7+ hour, 43+ min ago   (300+ words) Lazarus has steadily upgraded FudModule’s delivery mechanism over four years, and the trajectory tells its own story about how APT groups adapt to defender countermeasures. FudModule is the most documented example of an “EDR-killer” rootkit, but it sits inside a…...

9+ hour ago   (276+ words) iOS 18.7.10 and iPadOS 18.7.10, released August 17, 2026, list on the order of 120 CVE entries across more than 30 components, according to Apple’s own support article at support.apple.com/en-us/148287. The release is available for exactly four devices: iPhone XS, iPhone XS Max,…...

1+ hour, 16+ min ago   (129+ words) CVE-2026-15409 chained SSRF and code injection to achieve root on SMA1000 appliances, stealing TOTP MFA seeds and turning the VPN gateway into a persistent surveillance platform. CISA flagged it for ransomware exploitation. We covered the second chain but never the first…...

8+ hour, 39+ min ago   (1541+ words) 1. Basic Information Original Title: Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent Source: BleepingComputer, Dutch NCSC, Check Point Published Date: 2026-09-12 Severity: High Basis for Severity: Both CVSS 9.8 vulnerabilities allow unauthenticated remote code execution. Although the reference materials do…...

16+ hour, 50+ min ago   (1081+ words) Part 1 of a series on building an enterprise-grade Security Operations Center at home. Start with Part 0 if you haven’t. In Part 0 I made a claim: you can build a real, operating Security Operations Center on a home network, and the…...

1+ day, 23+ hour ago   (602+ words) Multiple espionage groups have been using a new exploit kit dubbed BlueMoon in seemingly opportunistic and rushed deployments, cybersecurity firm Proofpoint reports. The China-linked APT Violet Typhoon (also tracked as APT31, JungleBamboo, TA412, and Tide Castle) was the first to use it…...

1+ day, 13+ hour ago   (603+ words) JFrog Artifactory instances continue to get hit hard. Multiple attackers are exploiting three JFrog Artifactory bugs to gain administrative control over vulnerable instances - in some cases, just days after the vendor published a patch - and then using this illicit access…...

3+ day, 18+ hour ago   (590+ words) Silicon Motion Technology Corporation (NasdaqGS: SIMO), a global leader in designing and marketing NAND flash controllers for solid-state storage devices, today announced that it has earned ISO/SAE... TAIPEI, Taiwan & MILPITAS, Calif.--(BUSINESS WIRE)--Sep 9, 2026-- Silicon Motion Technology Corporation (NasdaqGS:…...

2+ day, 10+ hour ago   (642+ words) A new exploit kit is revealing the perils of the “patch later” mentality. According to the Proofpoint Threat Research team, espionage-motivated threat actors are using a new malicious toolkit to chain together four separate Chrome browser and Microsoft Windows vulnerabilities…...

2+ day, 12+ hour ago   (137+ words) Joint testing using Ensign’s proprietary AI assessment tool to identify new attack variations, enabling TrendAI™ to rapidly enhance protection coverage The exercise demonstrates an increasingly important consideration for cyber defence: stopping one attack attempt may no longer be sufficient when…...