Seven Unpatched Flaws Disclosed in Embedded FAT Filesystem Library FatFs
Security firm runZero disclosed seven vulnerabilities in FatFs, a filesystem library embedded in cameras, drones, and industrial controllers. No upstream fix ex
GuidesThreat Intelligence Feed
-
-
CISA Warns CVE-2026-45659 Microsoft SharePoint RCE Flaw Actively Exploited
CISA has added a high-severity Microsoft SharePoint RCE flaw to its KEV catalog. Federal agencies must patch by Saturday under BOD 26-04.
Tools -
Ukraine and FBI Uncover Russian Intelligence Messaging Account Hack Campaign
Russia targeted Signal and WhatsApp accounts of officials and activists across Ukraine, Europe, and the U.S. via SMS phishing posing as platform support bots.
Guides -
AI Liability: Why Companies Must Own Their Agents' Actions
A German court ruled Google liable for AI search summaries, reigniting the carrier-vs-publisher debate and raising urgent questions about corporate accountabili
Threats -
Webinar: Stopping Account Takeovers With Behavioral AI
BleepingComputer hosts a July 8, 2026 webinar on account takeover threats and how behavioral AI can automate detection and response.
Guides -
Tata Electronics Confirms Cyberattack as World Leaks Group Publishes Data
Tata Electronics confirmed a cyberattack on parts of its IT infrastructure. The World Leaks group leaked alleged Apple manufacturing data stolen in the incident
Threats
Analysis & Guides
Tools
AryStinger Botnet Infects 4,000+ D-Link Routers Worldwide
The AryStinger botnet has compromised over 4,000 outdated routers, converting them into proxies for scanning, tunneling, and malicious traffic operations.
VPN & Privacy
AutoJack: How One Web Page Can Trigger RCE via AI Agent
Microsoft's AutoJack exploit chain turns an AI browsing agent into an RCE vector via an unauthenticated local WebSocket in AutoGen Studio.
Guides
Gentlemen Ransomware Deploys Multiple EDR Killers to Disable Defenses
The Gentlemen RaaS group maintains a suite of EDR-killing tools, led by GentleKiller, targeting over 400 processes across 48 security vendors.
VPN & Privacy
Protecting Legacy OT Systems Against Modern Cyberthreats
Legacy OT systems in manufacturing face growing cyber risks as IT/OT convergence expands attack surfaces. Visibility, architecture, and long-term support are ke
Guides
EvilTokens Phishing Kit Hijacks Microsoft 365 Without Stealing Passwords
EvilTokens abuses Microsoft's OAuth device code flow to compromise accounts without fake login pages or stolen passwords, bypassing 2FA entirely.
Tools
Sniper DZ PhaaS Platform Targets MENA Users via Facebook Scams
Group-IB researchers detail how Sniper DZ campaigns targeted MENA users through fake Facebook accounts, browser notification abuse, and traffic monetization sch
VPN & Privacy
400+ Arch Linux AUR Packages Hijacked to Deploy Credential Stealer
Attackers hijacked over 400 AUR packages to install a Rust-based credential stealer. Systems built from affected packages since June 11 should be treated as com
Guides
INTERPOL Operation Ramz Dismantles Sniper Dz Phishing-as-a-Service Platform
INTERPOL's Operation Ramz disrupted Sniper Dz, a decade-old PhaaS platform, resulting in 201 arrests across 13 MENA countries and the takedown of its infrastruc
VPN & Privacy
ServiceNow Flaw Exploited to Access Customer Instance Tables
ServiceNow patched a flaw on June 5, 2026 after threat actors exploited it to query instance tables across a subset of customers.