attack, Exploits Releases, Data Breaches & More
    gbhackers.com ·
  10. GoldenEyeDog Threat Group Behind DigiCert Code-Signing Certificate Attack
    gbhackers.com ·
  11. Kimai Docker Vulnerability Exposes Default APP_SECRET, Enabling Account Takeover
    gbhackers.com ·
  12. North Korean Contagious Interview Campaign Hides OTTERCOOKIE Malware in SVG Images
    gbhackers.com ·
  13. Furtex Linux Toolkit Uses io_uring and eBPF to Bypass EDR and Falco Detection
    gbhackers.com ·
  14. World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
    thehackernews.com ·
  15. WP2Shell WordPress Vulnerabilities Exploited in the Wild
    www.securityweek.com ·
  16. SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
    thehackernews.com ·
  17. Hugging Face Security Breach Exposes Internal Datasets, Credentials, and Tokens
    gbhackers.com ·
  18. wp2shell: a defender’s guide (CVE-2026-63030 + CVE-2026-60137) with a list of forensic artifacts, a compromise scanner WordPress plugin and a free Chrome/Edge/Firefox browser extension to in-browser check if a website has been patched.
    research.eye.security ·
  19. Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
    thehackernews.com ·
  20. Hackers abuse ViPNet software to target Russian govt agencies
    www.bleepingcomputer.com ·
  21. UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware
    thehackernews.com ·
  22. SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
    thehackernews.com ·
  23. Politicians Are Trying to Change What Chatbots Say About Them
    www.nytimes.com ·
  24. The ‘Bad Blood’ Between Polymarket’s Shayne Coplan and Kalshi’s Tarek Mansour
    www.nytimes.com ·
  25. wp2shell (CVE-2026-63030) update: public working exploit now available for the WordPress core pre-auth RCE
    ransomnews.com ·
  26. Multiple Chinese civic apps share one reward/lottery backend whose signing secret is recoverable
    neurowinter.com ·
  27. wp2shell (CVE-2026-63030): Pre-Auth RCE Chain in WordPress Core - Analysis and Open-Source Scanner
    fullhunt.io ·
  28. Update now: 7-Zip fixes RCE flaw exploitable with malicious archives
    www.bleepingcomputer.com ·
  29. Pixels to Payload: Dissecting a Four-Stage Bitmap-Steganography Dropper Delivering AsyncRAT :: Rhys Downing
    blog.threatuniverse.co.uk ·
  30. WordPress Core "wp2shell" RCE flaws get public exploits, patch now
    www.bleepingcomputer.com ·
  31. Your ‘Live’ World Cup Broadcast Is Not Really Live
    www.nytimes.com ·
  32. Microsoft warns of surge in ACR Stealer attacks on customers
    www.bleepingcomputer.com ·
  33. The Future of Age Verification: Your Face Never Leaves Your Device
    www.bleepingcomputer.com ·
  34. How data centers became a symbol of Americans’ rage
    www.washingtonpost.com ·
  35. Critical WordPress Core Flaw Lets Anonymous Hackers Gain Remote Code Execution
    gbhackers.com ·
  36. EY Data Breach – Hackers Access Third-Party IT Support Platform and Steal Client Tax Documents
    gbhackers.com ·
  37. Source Code Analysis: A Pentester's Guide
    www.vulnsy.com ·
  38. OpenSSL DoS Vulnerability Lets Remote Attackers Exhaust Server Memory With an 11-Byte Payload
    gbhackers.com ·
  39. Citrix Secure Access Client Flaw Lets Low-Privileged Windows Users Gain SYSTEM Privileges
    gbhackers.com ·
  40. White House launches AI-driven "Gold Eagle" clearinghouse to centralize public-private vulnerability coordination
    www.whitehouse.gov ·
  41. [ Removed by Reddit ]
    www.reddit.com ·
  42. Google’s Gemini lets strangers send messages from your locked Android phone
    www.bitdefender.com ·
  43. 23andMe Agrees to $18M Settlement With 43 States Over 2023 Data Breach
    www.techrepublic.com ·
  44. New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
    thehackernews.com ·
  45. Friday Squid Blogging: Squid Washing Up on Cape Cod Beach
    www.schneier.com ·
  46. Abbott Laboratories probes two cyber incidents amid extortion claims
    www.bleepingcomputer.com ·
  47. Microsoft’s ‘Project Perception’ Could Challenge Anthropic’s Mythos in AI Security
    www.techrepublic.com ·
  48. OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
    thehackernews.com ·
  49. China’s Moonshot AI Unveils Kimi Model, Threatening America’s Lead
    www.nytimes.com ·
  50. Inc Ransomware Exploits SonicWall SMA Zero-Days
    www.darkreading.com ·