Serial number: AV26-1077 Date: October 22, 2026 As of October 21, 2026, Splunk is affected by vulnerabilities in the following…
1 min Open reportHackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals…
1 min Open reportThe issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit…
1 min Open reportWelcome to this week’s edition of the Threat Source newsletter. Here for the latest on the PHP vulnerabilities? Head on down to…
1 min Open reportEight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and…
1 min Open reportUnit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments.
1 min Open reportA Chinese government-aligned hacking group used automated tools to carry out the recent supply chain attack on IT management…
1 min Open reportIntroductionIn September 2026, Zscaler Threat Hunting identified an SEO poisoning campaign that used fake websites impersonating…
1 min Open reportSerial number: AV26-1076 Date: October 22, 2026 As of October 20, 2026, Atlassian is affected by vulnerabilities in the following…
1 min Open reportKate Pundyk, Siena Anstis, and Marcus Michaelsen write about the rise of AI-enabled digital transnational repression in their…
1 min Open reportSOCRadar Threat Intelligence Unit (STRU) researchers found PHP2Shell exploit tooling on an attacker-controlled server whose…
1 min Open reportMicrosoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have…
1 min Open reportHuntress examines 3 phishing kits that hand beginner attackers everything they need to steal tokens. See what the attacks look…
1 min Open reportAWS detected PHP2Shell exploit attempts four days before disclosure, highlighting the risk of attackers exploiting critical flaws…
1 min Open reportCorey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.
1 min Open reportThe warnings are everywhere these days. Don’t click this. Don’t open that.
1 min Open reportAttackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce…
1 min Open reportThe EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks
1 min Open reportINTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered…
1 min Open reportOrganizations are bringing threat hunting back in-house, with outsourced hunting dropping to 18% in the 2026 SANS Threat Hunting…
1 min Open report
