Russian Hackers Exploit Exchange OWA Zero-Day to Deploy OWAReaper Backdoor
Laundry Bear is exploiting a zero-day XSS flaw in Exchange OWA to deploy the OWAReaper backdoor, enabling persistent mailbox access that survives credential res
ToolsThreat Intelligence Feed
-
-
GitHub and PyPI Add Time-Based Defenses Against Supply Chain Attacks
GitHub has added a 72-hour Dependabot cooldown, while PyPI now blocks new files added to releases older than 14 days.
Threats -
CTM360: Insurance Phishing Kits Now Hijack Accounts in Real Time
CTM360 research exposes a phishing kit targeting insurance portals with real-time OTP interception and live session hijacking across multiple regions.
Threats -
Check Point Patches Actively Exploited Authentication Bypass CVE-2026-16232
Check Point has patched three vulnerabilities, including a critical actively exploited authentication bypass in SmartConsole. CISA has added the flaw to its KEV
Tools -
Google Adds Selfie Video as Account Recovery Option
Google has introduced an opt-in selfie video feature for account recovery. It uses facial comparison to verify identity when users are locked out.
Tools -
Flock License Plate Cameras: Misidentification, Tracking, and Abuse
A viral incident exposes how Flock's camera network wrongly tracked a writer using partial plate matching, while police use the system to surveil people, not ju
Threats
Analysis & Guides
VPN & Privacy
GoldenEyeDog Subgroup CylindricalCanine Linked to April 2026 DigiCert Breach
Expel attributes the April 2026 DigiCert certificate theft to CylindricalCanine, a subgroup of Chinese cybercrime group GoldenEyeDog using Golden Gh0st RAT.
VPN & Privacy
Forgotten UEFI Shims Undermine Secure Boot on Most UEFI Systems
ESET found 11 old UEFI shims that bypass Secure Boot on most UEFI systems. Microsoft revoked the vulnerable binaries in the June 2026 Patch Tuesday update.
Guides
Microsoft Patches Record 570 Security Flaws in July Patch Tuesday
Microsoft fixed 570 vulnerabilities in July's Patch Tuesday, nearly triple last month's record. AI-assisted discovery is driving the surge in patch volume.
Guides
OpenAI Temporarily Relaxes GPT-5.6 Sol Usage Limits
OpenAI is temporarily lifting GPT-5.6 Sol's five-hour usage cap for Plus, Pro, and Business plans and issuing a one-time usage reset.
Guides
Injective Labs npm Package Hijacked to Steal Crypto Wallet Keys
Attackers compromised the Injective Labs GitHub repository to publish a malicious npm package that exfiltrates private keys and mnemonic phrases.
Guides
Cybersecurity and the Gap Between Skill and Ability
AI is rapidly widening the gap between skill and ability in cyberattacks. The same tools that strengthen defense also enable harm.
Threats
North Korean PolinRider Campaign Publishes 108 Malicious Packages Across Registries
North Korea's Contagious Interview campaign has published 108 malicious packages across npm, Packagist, Go, and Chrome in an active supply chain operation calle
Guides
Seven Unpatched Flaws Disclosed in Embedded FAT Filesystem Library FatFs
Security firm runZero disclosed seven vulnerabilities in FatFs, a filesystem library embedded in cameras, drones, and industrial controllers. No upstream fix ex
Tools
CISA Warns CVE-2026-45659 Microsoft SharePoint RCE Flaw Actively Exploited
CISA has added a high-severity Microsoft SharePoint RCE flaw to its KEV catalog. Federal agencies must patch by Saturday under BOD 26-04.